Privacy policy

Factorylux Privacy and Cookie Policy October 2026

1. Who we are

This policy explains how Urban Cottage Industries Ltd, trading as Factorylux ("Factorylux", "we", "us"), collects and uses personal data when you visit factorylux.com, buy from us, or contact us. We are the controller of your personal data. Company number 07211785. Registered office: Unit 3, White Lee, Hebden Bridge, HX7 5AD, United Kingdom.

Questions or requests: hello@factorylux.com or 0207 889 00 44.

2. What we collect and why

What we collect Why we use it Legal basis
Order details: name, billing and delivery address, email, phone number, order history To process and deliver your order, issue invoices, and handle returns and guarantee claims Contract
Payment information: processed securely by Shopify Payments and our other payment providers. We do not see or store full card numbers To take payment and prevent fraud Contract; legitimate interests (fraud prevention)
Business details for trade and export customers: company name, VAT or registration number, business contact details To open and manage trade accounts, check that buyers are businesses, run credit checks where we offer credit, and meet export and VAT rules Contract; legal obligation; legitimate interests
Messages and support requests: by email, phone or WhatsApp To answer questions and provide support Contract; legitimate interests
Signed documents: account acceptances and specifications signed electronically To record agreements with trade customers Contract
Marketing preferences: your email, if you sign up to our newsletter or opt in at checkout To send you news and offers Consent; or, if you have bought or asked about similar products from us, our legitimate interests under the “soft opt-in” rules, as long as you were given a chance to opt out when you gave us your details and in every email we send
Device and usage data: IP address, browser, pages viewed, how you reached and used our site To run the site securely and, with your consent, to understand how it is used and improve it Legitimate interests (security); consent (analytics, and advertising if we use it in future)

We do not ask for special category personal data, such as health information, and please do not send it to us unless it is necessary. If you do, we will use it only to deal with your request, with your consent, and delete it once it is no longer needed. Our site is not intended for children.

3. Who we share it with

We share personal data only where needed, with:

  • Shopify, which runs our online store, including Shop Pay and the Shop app
  • payment providers, such as Shopify Payments, and Revolut for bank transfers
  • carriers, couriers and freight forwarders, such as Royal Mail, DPD and pallet networks, to deliver your order, and our transit insurer where you choose insurance
  • MRPeasy, our manufacturing and order management system, which receives order details so we can make and dispatch your order
  • Google Analytics, for website statistics, only if you accept analytics cookies
  • Microsoft Clarity, which records how visitors use our pages (clicks, scrolling and page movement) so we can improve the site, only if you accept analytics cookies. Text you type into forms is masked and not recorded
  • advertising partners, such as Meta, Google and Microsoft, if we use their advertising tools in future, and only if you accept advertising cookies
  • Shopify Email, which sends our newsletter emails
  • Lookbookify (product galleries) and Discountly (quantity pricing), which provide features in our store
  • our email and e-signature providers, which we use to communicate with you and to sign agreements electronically
  • WhatsApp (Meta), if you choose to contact us that way
  • our accountants, insurers, legal advisers and credit reference agencies, where necessary
  • HM Revenue & Customs and other authorities, where the law requires it

We never sell your personal data.

4. International transfers

Some of our service providers store or process data outside the UK, including in the European Economic Area, the United States and Canada. Where data leaves the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework for certified US providers) or approved safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

5. How long we keep it

  • Orders, invoices and related emails and messages: our lights are made to last for decades, and customers often come back many years later for spare parts, repairs, matching fittings or guarantee support. We periodically review these records and keep them only for as long as reasonably necessary to support our products, meet our legal obligations and resolve guarantee claims or disputes. We delete or anonymise information when it is no longer needed, subject to any legal retention requirements. You can ask us to delete your records at any time; we will do so unless we need to keep them for one of these reasons.
  • Trade account records: on the same basis as orders.
  • Marketing list: until you unsubscribe. We remove inactive contacts after 3 years.
  • Analytics data: 14 months.

6. Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you
  • have inaccurate data corrected
  • have your data erased, where we no longer need to keep it by law
  • restrict or object to how we use your data, including objecting to direct marketing at any time
  • receive your data in a portable format
  • withdraw your consent at any time, where we rely on consent

To use any of these rights, email hello@factorylux.com. We will reply within one month.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

7. Automated decisions

We do not make decisions about you based solely on automated processing that have a legal or similarly significant effect. Shopify uses limited automated fraud checks, such as temporarily blocking payment cards or IP addresses linked to repeated failed transactions. If you believe your payment was blocked incorrectly, please contact us at hello@factorylux.com and a member of our team will look into it and help you complete your order, for example by bank transfer.

8. Cookies

Cookies are small files stored on your device when you visit our site. Some features also use similar technologies, such as your browser's local storage.

Strictly necessary cookies make the site work, for example keeping items in your basket, remembering your country and currency, and processing checkout. They don't need your consent.

Analytics cookies help us understand how our site is used, so we can improve it. We only use them if you accept them.Advertising cookies let us and our advertising partners show you relevant ads on other sites and measure how well they work. We do not currently use them. If we do in future, we will only use them if you accept them, and we will list them in the table below.

Managing cookies: when you first visit our site, you can accept or decline non-essential cookies, or choose which to allow. You can change your choice at any time using the Cookie settings link at the bottom of every page. You can also block cookies in your browser, though parts of the site may not work properly.

The cookies we use:

Cookie Provider Purpose Type Lasts
cart, cart_sig, cart_ts, cart_currency, checkout_token, secret, _secure_session_id, localization Shopify Basket, checkout, country and currency Necessary Session to 2 weeks
secure_customer_sig, storefront_digest, _shopify_u Shopify Customer account login Necessary Up to 1 year
_tracking_consent Shopify Remembers your cookie choices Necessary 1 year
_shopify_y, _shopify_s, _shopify_sa_p, _shopify_sa_t, _y, _s, _landing_page, _orig_referrer Shopify Site statistics Analytics 30 minutes to 1 year
_ga, _ga_RPDG27Y26Q Google Analytics Site statistics Analytics Up to 2 years
_clck, _clsk, CLID, MUID Microsoft Clarity Usage recordings and heatmaps Analytics 1 day to 1 year

9. Links to other sites

Our site links to other websites and social media. We are not responsible for their privacy practices, so please read their policies.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.