Privacy policy
Factorylux Privacy and Cookie Policy October 2026
1. Who we are
This policy explains how Urban Cottage Industries Ltd, trading as Factorylux ("Factorylux", "we", "us"), collects and uses personal data when you visit factorylux.com, buy from us, or contact us. We are the controller of your personal data. Company number 07211785. Registered office: Unit 3, White Lee, Hebden Bridge, HX7 5AD, United Kingdom.
Questions or requests: hello@factorylux.com or 0207 889 00 44.
2. What we collect and why
| What we collect | Why we use it | Legal basis |
|---|---|---|
| Order details: name, billing and delivery address, email, phone number, order history | To process and deliver your order, issue invoices, and handle returns and guarantee claims | Contract |
| Payment information: processed securely by Shopify Payments and our other payment providers. We do not see or store full card numbers | To take payment and prevent fraud | Contract; legitimate interests (fraud prevention) |
| Business details for trade and export customers: company name, VAT or registration number, business contact details | To open and manage trade accounts, check that buyers are businesses, run credit checks where we offer credit, and meet export and VAT rules | Contract; legal obligation; legitimate interests |
| Messages and support requests: by email, phone or WhatsApp | To answer questions and provide support | Contract; legitimate interests |
| Signed documents: account acceptances and specifications signed electronically | To record agreements with trade customers | Contract |
| Marketing preferences: your email, if you sign up to our newsletter or opt in at checkout | To send you news and offers | Consent; or, if you have bought or asked about similar products from us, our legitimate interests under the “soft opt-in” rules, as long as you were given a chance to opt out when you gave us your details and in every email we send |
| Device and usage data: IP address, browser, pages viewed, how you reached and used our site | To run the site securely and, with your consent, to understand how it is used and improve it | Legitimate interests (security); consent (analytics, and advertising if we use it in future) |
We do not ask for special category personal data, such as health information, and please do not send it to us unless it is necessary. If you do, we will use it only to deal with your request, with your consent, and delete it once it is no longer needed. Our site is not intended for children.
3. Who we share it with
We share personal data only where needed, with:
- Shopify, which runs our online store, including Shop Pay and the Shop app
- payment providers, such as Shopify Payments, and Revolut for bank transfers
- carriers, couriers and freight forwarders, such as Royal Mail, DPD and pallet networks, to deliver your order, and our transit insurer where you choose insurance
- MRPeasy, our manufacturing and order management system, which receives order details so we can make and dispatch your order
- Google Analytics, for website statistics, only if you accept analytics cookies
- Microsoft Clarity, which records how visitors use our pages (clicks, scrolling and page movement) so we can improve the site, only if you accept analytics cookies. Text you type into forms is masked and not recorded
- advertising partners, such as Meta, Google and Microsoft, if we use their advertising tools in future, and only if you accept advertising cookies
- Shopify Email, which sends our newsletter emails
- Lookbookify (product galleries) and Discountly (quantity pricing), which provide features in our store
- our email and e-signature providers, which we use to communicate with you and to sign agreements electronically
- WhatsApp (Meta), if you choose to contact us that way
- our accountants, insurers, legal advisers and credit reference agencies, where necessary
- HM Revenue & Customs and other authorities, where the law requires it
We never sell your personal data.
4. International transfers
Some of our service providers store or process data outside the UK, including in the European Economic Area, the United States and Canada. Where data leaves the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework for certified US providers) or approved safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
5. How long we keep it
- Orders, invoices and related emails and messages: our lights are made to last for decades, and customers often come back many years later for spare parts, repairs, matching fittings or guarantee support. We periodically review these records and keep them only for as long as reasonably necessary to support our products, meet our legal obligations and resolve guarantee claims or disputes. We delete or anonymise information when it is no longer needed, subject to any legal retention requirements. You can ask us to delete your records at any time; we will do so unless we need to keep them for one of these reasons.
- Trade account records: on the same basis as orders.
- Marketing list: until you unsubscribe. We remove inactive contacts after 3 years.
- Analytics data: 14 months.
6. Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased, where we no longer need to keep it by law
- restrict or object to how we use your data, including objecting to direct marketing at any time
- receive your data in a portable format
- withdraw your consent at any time, where we rely on consent
To use any of these rights, email hello@factorylux.com. We will reply within one month.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
7. Automated decisions
We do not make decisions about you based solely on automated processing that have a legal or similarly significant effect. Shopify uses limited automated fraud checks, such as temporarily blocking payment cards or IP addresses linked to repeated failed transactions. If you believe your payment was blocked incorrectly, please contact us at hello@factorylux.com and a member of our team will look into it and help you complete your order, for example by bank transfer.
8. Cookies
Cookies are small files stored on your device when you visit our site. Some features also use similar technologies, such as your browser's local storage.
Strictly necessary cookies make the site work, for example keeping items in your basket, remembering your country and currency, and processing checkout. They don't need your consent.
Analytics cookies help us understand how our site is used, so we can improve it. We only use them if you accept them.Advertising cookies let us and our advertising partners show you relevant ads on other sites and measure how well they work. We do not currently use them. If we do in future, we will only use them if you accept them, and we will list them in the table below.
Managing cookies: when you first visit our site, you can accept or decline non-essential cookies, or choose which to allow. You can change your choice at any time using the Cookie settings link at the bottom of every page. You can also block cookies in your browser, though parts of the site may not work properly.
The cookies we use:
| Cookie | Provider | Purpose | Type | Lasts |
|---|---|---|---|---|
| cart, cart_sig, cart_ts, cart_currency, checkout_token, secret, _secure_session_id, localization | Shopify | Basket, checkout, country and currency | Necessary | Session to 2 weeks |
| secure_customer_sig, storefront_digest, _shopify_u | Shopify | Customer account login | Necessary | Up to 1 year |
| _tracking_consent | Shopify | Remembers your cookie choices | Necessary | 1 year |
| _shopify_y, _shopify_s, _shopify_sa_p, _shopify_sa_t, _y, _s, _landing_page, _orig_referrer | Shopify | Site statistics | Analytics | 30 minutes to 1 year |
| _ga, _ga_RPDG27Y26Q | Google Analytics | Site statistics | Analytics | Up to 2 years |
| _clck, _clsk, CLID, MUID | Microsoft Clarity | Usage recordings and heatmaps | Analytics | 1 day to 1 year |
9. Links to other sites
Our site links to other websites and social media. We are not responsible for their privacy practices, so please read their policies.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.