Privacy policy

Last updated: April 2026

Section 1 - Who We Are

Lensora is a UK-based lens cleaning brand operating at lensora.uk. Contact: hello@lensora.uk. We are the data controller for personal data collected through lensora.uk and comply with UK GDPR and the Data Protection Act 2018.

Section 2 - What Personal Data We Collect

Order data: When you place an order, we collect your full name, email address, delivery address, billing address, phone number (if provided), and order details including product purchased, price paid, and payment method used.

Payment data: Payment transactions are processed securely by Shopify Payments. We do not store your full credit or debit card details. Card data is handled in accordance with PCI DSS compliance standards.

Account data: If you create an account, we store your login credentials and order history.

Marketing data: If you subscribe to our newsletter or refill waitlist, we collect your email address and record your marketing consent.

Website data: When you visit lensora.uk, we automatically collect your IP address, browser type, pages visited, time on pages, referral source, and device type via cookies and Shopify analytics.

Communications data: If you contact us by email, we retain a record of your communication and our response.

Section 3 - How We Use Your Personal Data

We use your personal data to process and fulfil orders, manage your account, respond to enquiries, send transactional and marketing emails (where consented), notify refill waitlist subscribers, improve our website and products, comply with legal obligations, and prevent fraud. We will only process your personal data where we have a lawful basis to do so.

Section 4 - Who We Share Your Data With

Shopify Inc. — our ecommerce platform, which hosts our store and processes order and payment data. Shopify is GDPR compliant.

Royal Mail Group — your name and delivery address are shared to enable delivery of your order.

Klaviyo Inc. — our email marketing platform, which stores email addresses of newsletter and waitlist subscribers. You can unsubscribe at any time.

Shopify Payments / Stripe — our payment processor, which handles payment card data securely in accordance with PCI DSS standards.

We do not sell, rent or trade your personal data to any third party for their own marketing purposes. Ever.

Section 5 - International Data Transfers

Some of our third-party service providers are based outside the UK. Where we transfer your data internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as Standard Contractual Clauses or adequacy decisions.

Section 6 - How Long We Retain Your Data

Order data is retained for 6 years in accordance with HMRC requirements. Marketing data is retained until you unsubscribe or request deletion. Website analytics data is typically retained for 26 months. Email correspondence is retained for up to 2 years.

Section 7 - Cookies

Our website uses cookies to enable core website functionality, remember your shopping cart, analyse website traffic, and support our marketing activities. Types of cookies we use include essential cookies (required for the website to function), analytics cookies (help us understand how visitors use our site), and marketing cookies (used to track visits from marketing campaigns).

You can control and delete cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

Section 8 - Your Rights Under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; restrict how we process your data; receive a copy of your data in a portable format; and object to our processing of your data.

To exercise any of these rights, please email hello@lensora.uk. We will respond within 30 days. We may need to verify your identity before processing your request.

Section 9 - Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection supervisory authority, the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the opportunity to address your concerns before you contact the ICO — please email hello@lensora.uk in the first instance.

Section 10 - Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised date. We encourage you to review this policy periodically.