Your data, respected.

Who We Are

Lumivara LLC operates this website and is the data controller responsible for your personal data. This policy explains what we collect, why, and your rights. We process personal data in line with the UK GDPR and the Data Protection Act 2018 for our UK customers.

Information We Collect

• Order information: name, shipping and billing address, email, phone number.
• Payment information: processed securely by our payment providers — we do not store full card details.
• Usage data: pages visited, device and browser information, collected via cookies and similar technologies.
• Communications: messages you send us via email or our contact form.

How We Use Your Information

• To process and deliver your orders and provide customer support.
• To send order updates and, where you've opted in, marketing emails.
• To improve our website, products, and services.
• To prevent fraud and meet our legal obligations.

Legal Bases

We process your data to perform our contract with you (fulfilling orders), for our legitimate interests (improving and securing our service), to comply with legal obligations, and — for marketing — on the basis of your consent, which you can withdraw at any time.

Who We Share It With

We share data only with providers who help us run our business, including: Shopify and Stripe. These providers process data on our behalf under appropriate agreements. We never sell your personal data.

International Transfers

As we operate via a US entity and use international service providers, your data may be transferred outside the UK/EEA. Where it is, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect it.

Cookies

We use cookies to operate the site, remember your cart, analyse traffic, and (with consent) for marketing. You can control non-essential cookies via our cookie banner and your browser settings.

Data Retention

We keep your personal data only as long as necessary for the purposes above, including to meet legal, accounting, or reporting requirements.

Your Rights

Under UK GDPR you have the right to access, correct, delete, or restrict processing of your data, to object to processing, to data portability, and to withdraw consent. To exercise any of these, email contact@browlift.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes to This Policy

We may update this policy from time to time. The current version will always be posted on this page with the date it was last updated.