Privacy Policy

We may collect and process the following categories of personal data: name, job title and business name; email address and telephone number; billing and delivery addresses; payment and transaction information; artwork, logos and branding materials you submit; trade-account and credit-check information (for business accounts); records of your orders, enquiries and communications with us; and website-usage data such as IP address, browser type and pages visited.

We collect personal data when you place an order or request a quote, submit an enquiry, upload artwork, apply for a trade or credit account, subscribe to marketing, or browse our website (through cookies and analytics). We may also receive information from third parties such as credit-reference agencies where you apply for a credit account.

We use personal data to: process orders and manage accounts; produce and deliver Products, including custom-branded packaging; communicate about orders, quotes and enquiries; carry out credit checks and manage trade accounts; improve our website and services; send marketing where permitted; and comply with legal, tax and regulatory obligations.

Under the UK GDPR we rely on: contractual necessity (to fulfil orders and provide services); legitimate interests (to operate, protect and improve our business, including credit control and fraud prevention), balanced against your rights; legal obligation (tax, accounting and compliance); and consent (where required, for example certain marketing and non-essential cookies). You can withdraw consent at any time.

We share personal data only where necessary, with: payment processors; delivery and logistics providers; printing and manufacturing partners (for custom branding); IT, hosting and analytics providers; credit-reference and fraud-prevention agencies; and professional advisers or authorities where legally required. We require these third parties to protect your data and use it only for the agreed purpose. We may also share data if we buy or sell a business or assets.

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as an adequacy decision or the UK International Data Transfer Agreement / approved standard contractual clauses, so that your data receives an equivalent level of protection.

We keep personal data only as long as necessary. Order and invoice records are retained for up to 6 years for legal and tax purposes; marketing data until you withdraw consent or unsubscribe; and enquiry data for as long as reasonably required to respond and for our legitimate business records. Artwork files are retained to enable reorders unless you ask us to delete them.

Under the UK GDPR you have the right to: be informed; access your data; have inaccurate data corrected; request erasure in certain circumstances; restrict or object to processing; data portability; and withdraw consent. You also have the right to complain to the Information Commissioner's Office (ICO). To exercise any right, contact us using the details in section 13. We will respond within one month and may ask you to verify your identity.

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure, and we limit access to those who need it. No transmission over the internet is completely secure, so we cannot guarantee the security of data sent to us before it reaches us.

Our website may link to third-party websites. We are not responsible for their content or privacy practices; please review their policies.

Our website uses cookies and similar technologies (such as pixels and local storage) to make the site work, remember your preferences, keep your basket and checkout secure, and help us understand how the site is used. By using our website and accepting non-essential cookies through our cookie banner, you consent to their use as described in this policy.

Strictly necessary cookies are required for the website to function (for example session, basket and secure checkout) and cannot be switched off.

Functional cookies remember your choices, such as language and saved preferences, and are set only with your consent.

Analytics cookies help us understand how visitors use the site so we can improve it, and where they identify your device are set only with your consent.

Marketing cookies measure advertising and, where applicable, support relevant ads on other sites, and are set only with your consent.

You can accept or reject non-essential cookies, and change your choice at any time, through our cookie banner or your browser settings. If you block all cookies, some parts of the site may not work. Some cookies are set by third parties whose services appear on our site (such as analytics, payment or embedded content); please refer to their own notices. Session cookies are deleted when you close your browser; persistent cookies remain for a set period or until you delete them.

For any question about this Privacy Policy or to exercise your rights, contact Lumapack by email at sales@lumapack.co. You can also contact the ICO at https://ico.org.uk , Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, helpline 0303 123 1113.

We may update this Privacy Policy from time to time. The current version is always published on lumapack.co. Version v1.0, last updated 1 June 2026.