Privacy Policy

Lumavir is the trading name of Lumavir Ltd, a UK beauty-technology retailer registered in England and Wales (company no. 17164922), registered office Flat 45 Kiln House, 14 St. Thomas Street, Bristol, BS1 6WL. We sell at-home devices such as LED face masks, microcurrent facial devices and hair-styling tools. We are the data controller for the personal data described in this policy. For any privacy request, email [email protected].

• Contact and order details: name, email address, delivery address and phone number.
• Payment information, processed securely by our payment provider (we never see or store full card numbers).
• Order history and the products you have bought or browsed.
• Communications you send us, such as support or returns enquiries.
• Technical and usage data such as IP address, device and browser type, and pages visited, collected through cookies and analytics.

• To process, fulfil and deliver your orders and provide customer support.
• To send order confirmations and dispatch and delivery updates.
• To handle returns and refunds within our 14-day returns window.
• To reply to messages you send through our contact form, and to send a short confirmation that we received it.
• To send marketing emails where you have given consent through our newsletter sign-up (you can unsubscribe at any time).
• To improve our website, products and service, and to keep the store secure and prevent fraud.
• To meet our legal, tax and accounting obligations.

• Contract: to take and fulfil your order and provide support.
• Consent: for marketing emails and advertising cookies, which you can withdraw at any time.
• Legitimate interests: for Google Analytics site statistics, which you can opt out of at any time (see Cookies below).
• Legitimate interests: to run, secure and improve the store, balanced against your rights.
• Legal obligation: to keep records required by tax and consumer law.

Card payments, including Apple Pay and Google Pay, are handled by our payment processor, Stripe. Your card details are sent directly to Stripe over an encrypted connection under their PCI-compliant systems and are not stored on Lumavir’s servers.

We share personal data only as needed to run the store: with delivery partners to ship your order, with Stripe to take payment, with Resend to deliver our emails (contact-form replies, order and newsletter emails), and with the technology providers that host our website and store our data on our behalf. These providers act under contract and may not use your data for their own purposes. After an order, Google may offer you an optional survey through Google Customer Reviews; if you choose to take part, your order number, email address, delivery country and estimated delivery date are shared with Google, which runs the survey under its own privacy policy. We do not sell your personal data.

Some of our providers may process data outside the UK. Where they do, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision, so your data stays protected.

We use essential cookies to keep the site working (for example, remembering your basket). These need no consent.

We use Google Analytics 4 to count visits and orders and see which pages are useful, so we can improve the store. Google processes this data for us. We use it only for statistics about this site, never for advertising, and Google signals and ad personalisation are off in Analytics. Under the UK statistical purposes exception (PECR as amended by the Data (Use and Access) Act 2025) these cookies (_ga, _ga_*, kept up to 24 months) need no prior consent, but you can opt out free at any time with the button below. In the EU, EEA and Switzerland they only run after you accept.

If you accept in the cookie banner, Google Ads, Microsoft Clarity and Pinterest may also set cookies to measure and improve our advertising and site. Rejecting leaves those off. You can also block cookies in your browser settings; blocking essential cookies may affect how the store works.

We keep personal data only as long as needed for the purposes above or to meet legal obligations, then securely delete or anonymise it.

Lumavir is intended for customers aged 18 and over. We do not knowingly collect personal data from children.

Under UK GDPR you have the right to access your data, to correct or erase it, to restrict or object to its use, to data portability, and to withdraw consent at any time. To exercise any of these rights, email [email protected]. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

We may update this policy from time to time. The “last updated” date above always reflects the current version, and material changes will be highlighted on this page. For our wider terms, see our terms of service.