‍We collect personal data in the following circumstances:

‍ 2a. When you place an order

‍ ‍•     Full name

‍ ‍•     Delivery address

‍ ‍•     Email address

‍ ‍•     Phone number (if provided)

‍ ‍•     Payment information (processed securely see Section 5)

‍ ‍2b. When you contact us

‍ •     Name

‍ ‍•     Email address

‍ ‍•     The content of your message

‍ ‍2c. Automatically when you visit our website

‍ ‍•     IP address

‍ ‍•     Browser type and version

‍ ‍•     Pages visited and time spent on the site

‍ ‍•     Referring website

‍ ‍This data is collected via cookies and similar technologies. Please see our Cookie Policy for full details.

We only use your personal data for specific, lawful purposes. The table below sets out what we use your data for and our legal basis for doing so under UK GDPR.

Purpose

Data used

Lawful basis

Processing and fulfilling your order

Name, address, email, payment info

Contract performance

Sending order confirmations and updates

Name, email address

Contract performance

Responding to customer enquiries

Name, email, message content

Legitimate interests

Sending marketing emails (newsletter)

Email address, name

Consent

Improving our website and user experience

Usage data, IP address

Legitimate interests

Complying with legal obligations (e.g. tax records)

Order and payment data

Legal obligation

Fraud prevention and security

IP address, payment data

Legitimate interests

We will never use your data for any purpose that is incompatible with the purposes listed above, and we will never use your purchase history or browsing of adult product categories for any purpose other than fulfilling your order and improving our service.

We do not sell, rent, or trade your personal data. We share your data only with trusted third-party service providers who help us operate our business, and only to the extent necessary for them to perform their service.

Squarespace Inc.

Website hosting, checkout, and payment processing. Your data is processed in accordance with Squarespace's Privacy Policy. Squarespace acts as a data processor on our behalf.

Amazon FBA (Amazon EU S.a.r.l.)

Order fulfilment and delivery. Your name and delivery address are passed to Amazon to fulfil and ship your order. Amazon processes this data in accordance with their Privacy Policy.

Payment processor

Squarespace Payments

Email marketing platform

n/a

Legal or regulatory authorities

We may disclose your data where required by law, court order, or regulatory obligation.

All payments are processed securely through our payment provider. We do not store, see, or have access to your full card details at any point. Payment data is encrypted and handled in compliance with PCI DSS (Payment Card Industry Data Security Standards).

Your billing statement will show a discreet merchant name — not Lustera — to protect your privacy.

We only keep your personal data for as long as necessary for the purpose it was collected, or as required by law.

Order and transaction records

7 years — required by HMRC for tax purposes

Customer account data

For the duration of your account, plus 2 years after closure

Marketing email list

Until you unsubscribe, or 2 years of inactivity — whichever comes first

Customer service correspondence

3 years from the date of the enquiry

Website usage data (cookies/analytics)

[INSERT: check your Squarespace analytics retention period]

As a UK resident, you have the following rights in relation to your personal data:

•     Right to access — you can request a copy of the personal data we hold about you

•     Right to rectification — you can ask us to correct inaccurate or incomplete data

•     Right to erasure — you can ask us to delete your data (subject to legal obligations)

•     Right to restrict processing — you can ask us to limit how we use your data

•     Right to data portability — you can request your data in a structured, machine-readable format

•     Right to object — you can object to us processing your data on the basis of legitimate interests or for direct marketing

•     Right to withdraw consent — where we process your data based on consent (e.g. marketing emails), you can withdraw it at any time

To exercise any of these rights, please contact us at: privacy@lustera.co.uk [INSERT]

We will respond to all requests within 30 days. We may ask you to verify your identity before processing your request.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

•     Website: ico.org.uk

•     Telephone: 0303 123 1113

We use cookies and similar tracking technologies to improve your experience on our website, understand how it is used, and support marketing activity.

You can manage your cookie preferences at any time using the cookie settings banner on our website. For full details of the cookies we use, please see our separate Cookie Policy.

We take the security of your personal data seriously. We use a range of technical and organisational measures to protect your information, including:

•     SSL/TLS encryption on all pages of our website

•     Secure, PCI DSS-compliant payment processing

•     Access to personal data restricted to authorised personnel only

•     Regular review of our data practices and third-party providers

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, inform you directly.

Our website and products are intended for adults aged 18 and over only. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately at hello@lustera.co.uk and we will delete the information promptly.

Some of our third-party service providers (including Squarespace) may process your data outside the UK or European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner, to protect your data to the same standard as required under UK GDPR.

We may update this Privacy Policy from time to time to reflect changes in our business practices or legal requirements. When we make significant changes, we will notify you by email (if you have an account or are subscribed to our newsletter) and update the 'Last updated' date at the bottom of this page.

We encourage you to review this policy periodically.

‍If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email

hello@lustera.co.uk  or lusteraltd@gmail.com

Post

Lustera Ltd, 63 Kenmore Road Sale M33 4LG

Data controller

Lustera Ltd

ICO registration no.

ZC148123

‍ ‍

21st June 2026