Privacy policy

Last updated: November 11, 2026

This Privacy Policy explains how Sfen Stores LTD, trading as LumaLean ("we", "us", "our"), collects, uses, and shares personal information when you visit lumalean.shop or buy from us. For the purposes of UK and EU data protection law, Sfen Stores LTD is the data controller.

Sfen Stores LTD (trading as LumaLean)
17 King Edwards Road, Ruislip, HA4 7AE, United Kingdom
Email: contact@lumalean.shop

Information we collect

• Contact and order details: name, email address, phone number, billing and shipping addresses, and the products you order.
• Payment information: processed securely by our payment providers (such as Shopify Payments, PayPal, and card networks). We do not store full card numbers.
• Communications: messages you send us, such as support requests.
• Device and usage information: IP address, browser and device type, pages viewed, referring website, and how you interact with the Store, collected through cookies and similar technologies.

We do not ask for, and you should not send us, health or medical information.

How we use your information

• To process and deliver your orders, take payment, and handle returns and refunds (contract).
• To provide customer support and send service messages about your order (contract and legitimate interests).
• To prevent fraud and keep the Store secure (legitimate interests and legal obligations).
• To improve the Store and understand how it is used (legitimate interests or consent, where required).
• To send marketing emails or texts if you have opted in; you can unsubscribe at any time (consent).
• To measure and show advertising, as described below (consent, where required).
• To comply with tax, accounting, and other legal obligations.

Online behavioral advertising and analytics

We advertise on platforms including Microsoft Advertising (Bing), Google Ads, and Meta. To measure how our ads perform and to show you relevant ads on other websites, we and these partners use cookies, pixels, and similar technologies, including:

• Microsoft Advertising Universal Event Tracking (UET): records actions on our site, such as page views and purchases, so Microsoft can measure ad performance and build remarketing audiences. Learn more in the Microsoft Privacy Statement. You can opt out of personalized ads from Microsoft at account.microsoft.com/privacy/ad-settings.
• Google Ads and Google Analytics: measure ad conversions and site usage. See how Google uses information from sites that use its services. You can manage Google ad personalization at adssettings.google.com and install the Google Analytics opt-out add-on.
• Meta (Facebook and Instagram) Pixel: measures ad performance. Manage your preferences in your Facebook ad preferences.

You can also opt out of interest-based advertising from many companies through the Digital Advertising Alliance, the Network Advertising Initiative, and, in the UK and EU, Your Online Choices. Where required by law, we only set non-essential cookies after you give consent through our cookie banner, and you can change your choices at any time using the "Cookie preferences" link in the footer of our website. We honour Global Privacy Control (GPC) browser signals as a request to opt out of the sale or sharing of personal information where applicable law requires it.

We do not use sensitive information, such as health information, to target advertising.

Do Not Sell or Share My Personal Information

Some US state laws treat the use of advertising cookies as a "sale" or "sharing" of personal information. We do not sell personal information for money. To opt out of the sharing of your information for targeted advertising, use the "Do Not Sell or Share My Personal Information" link in our website footer, enable Global Privacy Control in your browser, or email us.

Who we share information with

• Shopify, which hosts our Store (see the Shopify Privacy Policy).
• Payment processors, shipping carriers, and fulfilment partners, to complete your order.
• Email, customer support, and analytics providers who work on our behalf.
• Advertising partners, as described above.
• Authorities or professional advisers where required by law or to protect our rights.

International transfers

Our service providers may process information outside the UK or EEA, including in the United States. Where this happens, we rely on appropriate safeguards such as adequacy decisions, the UK International Data Transfer Agreement or Addendum, or the European Commission's Standard Contractual Clauses.

How long we keep information

We keep order records for as long as needed for tax and accounting purposes (usually 6 years in the UK), and other information only as long as needed for the purposes above.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent at any time, and to opt out of targeted advertising. To make a request, email contact@lumalean.shop. We will not treat you differently for exercising your rights. If you are in the UK, you can complain to the Information Commissioner's Office (ico.org.uk); in the EU, to your local data protection authority.

Children

Our Store is not intended for anyone under 18, and we do not knowingly collect information from children.

Security

We use reasonable technical and organisational measures to protect your information, but no method of transmission or storage is completely secure.

Changes

We may update this policy from time to time. The "Last updated" date shows when it was last changed.