Privacy Policy

Last updated: 1 October 2026

When you shop for a designer bag, you trust us with more than an order: your name, your address, sometimes your phone number and your payment. We take that trust seriously. This policy explains, in plain language, what personal data LuxDesignerBag collects, why we need it, who we share it with, how long we keep it and the choices you have.

It applies to everything you do with us: browsing luxdesignerbag.com, creating an account, placing an order, contacting our customer care team, joining our newsletter or following us on social media. In this policy, "LuxDesignerBag", "we", "us" and "our" refer to the operator of luxdesignerbag.com, which is responsible for your personal data.

The short version
What personal data is
The data we collect
How we use your data, and why we are allowed to
Marketing, and how to stop it
Cookies and similar technologies
Who we share your data with
International transfers
How long we keep your data
How we protect your data
Your rights
Additional information for United Kingdom and European residents
Additional information for United States and Canada residents
Additional information for Gulf residents
Children
Links to other websites
Changes to this policy
Contact us

1. The short version

We collect what we need to deliver your order, look after you and run a safe, working shop.
We never sell your personal data for money.
We send you marketing emails only if you agree, and every email has an unsubscribe link.
Your payment card details are handled by our payment providers. We never see or store your full card number.
You can ask to see, correct or delete your data at any time by writing to [email protected].

2. What personal data is

"Personal data" (also called "personal information") is any information that identifies you, directly or indirectly. Your name, email address, postal address, phone number, order history, IP address and the device identifiers stored in cookies are all examples.

3. The data we collect

Information you give us

Account and contact details: your name, email address, phone number, and billing and delivery addresses.
Order details: the items you buy, their price, your chosen delivery method, and any gift message or personalisation you add.
Payment information: the payment method you choose and confirmation of your payment. Card numbers are entered directly with our payment providers and are never stored on our systems.
Your messages: what you tell us when you contact customer care by email, phone, chat or social media, including photos you send us, for example of a parcel that arrived damaged.
Preferences: your language and currency, your wishlist, your newsletter choices, and reviews or comments you post.

Information collected automatically

When you visit luxdesignerbag.com, we and our partners collect technical information such as your IP address, browser and device type, operating system, approximate location (country or city, from your IP address), the pages you view, the products you look at, how you arrived on our site and the time and length of your visit. Much of this is collected through cookies (see section 6).

Information from other sources

Payment providers confirm whether a payment went through and may tell us if it was flagged as potentially fraudulent.
Couriers share delivery updates and proof of delivery.
Social networks and advertising partners may tell us, for example, that you saw or clicked one of our ads before visiting us.

You do not have to give us your personal data, but without the details needed for an order (such as your name, address and email) we cannot deliver it.

4. How we use your data, and why we are allowed to

Data protection law requires a valid reason, called a "legal basis", for each use of your data. Here is what we do and the basis we rely on.

What we do	Why we are allowed to
Take your order, take payment, ship your parcel and keep you updated on its progress	To perform our contract with you
Manage your account, wishlist and preferences	To perform our contract with you
Answer your questions, handle returns, refunds and complaints	To perform our contract with you, and our legitimate interest in looking after our customers
Check payments and orders to prevent fraud and protect you and us	Our legitimate interest in preventing fraud, and legal obligations
Keep invoices and accounting records, and respond to lawful requests from authorities	Legal obligation
Keep our website secure, find and fix errors, and understand how it is used so we can improve it	Our legitimate interest in running a safe and useful shop, and your consent where cookies require it
Send you newsletters and offers by email	Your consent, which you can withdraw at any time
Show you our ads on other websites and social networks, and measure how well they work	Your consent where the law requires it, otherwise our legitimate interest in promoting our shop
Recommend products based on what you have looked at or bought	Our legitimate interest in offering a relevant shopping experience
Defend or bring legal claims	Our legitimate interest in protecting our rights

When we rely on our legitimate interests, we have weighed them against your rights and expectations. You can object to any of these uses (see section 11).

