Free tracked shipping on every order30-day money-back guarantee

Privacy policy

How Lumen & Oak collects, uses and protects your personal data under UK GDPR and PECR.

Last updated: 1 August 2026

Who we are

Lumen & Oak is the data controller for the personal data described here. You can reach us at hello@lumenandoak.com or by post at Lumen & Oak, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

What we collect

  • Order details — the items ordered, quantity, price paid, order number and order date.
  • Contact and delivery information — your name, email address, delivery address and, where given, phone number.
  • Payment information — handled by our payment providers. We receive confirmation that payment succeeded and the last few digits of the card; we never see or store full card numbers.
  • Correspondence — emails you send us about an order or return.
  • Technical and usage data — IP address, browser and device type, pages viewed and referring site, collected through cookies where you allow them.

How we use it, and why we're allowed to

  • To take payment, fulfil and deliver your order, and handle returns — necessary to perform our contract with you.
  • To answer your emails and provide support — our legitimate interest in running the shop.
  • To keep accounting and tax records — a legal obligation (records are typically kept for six years).
  • To measure how the site is used and to run advertising — only with your consent, given through the cookie banner.

Cookies

Essential cookies keep your basket and checkout working; these run without consent because the site cannot function without them. Analytics and advertising cookies — including Google Analytics and the Meta (Facebook) Pixel where enabled — only load once you press "Accept all" on the cookie banner. Choosing "Reject non-essential" prevents them from loading at all. You can change your choice at any time by clearing this site's data in your browser, which brings the banner back.

Who we share it with

Only with the providers needed to run the shop: our e-commerce and checkout platform, our payment providers, our fulfilment and shipping partners, our email provider and — where you have consented — our analytics and advertising providers. Some of these process data outside the UK; where they do, transfers are covered by appropriate safeguards such as the UK International Data Transfer Addendum. We never sell your data.

Your rights

You have the right to access, correct, delete or port your data, to object to or restrict processing, and to withdraw consent at any time. Email hello@lumenandoak.com and we'll respond within one month. If you're unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.