Privacy policy

Privacy Policy

Last updated: 2025-09-04

This Privacy Policy explains how BathroomLux.com (“BathroomLux”, “we”, “us”, “our”) collects, uses, and shares your personal information when you visit our website, make a purchase, or otherwise interact with us (the “Services”). By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

Definitions

• Account: your BathroomLux account.

• Cookies: small files stored on your device that save preferences/IDs.

• Personal Data / Personal Information: information that identifies or can be linked to you.

• Service Provider: a third party that processes data for us.

• Sale/Share (CPRA): “selling” (for value) or “sharing” for cross-context behavioural advertising.

• Website: BathroomLux.com.

Changes to this Policy

We may update this policy from time to time for operational, legal, or regulatory reasons. We will post updates here and revise the “Last updated” date.

What information we collect

Information you provide

• Contact details: name, billing/shipping address, email, phone.

• Order details: items, payment confirmation, delivery info, returns/warranty photos.

• Account details (if you create one): username, password, security info.

• Communications: messages you send us (e.g., support requests, reviews).

Providing some information is optional, but certain features may not work without it.

Information collected automatically

• Usage data & device data via cookies, pixels, tags, and similar tech (e.g., IP address, browser/device type, pages viewed, time on page, referring URLs, interactions with our emails/ads).

Information from third parties

• Store platform & apps (e.g., Shopify) to power our store.

• Payment processors to process payments (card/bank details are handled by the processor).

• Analytics/advertising partners (e.g., Google, Meta, Pinterest) using online tracking technologies.

We treat third-party data in line with this Policy. Third-party privacy practices are their own; see Third-party websites and links below.

Klarna
To offer Klarna payment options, we pass limited personal information (e.g., contact and order details) so Klarna can assess eligibility and tailor options. Klarna processes that data under its own privacy notice and applicable data protection laws.

How we use your information

• Provide the Services: process payments, fulfill/deliver orders, manage accounts, facilitate returns/exchanges, send service notifications.

• Customer support & communications: respond to enquiries and improve our Services.

• Security & fraud prevention: detect, investigate, and prevent fraud or abuse.

• Analytics & improvement: understand usage and enhance performance/experience.

• Marketing & behavioural advertising: send marketing (email/SMS/post) and show relevant ads on BathroomLux.com and third-party sites (see Your Choices).

• Legal compliance: meet tax, accounting, and regulatory obligations.

Legal bases (UK/EU/EEA)
We process data where needed to perform a contract (e.g., your order), for our legitimate interests (support, analytics, limited direct marketing to existing customers), with your consent (e.g., email/SMS marketing where required; advertising cookies), and to comply with law (e.g., tax, fraud prevention). You may withdraw consent at any time.

Your choices

Marketing emails: Use the unsubscribe link in any email or contact customer@bathroomlux.com.
SMS marketing: By subscribing, you agree to receive automated marketing texts at the number you provide. Message frequency may vary. Consent is not a condition of purchase. Standard rates may apply. Opt out anytime by replying STOP, END, CANCEL, UNSUBSCRIBE, or QUIT. For support, reply HELP or email customer@bathroomlux.com.

Interest-based ads (ads personalisation)

• Facebook: https://www.facebook.com/settings/?tab=ads

• Google: https://www.google.com/settings/ads/anonymous

• Bing: https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads

• Pinterest: https://ads.pinterest.com/

• Industry programs: NAI http://www.networkadvertising.org/choices/ • DAA http://optout.aboutads.info/ • EDAA http://www.youronlinechoices.com/
  You will still see ads, but they may be less relevant.

Cookies & tracking
We use cookies to operate and improve our site, remember preferences, run analytics, and personalise content/ads. For Shopify-related cookies, see https://www.shopify.com/legal/cookies. Most browsers let you remove or reject cookies, which may affect site functionality.

• Manage consent at any time via [Cookie Preferences] (link in footer).

• We honour Global Privacy Control (GPC) signals as a request to opt-out of sale/share for that browser.

Disclosure of your information

We share personal information with:

• Service providers (hosting, eCommerce, payments, logistics, communications, customer support).

• Analytics/advertising partners (for measurement and personalisation).

• Affiliates/business partners (where relevant).

• Authorities or as otherwise required by law.

Recipients must keep data confidential and use it only to provide services to us.

Business transactions & legal disclosures
We may disclose data in connection with a merger, acquisition, or asset sale; to comply with law or lawful requests; to protect rights, property, and safety; and to prevent or investigate wrongdoing.

Security

We use commercially reasonable technical and organisational measures to protect your information. However, no method of transmission or storage is 100% secure.

Retention

We keep personal information only as long as necessary for the purposes above, including providing the Services, complying with legal obligations (e.g., tax), resolving disputes, and enforcing agreements. Retention periods vary by data type and purpose; criteria include the amount, nature and sensitivity of the data, risk of harm, and legal requirements.

International transfers

Some providers process data outside the UK/EEA. Where this occurs, we use appropriate safeguards (e.g., Standard Contractual Clauses and supplementary measures).

Your rights (UK/EU/EEA)

Subject to conditions/exemptions, you may access, rectify, erase, restrict, object (including to direct marketing), port data, and withdraw consent.
To exercise rights, contact customer@bathroomlux.com.
You may lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk.

California privacy rights (CCPA/CPRA)

This section applies to California residents.

Notice at collection / categories (last 12 months)

• Identifiers (e.g., name, email, IP), customer records (contact/billing/shipping), commercial information (purchases), internet/network activity (usage, device, cookies).
  Sources: you; automated collection; service providers; analytics/advertising partners.
  Purposes/disclosure: as described above; disclosed to service providers/partners for business purposes.

Sale/Share

We do not sell personal information for money. We may share personal information for cross-context behavioural advertising as defined by the CPRA.
Opt out via the “Do Not Sell or Share My Personal Information” link in our footer, by using GPC, or emailing customer@bathroomlux.com.

Your CPRA rights
Right to know, access, correct, delete, opt-out of sale/share, and non-discrimination (and, where applicable, to limit use of sensitive personal information). We will verify your identity before actioning requests and respond within CPRA timelines.

[If you offer discounts for sign-ups/loyalty: We may provide a financial incentive related to the collection/use of personal information. We will present a “Notice of Financial Incentive” describing the material terms before you opt in.]

Children’s privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided personal information, contact customer@bathroomlux.com so we can delete it. If your country requires parental consent for minors (e.g., under 16), we will obtain it where applicable.

Do Not Track & Global Privacy Control

While we do not respond to browser Do Not Track signals, we do honour Global Privacy Control (GPC) signals as a request to opt-out of sale/share for that browser.

User-generated content

Content you post publicly (e.g., product reviews) is visible to others. We are not responsible for how others use information you make public.

Third-party websites and links

Our site may link to third-party sites or platforms. Their privacy practices are not our responsibility. Review their policies before providing personal information.

How to contact us?

If you have questions or comments about this privacy policy or if you would like us to correct, update, delete information we have about you or your preferences, please contact us as indicated below.

BathroomLux.com
Email: customer@bathroomlux.com