Privacy policy
Last updated: Juli 2026
This Privacy Policy describes how Lumdal collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from lumdal.com or otherwise communicate with us (collectively, the Services). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.
WHO WE ARE
Lumdal Design is the data controller responsible for determining how and why your personal information is collected and used through this Site, which means we are the party legally accountable for making sure your information is handled appropriately and in line with the practices described throughout this policy.
Contact: info@lumdal.com
CHANGES TO THIS PRIVACY POLICY
We may, from time to time, update, revise, or otherwise amend this Privacy Policy in order to reflect changes to the way we operate our business, changes to the tools and services we use, or for other legal, regulatory, or operational reasons that we consider necessary, and whenever we do so, we will update the "Last updated" date shown above so that you can always tell when the policy was most recently changed.
INFORMATION WE COLLECT
Directly from you, we collect a range of contact details, such as your full name, your email address, your postal or delivery address, and your phone number, along with order-related details including your billing address, your shipping address, confirmation of any payments you have made, and a record of your order history over time; if you choose to create an account with us, we also collect the account details you provide; and, in addition, we collect anything you choose to send us directly, including messages, questions, or concerns you share with our customer support team.
Automatically, through the use of cookies and other similar tracking technologies, we collect information about the device and browser you are using, your IP address, the specific pages you visit while browsing our Site, and general information about how you interact with and move through our Site over the course of your visit. This also includes advertising identifiers that are collected via the Meta Pixel, which is installed and connected to our Site through Trackbee, and which we use specifically to help us measure, understand, and gradually improve the performance of our advertising on Meta's platforms.
3From third parties who help us operate and maintain the Site, we receive certain information as well, including from Shopify, which is the e-commerce platform we use to run our store and which also processes payments on our behalf through Shopify Payments; from Meta, through the combination of the Meta Pixel and the Trackbee integration; and from Klaviyo, which is the email marketing platform we use to communicate with our customers and subscribers.
HOW WE USE YOUR INFORMATION
We use the information we collect in order to process your orders accurately, to handle your payments securely, and to arrange for your deliveries to be fulfilled as expected; to provide you with helpful and responsive customer support whenever you reach out to us; to send you marketing emails through Klaviyo, but only in cases where you have clearly agreed to receive them, and always while giving you the ability to unsubscribe at any time you choose; to measure, evaluate, and continually improve the performance of our advertising through the use of the Meta Pixel; to help us detect, investigate, and prevent any fraudulent or otherwise harmful activity; and, more generally, to make sure that we remain in compliance with any legal obligations that apply to our business.3
LEGAL BASIS FOR PROCESSING
Depending on the specific activity in question, we rely on a number of different legal bases to justify our processing of your personal information. We rely on contract as our legal basis when we need to process your order and deliver the products you have purchased from us. We rely on your consent specifically when it comes to sending marketing emails and when it comes to using non-essential cookies or other tracking technologies, and in every such case you remain free to withdraw that consent at any point in time. We rely on our legitimate interests where the processing relates to preventing fraud or to improving and maintaining the overall quality of our Site. And, finally, we rely on legal obligation in situations where we are required, under applicable law, to keep certain records, such as those needed for tax and accounting purposes.4
COOKIES
We make use of cookies and other broadly similar technologies in order to run our Site effectively, which we do primarily through Shopify, and also in order to remember your preferences from one visit to the next, and, in cases where you have given your consent, to measure and evaluate the performance of our advertising through the Meta Pixel. You are entitled to control, limit, or entirely withdraw your cookie consent at any time by adjusting the relevant settings within your browser, although you should be aware that choosing to block cookies may, in some cases, affect the way certain parts of our Site function for you.
HOW WE SHARE YOUR INFORMATION
We share certain categories of personal information with a limited number of third parties for specific and legitimate purposes. This includes Shopify, which helps us run our store and process payments securely; Meta, through the Meta Pixel and the Trackbee integration, specifically for the purpose of measuring advertising performance, and only where you have provided your consent; Klaviyo, which we use to send marketing communications, again only where consent has been given; couriers and other delivery partners, who we rely on to fulfil and deliver your order to you; and, where legally required to do so, law enforcement authorities or other regulators.
We do not, under any circumstances, sell your personal information to third parties.
USER GENERATED CONTENT
Should we introduce features in the future that allow customers to post product reviews or other forms of publicly visible content on our Site, it is important to understand that anything you choose to share within these public areas will become accessible to any other visitor to the Site, without restriction. We are not able to take responsibility for the privacy or the security of any information that you personally choose to make available in this way, nor can we be held responsible for how other individuals may subsequently use, share, or otherwise misuse any content that you post.
THIRD PARTY WEBSITES AND LINKS
From time to time, our Site may contain links directing you to websites, platforms, or services that are operated by third parties, including various social media platforms. We want to be clear that we are not responsible for the privacy practices, security measures, or general conduct of these third parties, and we strongly encourage you to review their own individual privacy policies carefully before you choose to share any personal information with them. The simple fact that a link appears somewhere on our Site should not be taken to mean that we endorse, approve of, or are affiliated with the linked website or the organisation that operates it.
INTERNATIONAL DATA TRANSFERS
Certain of our service providers, including both Meta and Klaviyo, may process your personal information in countries located outside of the United Kingdom. In any situation where this occurs, we take care to rely on legally recognised safeguards, such as the UK's International Data Transfer Agreement, or other equivalent Standard Contractual Clauses where relevant, in order to make sure that your personal information continues to receive an appropriate and adequate level of protection, regardless of where it is processed.
DATA RETENTION
We retain your personal information for only as long as we consider it reasonably necessary in order to fulfil the various purposes outlined throughout this policy, which includes keeping order-related and tax-related records for a period of six years, in line with the general retention requirements set out under UK law.
YOUR RIGHTS
Under UK GDPR, you are entitled to a number of specific rights in relation to the personal information we hold about you. These include the right to access the personal information we currently hold about you; the right to request that we correct any information that is inaccurate or out of date; the right to request that your information be deleted; the right to object to, or to request that we restrict, certain forms of processing; the right to request a copy of your personal information in a portable and commonly used format; and the right to withdraw your consent at any time, in any situation where we are relying on consent as our legal basis for processing.
Should you wish to exercise any of the rights described above, you are welcome to contact us directly at info@lumdal.com.
CHILDREN'S DATA
Our Services have not been designed with children in mind and are not directed towards them, and as a matter of policy we do not knowingly or intentionally collect any personal information belonging to children.
SECURITY
We take what we consider to be reasonable and appropriate technical and organisational measures in order to protect your personal information from unauthorised access, loss, or misuse; however, it is important to understand that no method of data transmission or storage can ever be considered entirely and completely secure.
COMPLAINTS
Should you have any concerns whatsoever regarding the way in which we collect, use, or otherwise handle your personal information, we would ask that you please contact us directly, in the first instance, at info@lumdal.com, so that we can try to resolve the matter with you. You also retain the right, separately from contacting us, to lodge a formal complaint with the United Kingdom's data protection regulator, which is the Information Commissioner's Office, and further information on how to do so can be found at ico.org.uk.
CONTACT
If you have any questions at all about this policy, or about how your personal data is handled more generally, please do not hesitate to send them to us at info@lumdal.com.