Last updated: April 2026
1. Who We Are
LushDesires operates the website https://lushdesires.com. We are a UK-based retailer specialising in intimate wellness and adult products. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We collect the following personal information when you place an order or create an account:
- Contact details: Name, email address, phone number
- Delivery address: Shipping name, address line 1 & 2, city, county, postcode, country
- Payment information: Processed securely via Stripe — we do not store your card details
- Order information: Products ordered, order history, preferences
- Communication data: Emails, chat messages, customer service interactions
Automatically Collected Information
When you visit our website, we may automatically collect:
- IP address (anonymised)
- Browser type and device information
- Pages visited and browsing patterns
3. How We Use Your Information
We use your personal information for the following purposes:
- Processing orders: To fulfil your orders, process payments, and arrange delivery
- Customer service: To respond to your queries and provide support
- Marketing communications: To send you promotional emails (only with your consent)
- Analytics: To understand how our website performs and improve user experience
- Fraud prevention: To detect and prevent fraudulent transactions
4. Legal Basis for Processing
Under UK GDPR, we process your data based on:
- Contract performance: Processing necessary to fulfil your order
- Legitimate interests: For fraud prevention and website analytics
- Consent: For marketing communications and non-essential cookies
5. Sharing Your Information
We share your information only with:
- Payment processors: Stripe (for secure payment processing)
- Delivery partners: XTrader and UK courier services for order fulfilmen
- Service providers: IT and hosting providers who support our operations
- Legal obligations: When required by law or to enforce our terms
We never sell your personal information to third parties.
6. Data Retention
We retain your personal information only as long as necessary:
- Order data: 6 years for tax and accounting purposes
- Marketing preferences: Until you withdraw consent
- Account data: Until you request deletion or your account is inactive for 3 years
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right to Access
You can request a copy of all personal data we hold about you.
Right to Rectification
You can ask us to correct inaccurate or incomplete information.
Right to Erasure
You can request deletion of your personal data, subject to legal retention requirements.
Right to Restrict Processing
You can ask us to limit how we use your data.
Right to Data Portability
You can request your data in a machine-readable format.
Right to Object
You can object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
You can withdraw consent for marketing communications at any time.
How to exercise your rights: Contact us at lushdesires@outlook.com. We will respond within 30 days.
8. Cookies
We use essential cookies for website functionality and analytics cookies (with your consent) to improve our service. For detailed information about the cookies we use, please see our Cookie Policy.
9. Data Security
We implement appropriate technical and organisational measures to protect your data:
- SSL encryption for all data transmission
- Secure storage of personal data
- Access controls limiting employee access
- Regular security assessments
10. International Transfers
Your data is stored on servers within the UK/European Economic Area (EEA). If we transfer data outside the EEA, we ensure adequate protection through approved mechanisms.
11. Marketing Preferences
We will only send marketing emails if you have opted in. You can:
- Unsubscribe using the link in any marketing email
- Contact us to update your preferences
- Request complete removal from our mailing list
12. Complaints
If you believe we have mishandled your data, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: www.ico.org.uk
- Phone: 0303 123 1113
We encourage you to contact us first so we can address your concerns.
13. Changes to This Policy
We may update this policy periodically. We will notify you of any material changes via email or website notice. The "Last updated" date at the top reflects the most recent changes.
14. Contact Us
For any questions about this Privacy Policy or to exercise your rights, please contact:
- Email: lushdesires@outlook.com
- Post: 25 Cathkin Close, Glenfield, Leicester, LE3 6PW