Privacy Policy

Privacy Policy

HiLuci UK

This Privacy Policy describes how hiluci.co.uk (the “Site”, “we”, “us” or “our”) collects, uses, and discloses your Personal Information when you visit or make a purchase from our Site.

Contact

If, after reviewing this policy, you have additional questions, require more information about our privacy practices, or wish to make a complaint, please contact us at:

📧 contact@hiluci.co.uk

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.

In this Privacy Policy, “Personal Information” refers to any information that can identify an individual.

Device Information

Purpose of collection:
To load the Site accurately, improve performance, and analyse usage for optimisation.

Source of collection:
Collected automatically through cookies, log files, pixels, tags, or similar technologies when you access our Site.

Disclosure for business purposes:
Shared with our e-commerce platform provider, Shopify, and analytics providers.

Personal Information collected:
Browser type, IP address, time zone, cookie data, pages or products viewed, search terms, and interaction behaviour.

Order Information

Purpose of collection:
To fulfil orders, process payments, arrange shipping, issue invoices and order confirmations, communicate with you, screen for fraud or risk, and—where permitted—provide marketing communications.

Source of collection:
Collected directly from you.

Disclosure for business purposes:
Shared with Shopify, payment processors, and logistics partners as required to fulfil your order.

Personal Information collected:
Name, billing address, shipping address, payment details, email address, and phone number.

Customer Support Information

Purpose of collection:
To provide customer service and after-sales support.

Source of collection:
Collected directly from you.

Minors

The Site is not intended for individuals under the age of 18. We do not knowingly collect Personal Information from children. If you believe that a minor has provided us with Personal Information, please contact us to request deletion.

Sharing Personal Information

We share Personal Information with service providers to operate our business and fulfil our obligations to you. This includes:

  • Shopify, which powers our online store. You can read Shopify’s privacy policy here:
    https://www.shopify.com/legal/privacy

  • Compliance with legal obligations, court orders, subpoenas, or lawful requests from authorities.

  • Protection of our legal rights.

Behavioural Advertising

We use your Personal Information to provide relevant advertising and marketing communications.

This may include:

For more information on targeted advertising, visit:
https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

You can opt out of certain advertising services here:
https://optout.aboutads.info/

Using Personal Information

We use your Personal Information to:

  • Operate and maintain our online store;

  • Process payments and fulfil orders;

  • Communicate with you regarding your order;

  • Provide customer support;

  • Inform you about new products, services, or promotions (where permitted).

Lawful Basis (UK GDPR / GDPR)

If you are located in the United Kingdom or the European Economic Area (EEA), we process your Personal Information under the following lawful bases:

  • Your consent;

  • Performance of a contract with you;

  • Compliance with legal obligations;

  • Protection of vital interests;

  • Tasks carried out in the public interest;

  • Our legitimate business interests, where these do not override your rights and freedoms.

Retention

We retain your Personal Information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. You may request deletion of your data at any time, subject to legal obligations.

Automated Decision-Making

We do not use fully automated decision-making processes that produce legal or significant effects on individuals.

Our platform provider, Shopify, may use limited automated processes for fraud prevention, such as temporary IP or payment method restrictions, which do not have legal or significant effects.

Selling Personal Information

We do not sell Personal Information in the traditional sense.
Where applicable, any data sharing is conducted in accordance with UK GDPR, GDPR, and relevant consumer privacy laws, including the California Consumer Privacy Act (CCPA).

Your Rights (UK, EEA & CCPA)

Depending on your location, you may have the right to:

  • Access your Personal Information;

  • Request correction or updates;

  • Request deletion;

  • Object to or restrict processing;

  • Request data portability.

To exercise your rights, contact us at contact@hiluci.co.uk.

Your data may be processed initially in the UK or EU and transferred to countries such as Canada or the United States for storage or processing, in accordance with applicable data protection safeguards.

Cookies

We use cookies and similar technologies to enhance your browsing experience, analyse site traffic, and support marketing activities.

Cookies may be:

  • Essential (required for site functionality),

  • Performance & analytics,

  • Marketing & advertising.

You can manage cookie preferences through your browser settings. Blocking cookies may affect site functionality.

For more information, visit:
https://www.allaboutcookies.org

Do Not Track

We currently do not alter our data collection practices in response to “Do Not Track” signals, as there is no consistent industry standard.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Updates will be posted on this page.

Complaints

If you have concerns about how your Personal Information is handled, please contact us first. You also have the right to lodge a complaint with the relevant data protection authority.

Last updated: [11-02-26]