LULU BLACK

Privacy Policy

Last Updated: 1st December 2025
Queries/questions to: hello@lulublack.co.uk

1. Introduction

This Privacy Policy applies to the Processing of information by Lulu Black (“Lulu Black”, “we”, “us”, or “our”) in connection with the provision of our website https://lulublack.co.uk and the products, services or events in connection with Lulu Black (“Services”, or “Platform”).

By interacting with or using our Services, you consent to the Processing of your information (including your Personal Data) in accordance with this Privacy Policy.

Our Service, features or functionalities may use, include, be built on, be supported by or be used in conjunction with Third Party Services and/or you may use Third Party Services through Lulu Black. This means that your use of Lulu Black may be in tandem with the use of Third Party Services. You agree that your information may be independently collected, used or otherwise processed in accordance with and/or subject to the terms, privacy policies and any other applicable policies of the Third Party Services (as may be amended from time to time). We strongly encourage you to review the aforesaid policies.

The details of our Data Protection Officer are as follows: hello@lulublack.co.uk.

This document describes the information we collect, how we use it, how we store it and whom it is shared with. Please be advised that any explanation we provide cannot be considered legal advice. By using Lulu Black, you are agreeing to the Terms of Service and this Privacy Policy.

Interpretation

“Data Protection Laws” means any and all laws, regulations, rules, measures, interpretations, codes or guidelines issued by any government authority in any part of the world with jurisdiction over Lulu Black which pertain to the protection of Personal Data and/or privacy, including the Personal Data Protection Act 2012, the Regulation (EU) 2016/679 (General Data Protection Regulation).

“Data Subject”means any identifiable natural person whose Personal Data we Process.

“Personal Data” means any information or data, whether true or not, about an individual who can be identified from that data or from that data and other information to which Lulu Black has or is likely to have access, and/or any other information or data that constitutes as such under Data Protection Laws.

“Process” or “Processing” means carrying out any operation or set of operations on or in relation to Personal Data, including collection, use, disclosure, transfer, sale, recording, holding, organisation, adaptation, alteration, retrieval, combination, transmission, erasure or destruction.

“Third Party Service(s)” means any third-party product, service, software, technology and/or code provided under separate terms that is used to build or support Lulu Black Services or is offered in conjunction with Lulu Black Services, including social media platforms, integration partners and open-source software.

2. What information do we collect?

We will process your Personal Data lawfully, fairly and in a transparent matter. We collect and process information about you only where we have legal basis for doing so.

There are three basic ways we collect information:

  • Information you choose to give us.
  • Information we get automatically when you use our services.
  • Information we get from third parties.

Where you consent to our use of information about you for a specific purpose, you have the right to change your mind at any time (but this will not affect any processing that has already taken place).

We do not keep Personal Data for longer than is necessary. While we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.

That said, we advise that no method of electronic transmission or storage is 100% secure and cannot guarantee absolute data security.

When necessary, we will retain your Personal Data to comply with legal obligations (such as payment processor compliance, financial record keeping, etc) or in order to protect your vital interests or the vital interests of another natural person.

Information you choose to give us

When you interact with our services, we collect the information that you choose to share with us. Our services require you to create an account, and we will collect information for compliance purposes and to enable features, such as but not limited to:

  • email address,
  • ID verification data,
  • password,
  • phone number,
  • social media handles and other websites,
  • images and other profile content.

Credit Card Information: We do not store any Credit Card numbers on our servers, we simply transmit them over to our trusted payment provider via encrypted means, following the industry standards, including 3DSecure2 where available from the card issuer.

Information we automatically get when you use our services

When you use our services, we collect information about which of those services you’ve used and how you’ve used them. For example, we know when you have created an account and profile.

Below is a more detailed explanation of the types of information we collect when you use our services:

Usage information. We collect information about your activity through our services. For example: how you interact with the services, such as which pages, what categories you browse and what pages you consult. 

