Privacy Policy - Beacon Review

1. Who We Are

The data controller is Beacon Review Ltd, registered in England and Wales, with its registered office at 1 Beacon Lane, London EC1A 1BB, United Kingdom (Company No. / VAT 10293847 · GB102938472).

For all data protection enquiries, contact our Data Protection contact at: privacy@luminousflushnec.world

This Privacy Policy applies to the website https://luminousflushnec.world/index.html and all pages within it.

2. Legal Basis for Processing

We process your personal data under the following legal bases, as set out in the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:

Contract performance (Article 6(1)(b) UK GDPR) - processing necessary to fulfil an order you have placed with us or to respond to a pre-contractual enquiry.
Legitimate interests (Article 6(1)(f) UK GDPR) - processing necessary for our legitimate business interests (fraud prevention, site security, improving our services), where those interests are not overridden by your rights.
Consent (Article 6(1)(a) UK GDPR) - processing for analytics and marketing cookies where you have given freely given, specific, informed, and unambiguous consent via our cookie consent mechanism. You may withdraw consent at any time.
Legal obligation (Article 6(1)(c) UK GDPR) - processing required to comply with applicable law (e.g. tax and accounting records).

3. What Personal Data We Collect and Why

Category	Data Collected	Purpose	Legal Basis
Order enquiries	Full name, telephone number	Processing and fulfilling your order; contacting you to confirm delivery	Contract performance
Contact form	Name, email address, subject, message	Responding to your enquiry	Consent / Legitimate interests
Analytics (with consent)	Anonymised IP address, pages visited, session duration, device type, browser	Understanding how the site is used; improving content and performance	Consent
Marketing (with consent)	Cookie identifiers, ad interaction data	Serving relevant advertising via Google Ads; remarketing	Consent
Technical / Essential	Server logs, session cookies	Site security, error detection, session management	Legitimate interests
UTM / tracking parameters	utm_source, utm_medium, gclid (URL parameters)	Attributing order enquiries to marketing campaigns	Consent (analytics/marketing cookies must be accepted)

We do not collect special category data (health, biometric, financial data beyond order value) and do not process data relating to children under 18.

4. Cookies and Tracking Technologies

We use cookies and similar technologies on this site. For full details of the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

We implement Google Consent Mode v2. By default, all non-essential cookies are denied until you provide consent via our cookie banner. You may change your preferences at any time by clicking "Manage" in the cookie banner.

5. How We Share Your Data

We do not sell your personal data. We may share data with the following categories of recipients:

Google LLC - Google Analytics (analytics, where consented) and Google Ads (marketing, where consented). Data may be transferred to the United States under Google's Standard Contractual Clauses.
Hosting and infrastructure providers - our web hosting provider processes server log data as a data processor on our behalf.
Delivery and fulfilment partners - your name and delivery address (where collected at fulfilment stage) may be shared with our logistics partner to deliver your order.
Legal and regulatory authorities - where required by law or to protect our legal rights.

Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or UK adequacy decisions).

6. Data Retention

Order records - retained for 7 years to comply with UK tax and accounting obligations, then securely deleted.
Contact form submissions - retained for 12 months from the date of your enquiry, then deleted.
Analytics data - retained for 14 months within Google Analytics (our standard configuration), then automatically deleted.
Cookie consent records - retained for 13 months from the date of consent.
Server logs - retained for 90 days for security purposes.

7. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

Right of access - to request a copy of the personal data we hold about you (Subject Access Request).
Right to rectification - to request correction of inaccurate or incomplete data.
Right to erasure - to request deletion of your personal data in certain circumstances.
Right to restriction - to request that we restrict processing of your data in certain circumstances.
Right to data portability - to receive your data in a structured, machine-readable format where processing is based on consent or contract.
Right to object - to object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@luminousflushnec.world. We will respond within one calendar month.

8. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk

We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first at privacy@luminousflushnec.world.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include TLS encryption for data in transit and access controls for data at rest. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We will notify you of material changes via a notice on our website. Continued use of the site after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related queries: privacy@luminousflushnec.world
General enquiries: info@luminousflushnec.world
Postal address: Beacon Review Ltd, 1 Beacon Lane, London EC1A 1BB, United Kingdom