No products in the cart.
Privacy Policy
Last updated: 12 Feb 2026
This Privacy Policy explains how Luxyora (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you visit https://luxyora.co.uk (the “Website”), purchase our products or services, subscribe to our communications, or otherwise interact with us. Luxyora is operated under the company Markestra Ltd, registered in Essex, United Kingdom. If you have any questions about this Privacy Policy or how your information is handled, you can contact us at contact@luxyora.co.uk.
For the purposes of applicable data protection laws, including the UK GDPR and EU GDPR where relevant, Markestra Ltd is the data controller responsible for your personal information. We may collect personal information that you provide directly to us, such as your name, email address, billing address, purchase details, and the content of any messages you send to us. When you purchase products or services, we will also process transaction-related information such as order details and payment confirmations. Payment card details are handled by our payment service providers using secure methods; we do not intentionally store full card numbers or sensitive payment credentials on our own servers.
We also collect information automatically when you use the Website. This may include your IP address, device identifiers, browser type, operating system, pages viewed, approximate location derived from your IP address, referring and exit pages, timestamps, and interactions with Website features. We use Google Analytics and/or similar analytics tools to measure traffic and understand how visitors engage with the Website. These tools may use cookies or similar technologies to collect and report information about your use of the Website. We also use Google’s invisible reCAPTCHA to help protect the Website from spam and abuse. Your use of reCAPTCHA is subject to Google’s applicable terms and privacy policies, and reCAPTCHA may collect device and behavioural information to determine whether activity is legitimate.
We use your personal information to operate the Website, provide and deliver products and services, process payments, communicate with you about your orders or enquiries, provide customer support, and maintain accurate business records. We also use your information to improve our Website, understand usage patterns, test and develop features, secure our systems, prevent fraud, enforce our terms, and comply with applicable legal obligations. If you sign up to receive marketing communications, we may send you updates, newsletters, or promotional messages. Where required by law, we will ask for your consent before sending marketing communications, and you can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us at contact@luxyora.co.uk.
We may send emails and manage subscriber lists using third-party email marketing platforms such as Mailchimp or similar bulk email software providers. These providers process personal information on our behalf to help us send communications, manage subscriptions, and measure campaign performance. We only permit these providers to process personal information for these purposes and require them to protect it in line with applicable standards.
Our legal bases for processing under the UK GDPR and EU GDPR (where applicable) include processing necessary to perform a contract with you (for example, to fulfil orders and provide services), processing necessary to comply with legal obligations (for example, tax and accounting requirements), processing based on our legitimate interests (for example, improving the Website, analytics, fraud prevention, and security), and processing based on your consent (for example, marketing communications and certain cookies) where consent is required. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.
We may share personal information with service providers and partners that help us run our business, such as website hosting and infrastructure providers, analytics providers, payment processors, email communication providers, customer support tools, and security and fraud prevention services. We may also disclose personal information if required to do so by law, regulation, legal process, or valid governmental request, or where we believe disclosure is necessary to protect our rights, investigate suspected fraud, respond to a legal claim, or protect the safety of users or the public. We do not sell personal information in exchange for money. We also do not knowingly share personal information for cross-context behavioural advertising in a way that constitutes a “sale” or “sharing” under applicable California law; however, some analytics and advertising-related technologies may be interpreted broadly under certain definitions, and you can contact us to exercise your choices as described below.
Some of our service providers may process personal information outside the United Kingdom or the European Economic Area, including in countries that may not provide the same level of data protection. Where international transfers occur, we implement appropriate safeguards required by applicable law, such as standard contractual clauses, reliance on adequacy decisions where available, and contractual and technical measures designed to protect your information.
We retain personal information only for as long as necessary for the purposes described in this Privacy Policy. Retention periods depend on the type of information and why we process it, including whether we need to keep it to comply with legal obligations, resolve disputes, enforce agreements, or maintain business and financial records.
If you are located in the United Kingdom or the European Union (or otherwise protected by the UK GDPR/EU GDPR), you may have rights to request access to your personal information, request correction of inaccurate or incomplete information, request deletion, request restriction of processing, object to processing in certain circumstances, and request data portability. You also have the right to withdraw consent where we rely on consent. To exercise these rights, please contact us at contact@luxyora.co.uk. You also have the right to lodge a complaint with a supervisory authority; in the UK, this is the Information Commissioner’s Office (ICO).
If you are a California resident, you may have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). Subject to verification and certain exceptions, you may have the right to know the categories and specific pieces of personal information we collect, the sources of personal information, the purposes for collecting, using, disclosing, and sharing personal information, and the categories of third parties with whom we disclose personal information. You may also have the right to request deletion of personal information, correct inaccurate personal information, and opt out of the “sale” or “sharing” of personal information as those terms are defined under California law. We will not discriminate against you for exercising your privacy rights. To submit a request, email contact@luxyora.co.uk with the subject line “California Privacy Request” and include sufficient information for us to verify your identity and describe your request.
In accordance with the California Online Privacy Protection Act (CalOPPA), users may visit our Website anonymously where practical. This Privacy Policy is accessible from our Website and describes our information practices. You may request changes to your personal information by contacting us at contact@luxyora.co.uk. Some browsers offer a “Do Not Track” (DNT) signal; because there is not yet a common standard for responding to DNT signals, we may not respond to all such signals consistently. Where technically feasible, we will make reasonable efforts to honour privacy preference signals in line with applicable law and our available tooling.
Our Website uses cookies and similar technologies to help it function, improve performance, understand usage, and support analytics and marketing. You can control cookies through your browser settings and, where available, through any cookie preference tools presented on the Website. Please note that disabling cookies may affect Website functionality.
The Website is not intended for children and we do not knowingly collect personal information from children under 13 (and under 16 where applicable local law requires). If you believe a child has provided us personal information, please contact us at contact@luxyora.co.uk and we will take appropriate steps to delete it.
We take reasonable administrative, technical, and organisational measures designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, and destruction. However, no security measure is perfect and no method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
Our Website may include links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing them with personal information.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we do, we will post the updated version on this page and revise the “Last updated” date above. Your continued use of the Website after changes become effective means you accept the updated Privacy Policy.
If you have any questions, requests, or complaints regarding this Privacy Policy or our handling of personal information, please contact us at contact@luxyora.co.uk.
