Privacy Policy

Lumavir is a UK beauty-technology retailer based at Kiln House, 14 St. Thomas Street, Bristol BS1 6WL, United Kingdom. We sell at-home devices such as LED face masks, microcurrent facial devices and hair-styling tools. We are the data controller for the personal data described in this policy. For any privacy request, email info@lumavir.com.

• Contact and order details: name, email address, delivery address and phone number.
• Payment information, processed securely by our payment provider (we never see or store full card numbers).
• Order history and the products you have bought or browsed.
• Communications you send us, such as support or returns enquiries.
• Technical and usage data such as IP address, device and browser type, and pages visited, collected through cookies and analytics.

• To process, fulfil and deliver your orders and provide customer support.
• To send order confirmations and dispatch and delivery updates.
• To handle returns, refunds and the 30-day satisfaction guarantee.
• To send marketing emails where you have given consent (you can unsubscribe at any time).
• To improve our website, products and service, and to keep the store secure and prevent fraud.
• To meet our legal, tax and accounting obligations.

• Contract: to take and fulfil your order and provide support.
• Consent: for marketing emails and non-essential cookies, which you can withdraw at any time.
• Legitimate interests: to run, secure and improve the store, balanced against your rights.
• Legal obligation: to keep records required by tax and consumer law.

Card payments, including Apple Pay and Google Pay, are handled by our payment processor, Stripe. Your card details are sent directly to Stripe over an encrypted connection under their PCI-compliant systems and are not stored on Lumavir’s servers.

We share personal data only as needed to run the store: with delivery partners to ship your order, with Stripe to take payment, and with the technology providers that host our website and store our data on our behalf. These providers act under contract and may not use your data for their own purposes. We do not sell your personal data.

Some of our providers may process data outside the UK. Where they do, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision, so your data stays protected.

We use cookies and similar technologies to keep the site working (for example, remembering your basket) and to understand how the site is used so we can improve it. You can control or block cookies through your browser settings; blocking essential cookies may affect how the store works.

We keep personal data only as long as needed for the purposes above or to meet legal obligations, then securely delete or anonymise it.

Lumavir is intended for customers aged 18 and over. We do not knowingly collect personal data from children.

Under UK GDPR you have the right to access your data, to correct or erase it, to restrict or object to its use, to data portability, and to withdraw consent at any time. To exercise any of these rights, email info@lumavir.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

We may update this policy from time to time. The “last updated” date above always reflects the current version, and material changes will be highlighted on this page. For our wider terms, see our terms of service.