Privacy policy

Privacy Policy

This policy explains what personal information hiluci.co.uk collects, why we collect it, who we share it with, and what rights you have. It applies to visitors to our site and to our customers.

Who controls your data

The data controller is HiLuci, Avenida da Boavista 1203, 4100-113 Porto, Portugal. For any question about this policy, or to exercise any of the rights below, email contact@hiluci.co.uk.

What we collect

  • Order information — your name, billing and delivery address, email address, telephone number where you give one, and the contents of your order. Card details are entered directly into our payment provider and are never seen or stored by us.
  • Marketing information — your email address if you subscribe, and your marketing preferences.
  • Device and usage information — IP address, browser and device type, time zone, the page that referred you, and the pages and products you view. This is collected through cookies and similar technologies.
  • Support information — whatever you send us when you contact us, including any photographs you send in support of a return.

Why we use it, and our legal basis

  • To take, fulfil and deliver your order, and to handle returns and refunds — performance of a contract.
  • To answer your questions and provide customer support — performance of a contract, or our legitimate interest in running the store properly.
  • To send marketing emails — your consent, which you can withdraw at any time.
  • To detect and prevent fraud and keep the site secure — legitimate interest.
  • To measure how the site is used and how our advertising performs — your consent, given through the cookie banner.
  • To keep accounting and tax records — legal obligation.

Who we share it with

We share personal information only with the providers that make the store work: Shopify, which hosts our store and processes payments; our fulfilment and shipping partners, so that your order can be delivered; our email provider; and analytics and advertising providers such as Google and Meta, where you have consented. Each is required to use the information only for those purposes.

We do not sell your personal information.

We may also disclose personal information where we are required to do so by law, or to protect our legal rights.

Transfers outside the UK and the EEA

Some of our providers are located outside the UK and the European Economic Area. Where personal information is transferred, it is protected by the safeguards permitted under UK and EU data protection law, such as standard contractual clauses.

How long we keep it

Order and transaction records are kept for as long as tax and accounting rules require, normally seven years. Marketing data is kept until you unsubscribe. Support correspondence is kept for up to three years. Analytics data is kept for the period set by the provider.

Your rights

You have the right to ask us for a copy of the personal information we hold about you; to have inaccurate information corrected; to ask us to delete it; to object to or restrict how we use it; to receive it in a portable format; and to withdraw your consent at any time, including by clicking the unsubscribe link in any marketing email.

To exercise any of these rights, email contact@hiluci.co.uk. We will respond within one month.

Cookies

We use cookies that are necessary for the site to function, and — with your consent — cookies that help us measure traffic and advertising. You can change your choice at any time through the cookie banner or your browser settings. If your browser sends a Global Privacy Control signal, we treat it as an objection to advertising cookies.

Children

Our store is not directed at children, and we do not knowingly collect personal information from anyone under 16.

Complaints

If you are unhappy with how we have handled your personal information, please contact us first so that we can put it right. You also have the right to complain to a supervisory authority: in the United Kingdom, the Information Commissioner’s Office (ico.org.uk); in Portugal, the Comissão Nacional de Protecção de Dados (cnpd.pt).

Changes to this policy

We may update this policy from time to time. The date below shows when it was last changed.

Contact

HiLuci
Avenida da Boavista 1203
4100-113 Porto
Portugal

Email: contact@hiluci.co.uk

Last updated: 15 September 2026