Privacy policy

Last updated: April 2026

1. About us

Kymra Commerce Ltd ("Kymra Lighting", "we", "us", "our") is the data controller responsible for your personal data when you visit our website kymralighting.co.uk or purchase from our store.

Company Registration Number: 16970017 Registered in England and Wales Registered Office: 3rd Floor, 86–90 Paul Street, London EC2A 4NE Email: sales@kymralighting.co.uk Phone: 0333 090 0045 ICO Data Protection Registration: ZC114360

This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What personal data we collect

We collect the following types of personal data:

Identity data: name, title
Contact data: billing address, delivery address, email address, phone number
Transaction data: details of products purchased, payment details (processed securely via our payment provider)
Technical data: IP address, browser type, device information, location data
Usage data: how you use our website, pages visited, time spent
Marketing data: your preferences for receiving marketing communications

3. How we collect your data

We collect personal data through:

Website forms (account creation, checkout, contact forms, newsletter signup)
Cookies and similar tracking technologies
Order processing and customer service interactions
Communication via email, phone, or our Returns Portal

4. How we use your data and the lawful basis

We process your personal data on the following lawful bases under UK GDPR:

Contract performance — to fulfil your orders, process payments, arrange delivery, and handle returns
Legitimate interests — to improve our website, prevent fraud, manage our business, and respond to enquiries
Consent — to send you marketing communications (you can withdraw consent at any time)
Legal obligation — to comply with UK tax, accounting, and consumer protection laws

5. Who we share your data with

We share your personal data with the following categories of third parties:

Suppliers and brand partners — to fulfil and dispatch your order directly
Payment processors — Shopify Payments, Stripe, PayPal (as applicable) for secure payment processing
Shopify — our e-commerce platform provider
Marketing platforms — Klaviyo (email marketing), Meta (advertising), Google (analytics and ads)
Couriers and logistics partners — for delivery and returns
Professional advisers — accountants, legal advisers where required

We do not sell your personal data to any third party.

6. International data transfers

Some of our service providers (e.g. Shopify, Klaviyo, Google) are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including UK-approved standard contractual clauses or adequacy decisions.

7. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

Order and transaction data: 7 years (UK tax and accounting requirements)
Customer account data: until you request deletion or after 3 years of inactivity
Marketing data: until you withdraw consent
Website analytics: typically 26 months

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to correct inaccurate or incomplete data
Right to erasure — to request deletion of your data ("right to be forgotten")
Right to restrict processing — to limit how we use your data
Right to object — to object to processing based on legitimate interests or for direct marketing
Right to data portability — to receive your data in a structured, machine-readable format
Right to withdraw consent — at any time where processing is based on consent

To exercise any of these rights, please contact us at sales@kymralighting.co.uk. We will respond within one month.

9. Cookies and tracking

Our website uses cookies and similar technologies to enhance your experience, analyse site usage, and support marketing. You can manage your cookie preferences through our cookie banner or your browser settings. For more information, please see our Cookie Preferences page.

10. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

11. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All payment transactions are encrypted using industry-standard SSL technology.

12. How to complain

If you have any concerns about how we handle your personal data, please contact us first at sales@kymralighting.co.uk so we can address your concerns directly.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline: 0303 123 1113 Website: https://ico.org.uk

13. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. The "Last updated" date at the top of this policy will indicate when it was last revised. We encourage you to review this policy periodically.