Privacy Policy
Last updated: 18 September 2026
This policy explains what mavellerow does with your personal data. LUMEN STAR LTD is the data controller for the information described here.
Controller: LUMEN STAR LTD (company number 17407229), Office 15733, Initial Business Centre, Unit 7, Wilson Business Park, Manchester M40 8WN, United Kingdom
Data protection enquiries: service@mavellerow.com
What we collect
| Data | When we collect it |
|---|---|
| Name, delivery address, billing address | When you place an order |
| Email address, phone number | At checkout, or when you contact us |
| Order history and returns records | When you buy or return |
| Payment confirmation (not card numbers) | From our payment providers after a transaction |
| Device type, browser, pages viewed | Automatically, through cookies and analytics |
We never see or store your full card number. Card details are handled directly by our payment providers.
Why we use it, and on what legal basis
- To fulfil your order — taking payment, dispatching goods, handling returns. Legal basis: performance of a contract.
- To provide customer service — answering your emails and resolving problems. Legal basis: performance of a contract.
- To meet our legal obligations — keeping transaction and tax records. Legal basis: legal obligation.
- To prevent fraud and improve the site — checking suspicious orders, understanding how the site is used. Legal basis: our legitimate interests in running a secure and functioning shop.
- To send marketing emails — only if you have opted in. Legal basis: consent, which you can withdraw at any time using the unsubscribe link in any email.
Who we share it with
We do not sell your personal data. We share it only with the parties we need to in order to run the shop:
- Shopline, the ecommerce platform that hosts this site
- The payment providers who process your payment
- The delivery carrier handling your parcel, which receives your name, address and phone number
- Analytics providers who help us understand how the site is used
- Our accountants and, where legally required, HMRC or other authorities
You can ask us at any time for the current list of these providers by name, and we will send it to you.
International transfers
Some of these providers process data outside the UK. Where they do, we rely on the UK's adequacy regulations or on the International Data Transfer Agreement, so your data keeps an equivalent level of protection.
How long we keep it
| Record | Retention period |
|---|---|
| Order and transaction records | 6 years from the end of the tax year, as required by HMRC |
| Customer service correspondence | 2 years from your last contact |
| Marketing contact details | Until you unsubscribe, then removed within 30 days |
| Analytics data | No longer than 26 months |
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything inaccurate
- delete your data, where we have no legal reason to keep it
- restrict or object to how we use it
- transfer your data to another provider
- stop sending you marketing, at any time
Email service@mavellerow.com to exercise any of these. We will respond within one month, free of charge.
Cookies
We use cookies that are necessary for the site to work, such as remembering your basket and keeping you logged in. With your consent, we also use cookies for analytics and advertising. You can change your choice at any time through the cookie settings link in the footer, or through your browser settings.
Children
This site is not intended for anyone under 16, and we do not knowingly collect data from children.
Complaints
If you are unhappy with how we have handled your data, please email us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes
We will post any changes to this policy on this page and update the date at the top.