Privacy policy

Last updated: 15 October 2026

Lush Keepsake ("we", "us"), 222 Kensal Road, London W10 5BN, United Kingdom, runs lushkeepsake.com. This policy explains what personal information we collect when you visit the site, place an order or contact us, how we use it and the choices you have. For UK data protection law we are the controller of your personal information. Contact: hello@lushkeepsake.com.

What we collect

Contact and delivery details: name, email, phone number, billing and delivery addresses.
Order details: the items you buy, your personalisation (engraving text, font, symbols, dates) and any photos, handwriting or drawings you upload for engraving.
Payment information: payments are processed securely by Shopify Payments and other payment providers. We do not see or store your full card number.
Messages: anything you send us by email or the contact form.
Device and usage information: IP address, browser, device type and how you use the site, collected through cookies and similar technologies.

How we use it, and our lawful basis

To make, engrave and deliver your order, take payment and handle returns and faults (performance of our contract with you).
To answer your questions and send order and delivery updates (contract and legitimate interests).
To prevent fraud and keep the site secure (legitimate interests).
To keep accounting and tax records (legal obligation).
To send marketing emails, only if you have opted in. You can unsubscribe at any time using the link in every email (consent).
To understand how the site is used and improve it, using analytics cookies only if you accept them (consent).

Your personalisation and uploads

We use your engraving text and uploaded images only to make your order and resolve any issue with it. We do not use them for marketing or show them publicly without your permission. We keep uploaded images only as long as we need them to complete your order and deal with any issue with it, unless you ask us to keep them for a repeat order.

Who we share it with

Shopify, which hosts our store and processes orders and payments. See the Shopify Privacy Policy.
Delivery companies such as Royal Mail, so they can deliver your parcel.
Payment providers, to take payment and prevent fraud.
Email, advertising and analytics services (including Google), where you have agreed to marketing or analytics cookies.
Authorities, where the law requires it.

We never sell your personal information.

International transfers

Some of our service providers, including Shopify, process information outside the UK. Where they do, the transfer is protected by an adequacy decision or by the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

Cookies

Essential cookies make the cart and checkout work and are always on. Analytics and marketing cookies are used only if you accept them in the cookie banner, and you can change your choice at any time. See our Cookie Policy.

How long we keep it

We keep order and accounting records for six years, as UK tax law requires. Marketing preferences are kept until you unsubscribe. Messages are kept for up to two years after our last contact.

Your rights

You have the right to access, correct or delete your personal information, to object to or restrict how we use it, to ask for a copy to take elsewhere, and to withdraw consent at any time. Email hello@lushkeepsake.com and we will respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.