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our fraud checks may flag an order for a closer look, but a person reviews it before any order is refused.

5. Marketing, and how to stop it

We send newsletters and offers only if you have signed up for them or, where the law allows, if you have bought from us before and did not opt out. You can stop marketing at any time, free of charge, by:

clicking "unsubscribe" at the bottom of any of our emails;
changing your preferences in your account;
writing to [email protected].

We will still send you service messages about your orders, such as order confirmations and shipping updates, because they are part of delivering what you bought.

6. Cookies and similar technologies

Cookies are small files that a website stores on your device. We use them, along with similar technologies such as pixels and local storage, for four purposes:

Strictly necessary cookies keep the shop working: your shopping bag, your sign-in, your language and currency, and security checks. The site cannot work properly without them.
Performance cookies help us understand how visitors use the site, which pages are popular and where things go wrong, so we can improve it. We use Google Analytics for this.
Functional cookies remember the choices you make, such as your region or recently viewed items, to make your visits smoother.
Advertising cookies are set by partners such as Google and Meta to show you relevant ads on other sites and to measure how well our campaigns work.

You can manage cookies in your browser settings at any time, including deleting cookies already stored. Blocking strictly necessary cookies may stop parts of the site from working. Our Cookie Policy explains each type of cookie in more detail.

7. Who we share your data with

We share your personal data only with people and companies who need it to serve you, and only as much as they need:

Delivery partners such as DHL and FedEx, who need your name, address, phone number and email to deliver your parcel and contact you about it.
Sourcing and fulfilment partners who prepare, inspect and dispatch your order.
Payment providers such as Stripe and PayPal, who process your payment and help prevent fraud. They handle your card details under their own strict security standards.
Technology providers who host our website and store our data, deliver and protect our pages (such as Cloudflare), send our emails and support our customer care tools.
Analytics and advertising partners such as Google and Meta, as described in section 6.
Professional advisers such as accountants, auditors and lawyers, under a duty of confidentiality.
Authorities, such as customs, tax authorities, courts or the police, when the law requires it or to protect our rights, our customers or the public.
A future owner, if our business or its assets are ever sold or reorganised, under the same protections described in this policy.

Our service providers may use your data only to provide their services to us, under contracts that require them to keep it confidential and secure.

8. International transfers

We serve customers in several countries and work with partners around the world, so your personal data may be processed outside the country where you live, including in the United Kingdom, the European Union and the United States. Wherever your data goes, we make sure it is protected to the standard required by law, for example by using the standard contractual clauses approved by the UK Information Commissioner's Office or the European Commission, or by working with providers covered by a recognised data protection framework. You can ask us for more information about these safeguards.

9. How long we keep your data

We keep your personal data only for as long as we need it:

Orders and invoices: for as long as tax and accounting laws require, usually six years after the end of the financial year in which you bought.
Your account: for as long as your account is open.
Customer care conversations: for as long as needed to resolve your request and handle any follow-up.
Marketing: until you unsubscribe, after which we keep only your email address on a suppression list so we never email you again by mistake.
Cookies: for the period shown in our Cookie Policy.

When we no longer need your data, we delete it securely or make it anonymous so it can no longer identify you.

10. How we protect your data

We use technical and organisational measures to protect your personal data, including:

encryption of all data sent between your browser and our website (HTTPS / TLS);
payment processing by certified payment providers, so we never store full card numbers;
access to personal data limited to the people who need it for their work;
secure hosting, regular backups and protection against attacks.

No online service can be completely secure, but we work hard to protect your data and we review our measures regularly. If a data breach is likely to put your rights at high risk, we will tell you and the relevant authority as the law requires.

You can help too: choose a strong, unique password for your account and never share it.

