Privacy policy

Privacy Policy

Last Updated: August 12, 2026

At Pllume, your privacy is a priority. This Privacy Policy explains how we collect, use, and protect your personal information when you visit or make a purchase from our store.

We operate in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

Pllume is the data controller responsible for your personal data.

Store Name: Pllume
Physical Address: 15 Overdale Crescent, Urmston, Manchester, M41 5GR, United Kingdom
Email: support@pllume.shop

2. Information We Collect

We collect several types of information to provide and improve our services:

Identity & Contact Data: Name, email address, phone number, billing address, and shipping address.
Transaction Data: Details about payments and products you have purchased. (Note: We do not store full credit card numbers; these are handled by encrypted third-party processors).
Technical Data: IP address, login data, browser type/version, time zone setting, and device info.
Usage Data: Information about how you use our website, products, and services.
Marketing Data: Your preferences in receiving marketing from us and our third parties.

3. Legal Bases for Processing

Under UK GDPR, we only process your data when we have a legal basis:

Contractual Necessity: To fulfill your order and deliver your physical goods.
Legitimate Interests: For fraud prevention, website security, and improving our customer service.
Legal Obligation: To comply with tax, accounting, and consumer protection laws.
Consent: For sending marketing emails or placing non-essential cookies.

4. How We Share Your Data

We share your data only with trusted partners necessary to run our business:

Service Providers: Payment processors (e.g., Stripe, PayPal), email service providers, and cloud hosting.
Logistics Partners: Courier services (Royal Mail, DPD, Evri, etc.) for physical product deliveries.
Legal Authorities: If required by law or to protect our legal rights.
International Transfers: If your data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or an adequacy decision, to keep your data protected.

5. Cookies and Tracking

We use cookies to remember your cart, analyze traffic, and personalize your experience. You can manage your cookie preferences through our "Cookie Settings" banner or your browser.

6. Data Retention

We keep your personal data only as long as necessary:

Order Info: Retained for at least 6 years to comply with UK tax and business record laws.
Marketing Info: Retained until you unsubscribe or withdraw consent.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Access: Request a copy of your data.
Correction: Fix inaccurate information.
Deletion: Request we delete your data (subject to legal retention requirements).
Object/Restrict: Stop us from processing your data for specific reasons.
Data Portability: Request your data in a machine-readable format.
Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise these rights, email us at support@pllume.shop.

You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk, if you believe your data protection rights have been violated.

8. Security

We use SSL/TLS encryption for all data transmissions. Access to your personal data is strictly limited to employees and partners who have a "need to know" to perform their business duties.