Privacy policy
Last updated: May 2026
Lumovex ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you use our website and services.
1. Who We Are
Lumovex is a UK-based company selling red light therapy devices. For data protection purposes, we are the data controller.
Contact: hello@lumovex.co.uk
2. What Data We Collect
When you place an order:
- Name and contact details (email, phone, address)
- Payment information (processed securely by Shopify Payments - we don't store card details)
- Order history and preferences
When you browse our website:
- IP address and device information
- Pages visited and browsing behaviour
- Cookies and similar technologies (see Cookie Policy below)
When you contact us:
- Name, email, and message content
- Any information you choose to provide
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.
3. How We Use Your Data
We use your data to:
- Fulfil orders: Process payments, arrange shipping, send order confirmations
- Customer service: Respond to enquiries, handle returns and warranty claims
- Improve our service: Analyse website usage, optimise user experience
- Marketing: Send promotional emails (only with your consent - you can unsubscribe anytime)
- Legal compliance: Meet tax, fraud prevention, and legal obligations
4. Legal Basis for Processing (GDPR)
We process your data based on:
- Contract: To fulfil orders and provide services you've requested
- Consent: For marketing communications (withdrawable at any time)
- Legitimate interest: To improve our website and prevent fraud
- Legal obligation: To comply with tax and regulatory requirements
5. Data Sharing
We share your data only with:
- Shopify: Our e-commerce platform (hosts our store and processes payments)
- Shipping providers: To deliver your orders
- Email service: To send order confirmations and marketing (if consented)
- Analytics: Google Analytics (anonymised data only)
We never sell your data to third parties.
6. Data Retention
We keep your data for:
- Order records: 7 years (UK tax requirements)
- Marketing contacts: Until you unsubscribe
- Website analytics: 26 months (anonymised)
After these periods, data is securely deleted or anonymised.
7. Your Rights (GDPR)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we use your data
- Portability: Receive your data in a portable format
- Object: Object to processing based on legitimate interest
- Withdraw consent: For marketing, anytime via unsubscribe link
To exercise these rights, email hello@lumovex.co.uk. We'll respond within 30 days.
8. Cookie Policy
Our website uses cookies to:
- Essential: Enable shopping cart and checkout functionality
- Analytics: Understand how visitors use our site (Google Analytics)
- Marketing: Show relevant ads on other platforms (only with consent)
9. Data Security
We protect your data with:
- SSL encryption on all pages
- PCI-compliant payment processing via Shopify
- Secure access controls and monitoring
- Regular security reviews
No system is 100% secure, but we take reasonable measures to protect your information.
10. International Transfers
Some service providers (e.g., Shopify) may process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
11. Children's Privacy
Our website is not intended for children under 16. We don't knowingly collect data from children. If you believe a child has provided us data, contact us immediately.
12. Changes to This Policy
We may update this policy from time to time. Significant changes will be notified via email or website notice. The "last updated" date at the top indicates the latest version.
13. Contact & Complaints
For privacy questions or concerns:
Email: hello@lumovex.co.uk
If you're unsatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):
Website: ico.org.uk
This policy was last reviewed in May 2026.

