Privacy Policy

1. Introduction
Lusso Manufacturing Limited (“we”, “us”, or “our”) respects your privacy and is committed to safeguarding your personal data. This Privacy Policy explains how we collect, process, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

  • Personal Data: Name, email address, phone number, billing and shipping addresses, and payment information.
  • Usage Data: IP addresses, browser type, device information, and browsing behaviour, collected through cookies and analytics tools.

3. How We Use Your Data
We collect and use your data to:

  • Process orders and provide customer support.
  • Communicate order updates and respond to enquiries.
  • Send marketing communications (only with your consent).
  • Analyse website performance and improve user experience.

4. Cookies and Tracking
Our website uses cookies to enhance functionality and gather analytics data. You can manage cookie preferences in your browser settings.

5. Legal Basis for Processing
We process your data on the following legal bases:

  • Contractual Obligations: To process your orders.
  • Legal Obligations: For tax records and fraud prevention.
  • Consent: For email marketing and cookie usage.

6. Sharing Your Data
We may share your data with:

  • Payment processors (e.g., PayPal, Stripe).
  • Couriers for order delivery.
  • Analytics providers (e.g., Google Analytics) to monitor website performance.
    All third parties are required to process data in compliance with UK GDPR.

7. Data Retention

  • Personal data related to purchases: Retained for 7 years to comply with tax regulations.
  • Marketing data: Retained until you opt out.
  • Cookies and analytics data: Retained for a maximum of 26 months.

8. Data Security
We implement robust measures to secure your data, including:

  • SSL encryption for all transactions.
  • Secure servers, firewalls, and regular security audits.
  • Access to personal data is restricted to authorised personnel only.

9. Your Rights
You have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data.
  • Withdraw consent for marketing communications.
  • Restrict or object to specific data processing activities.
  • Lodge a complaint with the Information Commissioner’s Office (ICO).

10. Cross-Border Data Transfers
Where data is transferred outside the UK (e.g., Google Analytics), we ensure compliance through adequate safeguards, such as Standard Contractual Clauses.

11. Data Breach Notification
In the unlikely event of a data breach, we will notify affected individuals and the ICO within 72 hours, as required under UK GDPR.

12. Children’s Privacy
Our website is not intended for individuals under the age of 16. We do not knowingly collect data from minors.

13. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Significant changes will be communicated via email or a notice on our website.

14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: