Privacy Policy

1. Who We Are

LUXERO COMPETITIONS LTD (“we”, “us”, “our”) operates the website at luxero.win. We are a company registered in Scotland (company number SC888260) with our registered address at 107 Dalriada Crescent, Motherwell, ML1 3XT, Scotland. We are the data controller of your personal data for the purposes of UK data protection law.

If you have any questions about this policy or how we handle your data, please contact our Data Protection Officer at contact@luxero.win.

2. Information We Collect

We collect the following categories of personal data when you interact with our Site or place an order:

• Identity and Contact Data: full name, email address, phone number, billing address, shipping address.
• Order Data: products purchased, order history, transaction IDs, amounts paid, and correspondence with our customer service team.
• Payment Data:payment card details (processed directly by our payment providers — we do not store full card numbers).
• Account Data: username, password (hashed), profile information, wishlist items, and saved addresses.
• Technical Data: IP address, browser type and version, time zone setting, operating system, device type, and browsing behaviour on our Site collected via cookies and similar technologies.
• Marketing Data: your preferences for receiving marketing communications and your engagement with our emails.

3. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfil your orders, including payment processing, shipping, and returns.
• To communicate with you about your orders, account, and customer service enquiries.
• To send marketing communications where you have opted in, including product launches, exclusive drops, and promotional offers.
• To improve and personalise your shopping experience on our Site.
• To detect, prevent, and investigate fraudulent or illegal activity.
• To comply with our legal obligations, including tax and record-keeping requirements.

4. Legal Basis for Processing (UK GDPR)

We process your personal data on the following lawful bases:

• Performance of a contract: to fulfil orders, process payments, and provide customer support.
• Legitimate interests: to improve our Site, prevent fraud, and send direct marketing where you have not objected.
• Consent: where we send marketing communications by email or process non-essential cookies.
• Legal obligation: to retain transaction records for tax purposes and to comply with regulatory requirements.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations:

• Order data is retained for six years following the end of the financial year in which the transaction occurred (to comply with HMRC requirements).
• Account data is retained until you delete your account or for two years after your last interaction with us, whichever is sooner.
• Marketing preferences are retained until you withdraw consent or unsubscribe.
• Technical data (e.g. analytics) is retained for a maximum of 26 months.

When data is no longer required, it is securely deleted or anonymised.

6. Your Rights

Under UK data protection law, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may ask us to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected.
• Right to restrict processing: you may ask us to limit how we use your data in certain circumstances.
• Right to data portability: you may request a copy of your data in a structured, machine-readable format.
• Right to object: you may object to our processing of your data for direct marketing or legitimate interests.
• Rights relating to automated decision-making: we do not use fully automated decision-making that produces legal effects concerning you.

To exercise any of these rights, please contact us at contact@luxero.win. We will respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

7. Cookies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and serve relevant marketing. Cookies are small text files stored on your device.

We use the following categories of cookies:

• Essential cookies: required for the operation of our Site, including authentication, basket management, and security. These cannot be disabled.
• Analytics cookies: provided by our analytics partners to help us understand how visitors use our Site, which pages are most popular, and how we can improve. We use anonymised data wherever possible.
• Marketing cookies: used to deliver relevant advertisements and measure the effectiveness of our campaigns. These may be set by our advertising partners.

You can manage your cookie preferences at any time through your browser settings or our cookie consent tool. Disabling certain cookies may affect the functionality of our Site.

8. Third-Party Services

We share your personal data with trusted third-party service providers who help us operate our business. These include:

• Payment processing: Paytriot processes your payment data in accordance with its own privacy policy. We do not store full payment card numbers.
• Shipping and fulfilment: our logistics partners receive your name, address, and phone number solely for delivery purposes.
• Email and marketing: we use email service providers to send transactional and marketing communications on our behalf.
• Analytics and advertising: analytics and advertising platforms receive anonymised or pseudonymised data to help us measure performance and reach relevant audiences.
• Cloud infrastructure: our hosting and infrastructure providers store data on secure servers within the UK and European Economic Area.

We require all third parties to implement appropriate technical and organisational measures to protect your data and to process it only for the specific purposes we have instructed.

9. International Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom where our third-party service providers operate. Where we transfer your data to a country that has not been deemed to provide adequate data protection by the UK government, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTA) or Binding Corporate Rules.

If you would like further information about the safeguards used for international transfers, please contact us at contact@luxero.win.

10. Contact

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us:

• Data Protection Officer: contact@luxero.win
• Post: LUXERO COMPETITIONS LTD, 107 Dalriada Crescent, Motherwell, ML1 3XT, Scotland, United Kingdom

You also have the right to contact the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

• Website: ico.org.uk
• Phone: +44 303 123 1113

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted on this page with an updated “Last updated” date. Where significant changes are made, we will notify you by email or through a prominent notice on our Site.

We encourage you to review this policy periodically to stay informed about how we protect your personal data.