Privacy policy

1. Who we are

This Privacy Policy explains how Luxus Home & Garden collects, uses, shares and protects your personal data when you visit our website, contact us, or buy from us. It also explains your rights and how to exercise them.

For the purposes of UK data protection law, the data controller is Luxus Home and Garden Limited, a company registered in England and Wales (company number 12728517), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner’s Office (ICO) under reference ZA026178.

If you have any questions about this policy or how we handle your data, please contact us at info@luxushomeandgarden.com or by post at the address above.

2. The personal data we collect, and why

We collect personal data in the ways set out below. “Personal data” means any information that can identify you. The tables show what we collect, why, and the legal basis we rely on under UK GDPR.

Device and usage data

Data

Purpose

Lawful basis

Browser type and version, IP address, time zone, device and cookie identifiers, pages and products viewed, search terms, and how you interact with the site.

To operate and secure the site, remember your preferences, and – with your consent – to analyse usage and deliver relevant advertising.

Consent (for non-essential cookies); legitimate interests (site operation and security).

Order and account data

Data

Purpose

Lawful basis

Name, billing and delivery address, email address, phone number, order history and payment details (payment card data is handled by our payment providers).

To process and deliver your order, take payment, provide invoices and order updates, manage your account, screen for fraud, and provide customer support.

Performance of a contract; legal obligation (tax and accounting); legitimate interests (fraud prevention).

Customer support data

Data

Purpose

Lawful basis

Your name, contact details, and the contents of your enquiry or correspondence with us.

To respond to your questions and resolve issues.

Performance of a contract; legitimate interests (responding to enquiries).

 

Marketing data

Data

Purpose

Lawful basis

Your contact details and marketing preferences, and information about how you engage with our communications and ads.

To send you offers and updates about our products, and to deliver and measure advertising.

Consent; or legitimate interests (existing-customer marketing under the PECR “soft opt-in”).

3. How we use your data

We use your personal data to:

     fulfil your orders, take payment and arrange delivery;

     manage your account and provide customer support;

     prevent and detect fraud and keep the site secure;

     meet our legal and regulatory obligations, including keeping accounting records;

     send you marketing where you have consented or where we are permitted to do so (see section 4); and

     understand and improve how our site and products perform.

4. Marketing and advertising

We may send you marketing by email or other channels. Where the law requires it, we will only do so with your consent. If you are an existing customer, we may send you information about similar products under the “soft opt-in”, and you can opt out at any time – every message includes an unsubscribe link, and you can also email us.

Audience matching and advertising partners

To make our advertising more relevant and to measure how well it performs, we may share a limited set of your contact details (such as your name, email address, postal address or phone number) with advertising and measurement partners. This includes broadcasters and their data-matching providers – for example, Sky – so that adverts can be targeted to, and measured against, relevant audiences across television and online channels, and so that campaign results can be reported back to us.

Where this matching is carried out, your data is pseudonymised by the partner and used only to perform the matching and reporting. Where this activity relies on cookies or similar technologies on your device, we will ask for your consent first (see section 5). You can object to this use of your data, or withdraw your consent, at any time by contacting us or using the controls in our cookie banner.

5. Cookies and similar technologies

Cookies are small files placed on your device. We use strictly necessary cookies to run the site (for example, to manage your basket and checkout), and – only with your consent – analytics and advertising cookies and similar technologies (including pixels and tags from partners such as Google, Meta and Pinterest, and the advertising and measurement partners described in section 4).

When you first visit our site, you will see a cookie banner. Non-essential cookies are not set until you accept them. You can accept all, reject all non-essential cookies, or choose which categories to allow, and you can change your choices at any time through the “Cookie settings” link on our site.

The cookie categories we use are:

     Strictly necessary – required for the site to function (these do not need consent).

     Performance and analytics – help us understand how the site is used.

     Advertising and targeting – used to deliver and measure advertising, including the audience matching described in section 4.

     Functional – remember your preferences and improve your experience.

Most cookies expire between 30 minutes and 24 months after they are set. Blocking cookies may affect how parts of the site work.

6. Who we share your data with

We share your personal data with the following categories of recipient, only as needed and under appropriate contracts:

     Technology and hosting providers – our store is hosted on Shopify, which processes data on our behalf;

     Payment and finance providers – card processors and our finance partners (for example Klarna, Clearpay, and Payl8r / Dopple (Social Money Ltd)) to process payments and offer finance options;

     Delivery and logistics partners – to deliver your order;

     Marketing, analytics and advertising partners – including Google, Meta and Pinterest, and the advertising and measurement partners described in section 4 (such as Sky);

     Professional advisers and authorities – where we are required to comply with the law, respond to a lawful request, or protect our rights.

We do not sell your personal data.

7. International transfers

Some of our providers process data outside the UK, including in the United States and other countries. Our hosting provider Shopify may process data in countries such as Canada and the United States, and some of the advertising and measurement partners described in section 4 are based outside the UK.

Where we or our partners transfer your data outside the UK, we rely on appropriate safeguards – such as UK “adequacy” regulations, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses – so that your data continues to be protected to UK standards.

8. How long we keep your data

We keep your personal data only for as long as we need it for the purposes set out in this policy, and to meet our legal obligations. Our general retention periods are:

Type of data

How long we keep it

Order and transaction records (including invoices)

Six years after the end of the financial year of your last order, to meet tax and accounting requirements.

Account data

While your account is active, and up to 24 months after your last activity, after which it is deleted or anonymised.

Marketing data and preferences

Until you withdraw consent or object; inactive contacts are reviewed and removed after 24 months of no engagement.

Customer support correspondence

Up to 24 months after your query is resolved.

Cookie and analytics data

As set out in section 5; most cookies expire within 24 months.

9. Your rights

Under UK data protection law you have the right to:

     access the personal data we hold about you;

     have inaccurate data corrected;

     have your data erased in certain circumstances;

     restrict how we process your data in certain circumstances;

     object to processing based on our legitimate interests;

     object to direct marketing at any time – this is an absolute right;

     receive your data in a portable format (data portability);

     withdraw your consent at any time, where we rely on consent; and

     not be subject to a decision based solely on automated processing that has a legal or similarly significant effect on you.

To exercise any of these rights, contact us at info@luxushomeandgarden.com. We will respond within one month. Exercising your rights is free, and we will not treat you differently for doing so.

10. Automated decision-making and profiling

We do not make decisions that have a legal or similarly significant effect on you based solely on automated processing. Our payment provider uses limited automated checks to prevent fraud (for example, temporarily blocking IP addresses or cards linked to suspicious activity); these do not have a legal or similarly significant effect on you.

We do use profiling for marketing – for example, grouping audiences so that advertising is more relevant (see section 4). You can object to this at any time.

11. How to make a complaint

If you are unhappy with how we have handled your personal data, please contact us first at info@luxushomeandgarden.com so we can try to put things right. We will acknowledge your complaint within five working days and aim to give you a full response within one month.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk/make-a-complaint, by calling 0303 123 1113, or by post to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

12. Changes to this policy

We may update this policy from time to time to reflect changes to our practices or for legal, operational or regulatory reasons. When we make material changes, we will update the date below and, where appropriate, let you know.

Last updated: 19 June 2026