Version 2.0 – Last Updated: 20 May 2025

At Lumen Earth, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU GDPR (where applicable), and the Data Use and Access Act 2025 (DUAA).

1. Who We Are

Lumen Earth

28 Fanad Drive, Larne, County Antrim, Northern Ireland, BT40 2JJ

United Kingdom
Email: info@lumenearth.co.uk

We are the data controller responsible for your personal data.

2. What Data We Collect

We may collect and process the following categories of personal data:

Identity Data: Full name, username, title.

Contact Data: Email address, postal address, telephone number.

Transaction Data: Order details, payment details (processed securely via third-party payment providers).

Account Data: Login credentials, profile information, app activity.

Content Data: Any personal data and inputs you place into our app, forms, or communications.

Technical Data: IP address, browser type, device type, operating system, and app usage analytics (collected automatically via our website hosting, Squarespace, and integrated analytics tools).

Marketing & Communications Data: Preferences for receiving marketing, engagement with emails.

3. How We Collect Your Data

We collect personal data when you:

Place an order through our website or Adalo app.

Subscribe to our email marketing.

Interact with our website or app (cookies, analytics, tracking).

4. How We Use Your Data

We use your personal data to:

Process and fulfil your orders.

Provide access to and maintain your app account.

Store your personal data and user-generated inputs in the app (deleted after 1 year of inactivity).

Send marketing communications (only with your consent).

Improve our services, website, and app functionality.

Analyse website/app traffic and performance (via analytics tools).

Deliver personalised advertising and retargeting via platforms like Facebook.

Handle privacy and data protection complaints in line with DUAA requirements.

5. Legal Bases for Processing

We process your personal data under the following legal bases:

Consent – for marketing and email subscriptions.

Contract – to fulfil purchases or provide app access.

Legitimate Interest – for analytics, advertising, and service improvement.

Legal Obligation – where required by law.

6. Profiling & Automated Decision-Making

We may use profiling to deliver personalised advertising and marketing based on your activity.

This does not have legal or similarly significant effects on you.

You can opt out by contacting info@lumenearth.co.uk or adjusting your ad preferences on relevant platforms.

If we introduce any automated decision-making that produces legal or similarly significant effects, we will:

Explain the logic involved.

Describe the likely consequences.

Provide you with the ability to request human review.

7. Children’s Privacy

Our services are intended for users aged 16 and over.

In line with UK GDPR, if we discover a child under the age of 13 has provided personal data without verified parental consent, we will delete it promptly.

8. Sharing Your Data

We share your personal data only with trusted third parties where necessary, including:

Shipping Couriers – to deliver orders.

Marketing Platforms – e.g., Mailchimp, Facebook Ads.

Analytics Providers – e.g., Google Analytics.

All third parties must process your data securely and only for the purposes agreed.

9. International Transfers

Some service providers may process your data outside the UK or EEA. Where this occurs, we ensure safeguards are in place, such as Standard Contractual Clauses approved by the UK ICO and EU Commission.

10. Data Retention

We retain your personal data for as long as necessary for the purposes outlined in this policy or as required by law. Specifically:

Account and app data (including user inputs) will be deleted after 1 year of inactivity.

Marketing data will be deleted within 30 days of unsubscribing.

Transaction records are kept for 6 years to comply with accounting and tax obligations.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Enable core site and app functionality.

Analyse user activity for performance improvements.

Deliver personalised advertising (Facebook, Google, etc.).

Types of Cookies We Use:

Strictly Necessary Cookies – essential for operation.

Analytics Cookies – to measure and improve performance.

Marketing Cookies – for personalised ads.

Managing and Disabling Cookies

You can manage your cookie preferences at any time by selecting the “Cookie Preferences” link in the footer of our website. From there, you can choose to enable or disable non-essential cookies such as Performance & Analytics and Advertising cookies. You can also restrict or block cookies through your browser settings by adjusting your preferences; please note that blocking certain cookies may impact the functionality of the site. For more information on managing cookies in your browser, you can visit www.aboutcookies.org or www.allaboutcookies.org.

12. Data Security

We take appropriate technical and organisational measures to protect your personal data, including encryption, secure storage, access controls, and regular system monitoring.

13. Your Rights

Under UK GDPR and DUAA, you have the right to:

Access your personal data.

Request correction of inaccurate data.

Request deletion of your data.

Withdraw consent at any time.

Object to certain processing activities.

Request data portability.

Lodge a complaint with the Information Commissioner’s Office (ICO).

14. Complaints Handling

We take privacy complaints seriously. If you wish to make a complaint about how we have handled your personal data:

We will acknowledge your complaint within 5 working days.

We aim to resolve all complaints within 30 days.

If you are not satisfied, you have the right to complain to the ICO (www.ico.org.uk).

15. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Changes will be posted on this page with the updated version number and date.