Last updated: 7 December 2025
This Privacy Policy explains how Luma Origins Coffee Co. (“we”, “our”, “us”) collects, uses, and protects your personal information when you visit lumaorigins.co.uk or make a purchase from us.
We are committed to respecting your privacy and complying with the UK GDPR and Data Protection Act 2018.
1. Information We Collect
We may collect the following information:
Information you provide
- Name (if provided)
- Email address
- Billing and shipping address
- Order details
- Payment information (processed securely via our payment provider — we do not store card details)
- Subscription details (if you sign up for a recurring product)
Information collected automatically
When you use our website, we automatically collect:
- IP address
- Device information
- Browser type
- Pages visited
- Time spent on the site
This helps us improve performance and security.
2. How We Use Your Information
We use your information to:
- Process and fulfil orders
- Send order updates and delivery notifications
- Manage subscriptions
- Provide customer support
- Improve website functionality
- Send newsletters and promotional emails (only if you opt in)
- Prevent fraud and maintain website security
3. Marketing Emails & Newsletter
If you sign up to the Luma Origins Coffee Club, we will send:
- Updates on new roasts
- Exclusive offers
- Freebies and rewards
- News and product launches
You may unsubscribe at any time by clicking the link in any email.
4. Cookies (Cookie Policy)
We use cookies and similar technologies to:
- Enable website functionality
- Remember cart items
- Improve site performance
- Analyse traffic
- Deliver personalised content
Types of cookies
- Essential cookies – required for the website to function
- Analytics cookies – e.g., Hostinger Analytics, Google Analytics
- Marketing cookies – only if you opt in
You can manage your cookie preferences through your browser or via our cookie banner.
5. Sharing Your Information
We may share your data with trusted third parties that help us operate our business:
- Payment processors (e.g., Stripe, PayPal)
- Delivery companies
- Email marketing tools (e.g., Hostinger Reach)
- Website hosting and analytics providers
We never sell your personal data.
6. Data Retention
We keep customer order records for 6 years to comply with UK tax law.
Newsletter subscribers are kept until they unsubscribe.
7. Your Rights (UK GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Withdraw consent
- Request data portability
- Object to certain data uses
To exercise these rights, contact us using our contact form.
8. Contact Us
If you have any questions, don’t hesitate to contact us through our contact page.