Privacy Policy (GDPR)
Last updated: 17 September 2026
-
Introduction
LuxeLass (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share and protect information when you visit the LuxeLass website, create an account, place an order or contact us. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. -
Information We Collect
We may collect your name, email address, telephone number, billing and delivery address, order details, account information, communications with us, device information, IP address, browser data, cookie identifiers and information about how you use our website. Payment information is processed securely by our payment providers; LuxeLass does not store complete payment-card details. -
How We Use Your Information
We use personal data to:
• process and deliver orders;
• manage payments, returns, refunds and customer support;
• operate and improve our website;
• prevent fraud and keep our services secure;
• comply with legal and tax obligations;
• send marketing communications where you have consented or where otherwise permitted by law; and
• measure website and advertising performance. -
Legal Bases
Depending on the purpose, we process personal data because it is necessary to perform a contract with you, comply with a legal obligation, pursue our legitimate business interests, or because you have given consent. You may withdraw consent at any time. -
Who We Share Data With
We only share personal data where necessary with service providers that help us run the store, including Wix (website and ecommerce services), Stripe and other payment processors, Syncee, product suppliers, fulfilment partners, couriers, customer-support providers, analytics providers and advertising platforms. Suppliers and couriers receive only the information required to fulfil and deliver your order. We may also disclose information where required by law or to protect our legal rights. -
International Transfers
Some service providers may process data outside the United Kingdom. Where this happens, we use appropriate safeguards recognised under UK data-protection law, such as adequacy regulations or approved contractual protections. -
Cookies, Analytics and Advertising
We use essential cookies to operate the website. With your consent, we may also use analytics and advertising technologies, including services provided by Google, Meta and TikTok when enabled, to understand website usage and measure campaigns. You can manage non-essential cookies through the cookie banner or your browser settings. Withdrawing consent does not affect processing that occurred before withdrawal. -
Data Retention
We keep personal data only for as long as needed for the purposes described in this policy, including order fulfilment, customer support, fraud prevention and legal, accounting or tax requirements. Retention periods vary according to the type of information and applicable law. When data is no longer required, it is deleted or anonymised. -
Security
We use reasonable technical and organisational measures to protect personal data. However, no online service can guarantee absolute security. You are responsible for keeping your account credentials confidential. -
Your Rights
Under UK data-protection law, you may have the right to:
• request access to your personal data;
• ask us to correct inaccurate or incomplete information;
• request deletion of your data;
• restrict or object to processing;
• request transfer of your data in a portable format;
• withdraw consent; and
• complain to the UK Information Commissioner’s Office (ICO).
These rights may be subject to legal conditions and exemptions. To exercise a right, please contact us through the Contact page on this website. We may need to verify your identity before responding. You can learn more or submit a complaint at ico.org.uk.
-
Marketing
You can unsubscribe from marketing emails at any time by using the unsubscribe link in the message or contacting us. Transactional messages relating to orders and customer service are not marketing messages. -
Children
Our website is not intended for children under 16, and we do not knowingly collect personal data from children. -
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices, and you should review their privacy notices separately. -
Changes to This Policy
We may update this policy to reflect changes in our services, suppliers or legal obligations. The latest version will always be published on this page with the updated date. -
Contact
For privacy questions or requests, please use the Contact page on the LuxeLass website.
© 2026 LuxeLass