Privacy policy

Last updated: August 22, 2026

We Value Your Privacy

Shopping online requires trust, and we take that seriously. This Privacy Policy sets out in plain language exactly what personal information we collect, why we collect it, how we use it, and what rights you have. We will never use your data in ways you would not expect, and we will always be open about our practices.

If you have any questions after reading this policy, please do not hesitate to contact us at info@luista.com We are happy to help.

This Privacy Policy describes how Luista, a trading name of Lunbury LTD, collects, uses, discloses and protects your personal information when you visit our website, use our services, make a purchase, or otherwise interact with us, together referred to as the Services.

References to you or your mean any individual who accesses or uses our Services, including customers and website visitors.

Lunbury LTD, company number 16936968, registered at 128 City Road, London, Greater London, EC1V 2NX, United Kingdom, is the data controller for the personal information described here. We process it in line with the UK General Data Protection Regulation and the Data Protection Act 2018.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, legal requirements or operational needs. Any updates are posted on this page. Where the law requires it, we will give you additional notice.

How We Collect Your Personal Information

We collect personal information from a number of sources, depending on how you interact with our Services.

Information You Provide Directly

You may give us personal information including:

Contact information: name, address, email address, phone number
Order information: billing and delivery addresses, purchase details, payment confirmation
Account information: username, password and other security related details, where applicable
Customer support information: messages, emails or enquiries you send us, including any photos you attach

Information Collected Automatically

When you access or use our website we may automatically collect certain information using cookies, pixels and similar technologies, including:

Device and browser information
IP address and network details
Pages visited and actions taken on the website
Approximate location derived from your IP address

Information From Third Parties

We may receive information from third parties that support our operations, including:

Shopify, which powers our online store
Payment service providers, who process payments and related billing information
Marketing and analytics partners, who help us understand customer engagement and advertising performance

We do not see or store your full card number at any point. Card details are entered directly into our payment provider's systems and handled entirely by them.

How We Use Your Personal Information

1. Providing Products and Services

We use your personal information to:

Process and confirm payments
Fulfil, dispatch and deliver orders
Send order updates and notifications
Manage returns, refunds and exchanges
Provide customer support
Maintain user accounts where applicable

Our lawful basis for this is performance of a contract with you.

2. Marketing and Advertising

Where you have consented, we may use your personal information to:

Send promotional emails or SMS messages
Show relevant advertisements on our website and on third party platforms
Understand customer preferences and improve marketing effectiveness

Our lawful basis for this is your consent. You may withdraw it at any time using the unsubscribe link in any marketing email, or by replying STOP to any text, and withdrawing consent does not affect processing already carried out.

3. Security and Fraud Prevention

We use personal information to help detect, prevent and investigate fraud, abuse or security risks. Our lawful basis for this is our legitimate interest in preventing fraud.

4. Legal Obligations

We process your personal information where necessary to comply with applicable laws and regulations, including our accounting and tax obligations to HMRC. Our lawful basis for this is legal obligation.

Our Lawful Basis at a Glance

Purpose	Lawful basis
Processing, packing and delivering your order	Performance of a contract
Order confirmations, dispatch notices and tracking	Performance of a contract
Returns, refunds, exchanges and support	Performance of a contract, and legal obligation
Fraud screening and prevention	Legitimate interests
Marketing emails and texts	Consent
Analytics and advertising measurement	Consent
Accounting and tax records	Legal obligation

Cookies

We use cookies and similar technologies to operate our website, remember your preferences, analyse traffic and support marketing activities. Some third parties also place cookies for analytics or advertising purposes.

Provider	Type	What it does
Shopify	Strictly necessary	Keeps your cart and session working, secures checkout and prevents fraud. Set automatically, as the site cannot function without it.
Google Analytics	Analytics	Measures how many people visit, which pages they view and how they move through the store. Set only with your consent.
Google Ads and Google Tag	Advertising	Measures whether an advert led to a purchase and allows us to show relevant adverts. Set only with your consent.
Meta Pixel	Advertising	Measures advert performance and allows us to show relevant adverts on Facebook and Instagram. Set only with your consent.
Email and SMS platform	Functional	Recognises you so we can send abandoned basket reminders and the marketing you signed up for. Set only with your consent.

Under UK law, only strictly necessary cookies may be set without your permission. Everything else is set only after you consent through our cookie banner. You can change or withdraw that consent at any time through the cookie settings link in our footer, or through your browser settings, though disabling essential cookies will affect website functionality.

How We Share Your Personal Information

We may share your personal information in limited circumstances, including:

With service providers who assist with operations such as payments, delivery, IT, analytics and customer support
With marketing and advertising partners, where you have consented
When required by law, or to protect our rights, property or safety
In connection with a business transaction such as a merger, acquisition or restructuring

We do not sell your personal information to third parties.

International Data Transfers

Your personal information may be stored or processed outside the United Kingdom, mainly in the United States and the European Economic Area, by service providers who support our operations.

Where personal data leaves the UK, we rely on UK adequacy regulations or on the International Data Transfer Agreement and Addendum approved by the Information Commissioner's Office, so that your information remains protected to UK standards.

Data Retention

We retain your personal information only for as long as necessary to:

Process orders and returns
Maintain customer accounts
Comply with legal obligations
Resolve disputes and enforce agreements

In practice this means order and transaction records are kept for 6 years after the end of the relevant accounting period as required by HMRC, customer service correspondence for 3 years, and marketing contact details until you unsubscribe, after which they are suppressed rather than deleted so that we do not contact you again.

Your Rights

Under the UK GDPR you have the right to:

Access or request details about the personal information we hold about you
Request deletion of your personal information
Correct inaccurate or incomplete information
Receive a copy of your data in a portable, machine readable format
Restrict or object to certain processing activities
Withdraw consent where processing is based on consent
Object to direct marketing at any time, with no exceptions
Lodge a complaint with the Information Commissioner's Office

To exercise any of these rights, please contact us at info@luista.com with the subject line DATA REQUEST. We may need to verify your identity before responding to certain requests. We respond within one calendar month and there is no charge.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children's Data

Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

Security

Our website runs over encrypted HTTPS connections with a valid SSL certificate, and payment data is handled by PCI DSS compliant providers. Access to customer data within our team is limited to the people who need it to fulfil orders and answer support enquiries.

While we take reasonable measures to protect your personal information, no system is completely secure and we cannot guarantee the absolute security of information transmitted to us. If you create an account, you are responsible for keeping your login credentials secure.

Third-Party Websites

Our Services may contain links to third party websites. We are not responsible for the privacy practices, content or security of those sites. Please review their privacy policies before providing any personal information.

Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please do not hesitate to contact us. We are always here to help.

Store Name: Luista
Company Name: Lunbury LTD
Company Number: 16936968
Warehouse Address: Thurlestone Avenue, Ilford, Essex, IG3, United Kingdom
Registered Address: 128 City Road, London, Greater London, EC1V 2NX, United Kingdom
Email: info@luista.com
Phone: +44 7520 680637