01
Who controls your data
The controller is Lucid Grove Ltd, a company registered in England and Wales under number 16705822, registered office 118-120 Lockwood Road, Huddersfield, HD1 3QX, United Kingdom. For anything in this notice, including a request to see or delete your data, write to [email protected] and we will answer within one month.
02
What we collect
To fulfil an order: your name, email address, delivery address, billing address where it differs, phone number if you give one, and what you bought. To take payment: nothing you would call card details — those are entered with our payment provider and never reach this site. We store the provider’s reference for the payment, its status and the amount. If you open an account: your name, email address and a password, which is hashed by our identity provider and is not visible to us or stored on our servers.
03
Why, and on what lawful basis
Order and delivery details are processed to perform our contract with you. Records of sales, payments and VAT are kept to comply with a legal obligation. Fraud checks and keeping the site working are our legitimate interests in trading safely. Marketing email is sent only with your consent, which you can withdraw at any time using the link in any message or by asking us.
04
Who else sees it
Our payment providers, who receive the amount, a reference and your email address, and who are independent controllers of what they collect. Our carriers, who receive the name, address and contact details needed to deliver. Our hosting and database provider, which stores the order book. Our identity provider, which holds account credentials. Each acts on our instructions except where named as an independent controller. We do not sell customer data, and we do not share it for anyone else’s marketing.
05
How long we keep it
Orders, invoices and payment records are kept for seven years, which is what tax law requires. Account details are kept while the account is open and for twelve months after you close it. Marketing consent is kept until you withdraw it. Unpaid baskets and abandoned checkouts are cleared within twelve months.
06
Where it is held
Our database and identity provider both run in the United Kingdom or the European Economic Area. Where any provider processes data outside the UK, that transfer is covered by the UK’s adequacy regulations or by the International Data Transfer Agreement.
07
Your rights
You may ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, object to processing based on legitimate interests, or ask for your data in a portable form. Write to [email protected]. If you are not satisfied with our answer you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you gave us the chance to put it right first.
08
Automated decisions
We do not make decisions about you by automated means alone, and we do not profile customers.
The company
Lucid Grove Ltd
- Registered in England & Wales
- Company number 16705822
- Registered office
- 118-120 Lockwood Road, Huddersfield, HD1 3QX, United Kingdom
- [email protected]