11. Your rights

Depending on where you live, you have some or all of these rights over your personal data:

Access: ask for a copy of the personal data we hold about you.
Correction: ask us to correct data that is inaccurate or incomplete. You can update most of it yourself in your account.
Deletion: ask us to delete your data. We may need to keep some of it, such as invoices, when the law requires it.
Restriction: ask us to pause the use of your data, for example while we check its accuracy.
Objection: object to the use of your data based on our legitimate interests, and to direct marketing at any time.
Portability: receive the data you gave us in a common digital format, or ask us to send it to another company.
Withdraw consent: where we rely on your consent, withdraw it at any time. This does not affect what we did before.

To use any of these rights, write to [email protected]. We may ask you to confirm your identity before we act, to protect your data from anyone pretending to be you. We will reply within one month, and tell you if we need longer for a complex request. Using your rights is free, unless a request is clearly unfounded or excessive.

12. Additional information for United Kingdom and European residents

If you live in the United Kingdom, we process your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). If you live in the European Economic Area, the EU General Data Protection Regulation (GDPR) gives you the same rights described in section 11.

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to a data protection authority. In the UK, this is the Information Commissioner's Office (ICO):

Website: ico.org.uk
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
Helpline: 0303 123 1113

In the European Economic Area, you can contact the data protection authority of the country where you live or work.

13. Additional information for United States and Canada residents

Several US states, including California, Colorado, Connecticut, Virginia and Texas, give residents specific privacy rights. This section applies to residents of those states.

What we collect. In the last 12 months, we have collected the categories of personal information described in section 3: identifiers (name, email, postal address, IP address), commercial information (orders and purchase history), internet and device activity (browsing on our site), approximate geolocation, and the contents of messages you send us. We use and disclose them for the purposes in sections 4 and 7.

No sale of personal information. We do not sell your personal information for money. Some advertising cookies, such as those used by Google and Meta, may count as "sharing" for cross-context behavioural advertising, or as a "sale" or "targeted advertising" under some state laws. You can opt out by writing to [email protected] with the subject "Do not sell or share", and by adjusting your cookie settings in your browser. We do not knowingly sell or share the personal information of anyone under 16.

Sensitive information. We do not collect sensitive personal information, such as government ID numbers, for any purpose beyond what is needed to process your order and payment.

Your rights. You can ask to know what personal information we have collected about you, to receive a copy of it, to correct it and to delete it, and to opt out of targeted advertising. You can make a request yourself or through an authorised agent, and you can appeal our decision by replying to our response. We will not treat you differently, or charge you more, for using any of these rights.

California "Shine the Light". California residents can ask once a year whether we disclosed their personal information to third parties for those third parties' own direct marketing. We do not do this.

Canada. If you live in Canada, we handle your personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. You can ask to access and correct your personal information and withdraw your consent at any time by writing to [email protected]. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

14. Additional information for Gulf residents

If you live in the United Arab Emirates, we process your personal data in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. If you live in Saudi Arabia, we follow the Personal Data Protection Law; in Qatar, Law No. 13 of 2016 on the Protection of Personal Data Privacy; and in Oman, the Personal Data Protection Law issued by Royal Decree No. 6/2022. You have the rights described in section 11, including the right to access, correct and delete your data, to restrict or object to its processing and to withdraw your consent. To use them, write to [email protected].

15. Children

Our website and products are intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has given us their personal data, contact us and we will delete it.

16. Links to other websites

Our website may link to other websites and social networks, such as Instagram, Facebook or our courier partners' tracking pages. They have their own privacy policies, and we are not responsible for how they handle your data. Please read their policies before you share personal data with them.

17. Changes to this policy

We may update this policy from time to time, for example when we add a new service or when the law changes. The date at the top of the page shows when it was last updated. If we make important changes, we will let you know by email or with a notice on our website.

18. Contact us

For any question about this policy or your personal data, or to use your rights, contact us. We read every message and reply as quickly as we can.

LuxDesignerBag Customer Care

Privacy requests: [email protected]
General enquiries: [email protected]
Phone (UK): +44 7786 551851
Phone (US): +1 302 601-0356
Postal address: 71-75 Shelton Street, London WC2H 9JQ, United Kingdom