Legal Document

Privacy Policy

Luxello Ltd is committed to protecting your personal data. This policy explains what we collect, why, on what legal basis, how long we keep it, and the rights you have under the General Data Protection Regulation.

Last revised
29 August 2026
Legislation
Regulation (EU) 2016/679
Data controller
Luxello Ltd
Who We Are EU Representative What We Collect Legal Bases Sharing Transfers Retention Cookies Your Rights Complaints
01

Who We Are

Luxello Ltd is the controller responsible for your personal data. Company number 17037036, registered in England and Wales. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

For any question about this policy or your data, contact privacy@luxello.eu.

02

Our EU Representative

Because Luxello Ltd is established outside the European Union but offers goods to individuals within it, we have appointed a representative in the Union under Article 27 GDPR. You may contact our representative on any matter relating to the processing of your personal data, in addition to or instead of contacting us directly.

Article 27 Representative
Luxello EU — Sidra Cadiz
Calle Urazandi 24, #2A
20870 Elgoibar, Gipuzkoa
Spain
sales@luxello.eu

03

What We Collect

  • Order data — name, delivery and billing address, email address, telephone number, order contents and value.
  • Payment data — transaction reference, payment method and outcome. We never receive or store full card numbers.
  • Customs data — the name, address and consignment details required by law to clear your goods into the European Union.
  • Correspondence — the content of enquiries you send us and our replies.
  • Technical data — IP address, device and browser type, and pages viewed, collected through cookies where you consent.
04

Why We Process It, and On What Basis

  • To perform your contract (Article 6(1)(b)) — processing your order, taking payment, arranging delivery, handling returns and warranty claims.
  • To comply with legal obligations (Article 6(1)(c)) — customs declarations, tax and accounting records, product safety obligations.
  • For our legitimate interests (Article 6(1)(f)) — responding to enquiries, preventing fraud, and securing our website. We balance these against your rights and you may object at any time.
  • With your consent (Article 6(1)(a)) — marketing emails and non-essential cookies. You may withdraw consent at any time without affecting processing already carried out.
05

Who We Share It With

We do not sell your personal data. We share it only with the parties needed to fulfil your order and run our business: delivery carriers and customs brokers, payment processors, our website and email platforms, and our accountants. Each acts under a written contract requiring them to protect your data and to process it only on our instructions.

We may also disclose data where required by law, by a competent authority, or to establish or defend legal claims.

06

International Transfers

Your data is transferred to the United Kingdom, where Luxello Ltd is established, and may be transferred to the United States where we dispatch from our US facility or use a US-based service provider.

Transfers to the United Kingdom take place on the basis of the European Commission's adequacy decision for the United Kingdom. Transfers to the United States take place either to organisations certified under the EU–US Data Privacy Framework or on the basis of the European Commission's standard contractual clauses, together with supplementary measures where required.

You may request a copy of the safeguards applied to any specific transfer by emailing privacy@luxello.eu.

07

How Long We Keep It

Order and invoice records are retained for the period required by applicable tax and accounting law. Customer service correspondence is retained for three years from your last contact. Marketing preferences are retained until you unsubscribe. Cookie data is retained for the periods stated in our cookie banner.

Once a retention period ends, data is securely deleted or irreversibly anonymised.

08

Cookies

We use strictly necessary cookies, which are required for the website and checkout to function and do not require consent. We use analytics and marketing cookies only where you have given consent through our cookie banner.

No non-essential cookie is set before you consent, nothing is pre-selected, and refusing is as easy as accepting. You can change or withdraw your choice at any time through the cookie settings link in our footer.

09

Your Rights

Under the GDPR you have the following rights, exercisable free of charge by emailing privacy@luxello.eu. We respond within one month, extendable by two further months for complex requests, in which case we will tell you within the first month.

Access
Obtain confirmation of processing and a copy of the data we hold.
Rectification
Have inaccurate data corrected and incomplete data completed.
Erasure
Have data deleted where there is no lawful ground to keep it.
Restriction
Limit how we use your data while a dispute is resolved.
Portability
Receive data you gave us in a structured, machine-readable format.
Objection
Object to processing based on legitimate interests, and to direct marketing at any time.
10

Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the supervisory authority in the member state of your habitual residence, your place of work, or the place of the alleged infringement.

Finding your supervisory authority
A directory of national data protection authorities is published by the European Data Protection Board at edpb.europa.eu.
You may also contact our Article 27 representative, whose details appear in section 02.

We would appreciate the opportunity to resolve your concern first — please write to privacy@luxello.eu.

Certified and verified

We accept all major credit cards, Apple Pay, Google Pay, Paypal