top of page

Privacy Policy
Effective Date: 1 September 2026
At LumeNobre ("we", "us", "our"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website www.lumenobre.com (the "Site"), purchase our cat accessories, or interact with us in any other way.
This policy is issued in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are
LumeNobre is a UK-based online retailer of premium cat accessories. We are the data controller for the personal information we process, which means we decide how and why your data is used.
2. Information We Collect
2.1 Information You Provide Directly

  • Account & Profile Data: name, email address, phone number, and delivery address when you create an account or place an order.

  • Order Data: products purchased, order history, payment details (processed securely by our payment providers — we do not store full card details).


  • Communication Data: content of emails, contact forms, live chat messages, and reviews you submit.

  • Marketing Preferences: whether you opt in to receive promotional emails, SMS, or other marketing communications.
     

2.2 Information Collected Automatically

  • Device & Usage Data: IP address, browser type and version, operating system, device identifiers, pages visited, time spent, click patterns, and referring URL.

  • Cookie & Tracking Data: see our Cookie Policy for full details on the cookies we use.

  • Location Data: approximate location derived from your IP address (country/city level only).
     

2.3 Information from Third Parties

  • Payment Providers: Stripe, PayPal, or other payment processors share transaction confirmations and fraud-screening results.

  • Delivery Partners: Royal Mail, Evri, DPD, or similar couriers provide tracking and delivery status updates.

  • Review Platforms: verified review data (e.g., Trustpilot) may be linked to your order.
     

3. How We Use Your Information
We use your personal data only for lawful, fair, and transparent purposes, including:

  • Order Fulfilment: processing payments, dispatching orders, handling returns/refunds, and sending delivery updates.

  • Account Management: maintaining your customer account and wishlist.

  • Customer Support: responding to queries, complaints, and warranty claims.

  • Marketing (with consent): sending promotional offers, new product launches, and cat-care tips via email or SMS.

  • Website Improvement: analysing usage patterns, A/B testing, and optimising the user experience.

  • Fraud Prevention: verifying identity, detecting fraudulent transactions, and protecting against cyber threats.

  • Legal Compliance: meeting UK tax, accounting, and regulatory obligations.
     

4. Legal Basis for Processing (UK GDPR)
We rely on the following legal bases:

  • Contractual Necessity (Art. 6(1)(b)): to fulfil your order and provide the services you requested.

  • Legitimate Interests (Art. 6(1)(f)): for fraud prevention, website security, analytics, and personalised shopping experiences.

  • Consent (Art. 6(1)(a)): for non-essential marketing communications and non-essential cookies.

  • Legal Obligation (Art. 6(1)(c)): for tax reporting and regulatory compliance.
     

5. Sharing Your Information
We do not sell your personal data. We may share it only with:

  • Trusted Service Providers: payment processors, delivery companies, email marketing platforms, and analytics tools acting on our behalf as data processors.

  • Legal Authorities: law enforcement, HMRC, or other regulatory bodies where required by UK law.

  • Business Transfers: if LumeNobre is involved in a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
     

6. International Transfers
Your data is primarily processed within the United Kingdom. If any processor operates outside the UK, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or UK Extension to EU Standard Contractual Clauses.

7. Data Retention
We keep your personal data only for as long as necessary:

  • Order & Transaction Data: retained for 6 years from the date of transaction (as required by HMRC for tax purposes).

  • Account Data: retained while your account is active and for 2 years after your last login, unless you request earlier deletion.

  • Marketing Data: retained until you withdraw consent or unsubscribe.

  • Cookie Data: see Cookie Policy for individual cookie lifespans.
     

8. Your Rights Under UK GDPR
You have the following rights:

  • Right to Access: request a copy of the personal data we hold about you.

  • Right to Rectification: ask us to correct inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): request deletion of your data where there is no compelling reason to continue processing.

  • Right to Restrict Processing: ask us to limit how we use your data in certain circumstances.

  • Right to Data Portability: receive your data in a structured, commonly used, machine-readable format.

  • Right to Object: object to processing based on legitimate interests or for direct marketing.

  • Right to Withdraw Consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

  • Right to Lodge a Complaint: complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.
     

9. Children's Privacy
Our Site is not directed at children under 16. We do not knowingly collect personal data from children under 16. If we discover we have done so inadvertently, we will delete the data promptly.

10. Security
We implement appropriate technical and organisational measures to protect your data, including SSL encryption, secure payment processing (PCI DSS compliant), access controls, and regular security reviews. However, no internet transmission or storage system is 100% secure, and we cannot guarantee absolute security.

11. Automated Decision-Making
We do not use fully automated decision-making that produces legal or similarly significant effects on you. Any fraud-screening is used assistively with human oversight.

12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date". If we make material changes, we will notify you via email or a prominent notice on the Site.

13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us:
 

For ICO complaints: https://ico.org.uk/make-a-complaint/

bottom of page