Privacy policy

Thank you for your interest in this Privacy Policy and welcome to LullaLoom and our website and shop located at https://lullaloom.uk/ (our “website”).
At LullaLoom, we are committed to protecting and respecting your privacy.
This Privacy Policy sets out the basis on which we will process any Personal Data that we may collect about you as a visitor to our website.
It further explains how we protect your privacy and your rights in respect of our use of your Personal Data.

WHAT IS PERSONAL DATA?

Personal Data means any information that can identify a natural person.
This includes, in particular, your name, date of birth, address, telephone number, e-mail address, or IP address.
Anonymous data exists if no personal reference to the user can be made.

WHAT IS PROCESSING?

“Processing” means any operation or set of operations performed on Personal Data, such as collection, storage, adaptation, disclosure, or deletion.

WHAT LAW APPLIES?

We will only use your Personal Data in accordance with the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, as well as all applicable UK privacy and consumer data protection laws — and only as described in this Privacy Policy.

WHO IS RESPONSIBLE FOR DATA PROCESSING?

The responsible party (“Data Controller”) is:

LullaLoom
Attilastraße 13, 93093 Donaustauf, Germany
Email: support@lullaloom.uk
Phone: +49-1774612395

If you have any questions, you can contact us at the details above.

LEGAL BASES FOR PROCESSING PERSONAL DATA

We process your Personal Data only if one of the following legal bases applies:
a) you have given consent;
b) it is necessary for the performance of a contract or pre-contractual steps;
c) it is required to comply with a legal obligation; or
d) it is necessary for our legitimate interests, provided your rights are not overridden.

WHAT PERSONAL DATA DO WE COLLECT FROM YOU?

a) Data you provide:
When you fill out forms, create an account, or place an order, we collect information such as your name, address, email, phone number, and order details.
If you register for an account, we store your email and password to enable easier access and order history.
Payment information is processed securely by our payment service providers; we do not have access to your payment details.

b) Data collected automatically:
Our website collects technical information such as your IP address, browser type, and pages visited to monitor performance and improve the user experience.
We use cookies and similar technologies in accordance with our Cookie Policy.

c) Aggregated Data:
We may process statistical or aggregated data for analytics and business improvements.
Such data cannot identify you personally unless combined with identifiable information.

CHANGE OF PURPOSE

We will only use your Personal Data for the purposes stated in this Privacy Policy unless a new compatible purpose arises.
If processing is required for another reason, we will notify you and explain the legal basis.

DATA PROCESSING THROUGH THIRD-PARTY SERVICES

We integrate third-party content and services on our website based on legitimate interest, such as hosting, fonts, and analytics.
This requires the provider to know your IP address to display content correctly.

Third-party services used:

• Hosting: Shopify
• Fonts: Google Fonts API
• Analytics: Google Analytics

Each provider’s own privacy policy applies.

HOW WE USE YOUR PERSONAL DATA

We may process your Personal Data to:

• operate and manage our website and services;
• process your orders and payments;
• communicate with you about products or support;
• provide updates or marketing information (with consent);
• prevent fraud and comply with legal obligations.

DATA SHARING

We share Personal Data only as necessary:

• internally with authorized staff;
• externally with service providers (e.g., couriers, IT, marketing);
• with authorities if legally required;
• within the EEA / UK with adequate data protection safeguards.

INTERNATIONAL TRANSFERS

If Personal Data is transferred outside the EEA or UK, we ensure an adequate level of protection by using standard contractual clauses or equivalent safeguards.

DATA RETENTION

We retain your Personal Data only as long as necessary for the purposes collected or as required by law.
Once the retention period expires, data is securely deleted or anonymized.

DATA SECURITY

We use SSL / TLS encryption and technical and organizational measures to protect your Personal Data against unauthorized access, loss, or misuse.

MARKETING & ADVERTISING

If you have consented, we may send marketing messages via email or other channels.
You may unsubscribe at any time using the link in our emails or by contacting us.
We may also use analytics tools (e.g., Google Ads, Facebook Pixel) to display relevant ads, in accordance with your consent and our Cookie Policy.

SMS MARKETING

If you opt in to SMS marketing, we may send promotional messages (no more than 7 per week).
You can unsubscribe anytime by replying STOP or contacting us.
Message and data rates may apply.
We comply with the UK Privacy and Electronic Communications Regulations (PECR).

YOUR RIGHTS

You have the right to:

• access your data;
• rectify inaccurate data;
• erase your data (“right to be forgotten”);
• restrict or object to processing;
• data portability;
• withdraw consent at any time.

Please contact us at support@lullaloom.uk to exercise these rights.

CHILDREN’S PRIVACY

We do not knowingly collect Personal Data from children under 16.
If we learn that data was collected from a minor, we will delete it promptly.

COMPLAINTS

If you believe we have violated data protection laws, you may contact us directly, or lodge a complaint with your local supervisory authority:

For Germany: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
For UK: Information Commissioner’s Office (ICO)

CHANGES TO THIS POLICY

This policy was first issued on Tuesday, November 04, 2025, and is the current version.
Any updates will be posted on this page with an updated effective date.

CONTACT

If you have any questions about this Privacy Policy or how your data is handled, please contact us: