Updated 4 October 2026
Luma Mushrooms, based in Ramsgate, Kent, United Kingdom, is the controller of personal information collected through lumamushroom.co.uk. You can contact us at hello@lumamushroom.co.uk.
Information we use
We collect information you provide when you place an order, manage a subscription, register for Luma 2.0 or our email list, create an account or contact us. This can include your name, email address, delivery and billing addresses, telephone number, order details, subscription preferences and messages.
Our website and service providers also process device and browser information, IP address, cookie identifiers and information about how you use the site. Payment providers process payment details securely. We receive the information needed to manage orders and payments, rather than storing your full card number ourselves.
Why we use it
- Orders and subscriptions: to take payment, deliver chocolate, administer recurring purchases and provide customer service. Our legal basis is performing our contract with you or taking steps you request before a contract.
- Legal obligations: to keep required business records and meet tax, accounting and consumer-law obligations.
- Operating and protecting our business: to prevent fraud, maintain the site and handle enquiries and disputes. We rely on legitimate interests where these are not overridden by your rights.
- Email marketing: to send news and offers when you have opted in, or where the law permits us to contact an existing customer with an appropriate opt-out. You can unsubscribe using the link in any marketing email.
- Optional tracking: where consent is required, we use your consent for non-essential cookies or similar technologies.
Luma 2.0 and existing subscribers
Registering for Luma 2.0 records your interest in the launch and the marketing choices you make on that form. If we already have your email address, registration can update your existing profile and list membership. You do not need to create a second profile. Unsubscribing from marketing does not stop necessary order or subscription-service emails.
Who helps us
We share the information necessary to provide our services with Shopify for our storefront, checkout and related services, Klaviyo for email marketing and list management, Appstle for subscription management, payment providers, Royal Mail and other fulfilment providers where applicable. These providers process information under their own applicable terms and our arrangements with them.
We may also share information with professional advisers or public authorities where necessary to meet legal obligations, protect rights or resolve disputes. We do not sell your personal information.
Shopify may process some information for its own purposes as described in its consumer privacy policy. Third-party websites linked from our site have their own privacy policies.
International processing
Some service providers process information outside the UK. Where required, transfers are protected by an adequacy decision or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum to standard contractual clauses. Contact us for information about relevant safeguards.
How long we keep it
We keep information for as long as needed for the purpose it was collected, including to fulfil orders, manage active subscriptions, provide support, meet legal record-keeping requirements and resolve disputes. Marketing information is retained while needed to manage your preferences. If you unsubscribe, we may keep a limited suppression record so we can honour that choice. You can ask us about the retention period applicable to your information.
Your rights
Depending on the circumstances, you can request access to, correction or deletion of your information, restriction of its use, portability, or object to processing based on legitimate interests. You can object to direct marketing at any time and withdraw consent where processing relies on consent. Withdrawal does not affect processing that was lawful beforehand. Some rights are subject to legal exceptions.
Email us to make a request. We may need to verify your identity. You can also complain to the Information Commissioner’s Office.
Cookies and security
Read our cookie policy for details of cookies and your choices. We and our service providers use safeguards to protect information, but no online system can guarantee absolute security.
Changes
We may update this policy when our practices or legal requirements change. The current version and update date will be shown here.
Luma Mushrooms is based in Ramsgate, Kent, United Kingdom. For help with an order or a question about these terms, email hello@lumamushroom.co.uk or use our contact form.