Device Information. We collect device-specific information, such as the hardware model, operating system version, unique device identifiers, browser type, language, wireless network, and mobile network information. We also collect device information that will help us diagnose and troubleshoot problems in the event you experience any crash or other problem while using our services.

Location Information. When you use our services we may collect information about your approximate location.

Information Collected by Cookies and Similar Technologies. Like most online services and mobile applications, we may use cookies and other technologies, such as web beacons, web storage, and unique device identifiers, to collect information about your activity, browser, and device.

Log Information. We collect log file information when you use our services. That information includes, but is not limited to, details about how you’ve used our services, device information, such as your web browser type and language, access times, pages viewed, your IP address, pages you visited before navigating to our services, cookies that may uniquely identify your device or browser.

Information we get from third parties

We will receive limited Personal Data from our payment processor when you pay for your Lulu Black Services. This may include but is not limited to:

  • your name;
  • your email address;
  • your street address;
  • your IP address.

3. Collection and use of information

We may collect, hold, use and disclose your Personal Data for the following purposes and your Personal Data will not be further processed in a manner that is incompatible with these purposes:

  • to enable you to access and use our website and associated applications;
  • to contact and communicate with you;
  • for internal record keeping and administrative purposes;
  • for billing, analytics, and business development, including to operate and improve our website and associated applications;
  • to verify your identify and prevent fraud or other unauthorised or illegal activity;
  • and to comply with our legal obligations and resolve any disputes that we may have.

We may also store some information locally on your device. For example, we may store information as local cache so that you can view content faster while consuming less bandwidth.

If you wish to delete this information, please refer to your web browser documentation.

4. Disclosure of personal information to third parties

We may disclose Personal Data to:

  • third party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, web-hosting and server providers, marketing providers, professional advisors and payment systems operators;
  • our employees, contractors and/or related entities;
  • courts, tribunals, regulatory authorities and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights;
  • and third parties to collect and process data.

5. International transfers of personal information

The Personal Data we collect is stored and processed where we or our partners, affiliates and third-party providers maintain facilities. By providing us with your personal information, you consent to the disclosure to these overseas third parties.

We will ensure that any transfer of personal information from countries in the European Economic Area (EEA) to countries outside the EEA will be protected by appropriate safeguards, for example by using standard data protection clauses approved by the European Commission, or the use of binding corporate rules or other legally accepted means.

6. Your rights and controlling your personal information

Choice and consent:
By providing Personal Data to us of your own free will, you consent to us collecting, holding, using and disclosing your Personal Data in accordance with this privacy policy.

If you are under the age of 18, you are not permitted to use this website. We do not direct or advertise our Services to anyone under the age of 18 and the age of majority. Hence we do not knowingly collect personal information from anyone under 18 and the age of majority.

Information from third parties:
If we receive Personal Data about you from a third party, we will protect it as set out in this privacy policy. 

Restrict:
You may choose to restrict the collection or use of your Personal Data. If you have previously agreed to us using your personal information, you may change your mind at any time by contacting us using the details below.

If you ask us to restrict or limit how we process your Personal Data, we will let you know how the restriction affects your use of our website or products and services.

Access and data portability:
You may request details of the Personal Data that we hold about you. Where possible, we will provide this information in an easily readable machine format. You may request that we erase the Personal Data we hold about you at any time, though note we cannot erase data need to meet our financial and legal obligations.

Correction:
If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us at hello@lulublack.co.uk. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or out of date.

Complaints:
If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us at hello@lulublack.co.uk and provide us with full details of the alleged breach.

We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint.

You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

7. Business transfers

In the unlikely event that we go out of business or enter bankruptcy, we would not include your data among the assets transferred to any parties who acquire us without consent.

If we or our assets are acquired with consent, your personal information will not be transferred without your expressed agreement.

8. Limits of our policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

9. Changes to this policy

At our discretion, we may change our privacy policy to reflect current acceptable practices. We will take reasonable steps to let you know about changes via our website. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.

If we make a significant change to this privacy policy, for example changing a lawful basis on which we process your Personal Data, we will ask you to re-consent to the amended privacy policy.