Legal
Privacy policy
Last updated: 2 October 2026
This policy explains what personal data we collect when you visit the LuminaOne Pro website or buy from us, why we collect it, who we share it with, and the rights you have over it.
Who we are
The LuminaOne Pro website and shop are run by GM Supply Solutions Limited, a company registered in England and Wales (company number 15396003), whose registered office is at 7 Bedford Road, Ruislip, England, HA4 6LX. We are the “controller” of your personal data, which means we decide how and why it is used.
If you have any questions about this policy or your data, email us at .
The information we collect
When you place an order, our payment provider Stripe collects the following on our behalf at checkout:
- your name, email address and phone number
- your delivery address, and your billing address if it is different
- the products you order and the amount paid
- your payment details. These are handled by Stripe. We never see or store your full card number.
When you contact us by email, we keep your message, your email address and any details you give us so that we can reply.
When you browse the website, our hosting provider automatically records technical information such as your IP address, browser type and the pages requested. This is used to keep the site running and secure.
Your basket is saved in your own browser (using “local storage”) so that it is still there if you come back later. This stays on your device and is not sent to us until you go to checkout.
How and why we use it
Data protection law requires us to have a lawful reason for each use of your personal data:
| What we do | Our lawful reason |
|---|---|
| Take payment, process and deliver your order, and send order and delivery updates | To perform our contract with you |
| Handle returns, refunds, cancellations and faulty-goods claims | To perform our contract with you, and to comply with consumer law |
| Reply to your questions and messages | Our legitimate interest in providing good customer service |
| Keep financial records of sales | To comply with our legal obligations (tax and accounting) |
| Prevent fraud and keep the website secure | Our legitimate interest in protecting our business and customers |
We do not sell your personal data, and we do not use it for marketing unless you have separately agreed to receive marketing from us. You can opt out of any marketing at any time.
Who we share it with
We only share your data with trusted organisations that help us run the shop, and only as much as they need:
- Stripe processes payments and screens them for fraud. Stripe’s use of your data is also covered by its own privacy policy at stripe.com/gb/privacy.
- Delivery companies receive your name, delivery address and, where needed, your phone number so they can deliver your parcel.
- Vercel hosts our website and processes the technical data described above.
- Google Fonts supplies the typefaces used on our website. When a page loads, your browser connects to Google, which receives your IP address.
- Professional advisers and authorities, such as our accountants or HM Revenue & Customs, where the law requires it.
International transfers
Some of these providers, including Stripe, Vercel and Google, may process data outside the UK, for example in the United States. Where this happens, the transfer is protected by safeguards recognised under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework or approved contractual clauses.
How long we keep it
- Order and payment records are kept for 6 years from the end of the financial year in which you ordered, as required for tax and accounting purposes.
- Customer service emails are kept for up to 2 years after our last contact with you, unless they relate to an order, in which case they are kept with the order record.
- Website technical logs are kept only for the short period set by our hosting provider.
Cookies and similar technologies
Our website does not use advertising or analytics cookies. We use your browser’s local storage only to remember your basket, which is necessary for the shop to work. When you go to checkout, Stripe uses cookies that are needed for secure payment and fraud prevention. You can read more in Stripe’s cookie policy.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that is wrong or incomplete
- ask us to delete your data, where we no longer have a lawful reason to keep it
- ask us to restrict how we use your data, or object to us using it on the basis of our legitimate interests
- ask us to transfer data you gave us to another organisation, where this applies
To use any of these rights, email . There is no charge, and we will reply within one month.
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
Keeping your data secure
Our website is served over an encrypted (HTTPS) connection, payments are handled by Stripe, which is certified to the highest level of the Payment Card Industry security standard (PCI DSS), and access to order information is limited to the people who need it to fulfil your order.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.
Back to the shop