Privacy Policy

Last updated: 22 July 2026

Little Lumiverse is a small brand run by real people (and one very opinionated Westie). We only ask for the information we actually need, we never sell it, and we keep it safe. This page explains what we collect, why, and the rights you have over it.

If you have any questions about your data, email us any time at hello@littlelumiverse.com and a human will reply.

Who we are

Little Lumiverse (“we”, “us”, “our”) is based in Tallinn, Estonia, and operates littlelumiverse.com. For the purposes of the EU General Data Protection Regulation (GDPR), we are the “data controller” of the personal information described below.

Contact for all privacy matters: hello@littlelumiverse.com

What we collect

We only collect what we need to run the site, send the things you order, and stay in touch when you ask us to.

Information you give us

• Contact and order details — your name, email address, shipping address and, where relevant, phone number, when you place an order, subscribe to our monthly mail, or message us.
• Messages and photos — anything you send through our contact form, including the optional photo of your own little one.
• Newsletter sign-ups — your email address when you join “Letters from the Lumiverse.”

Information collected automatically

• Usage and device data — things like your IP address, browser type, pages visited and time on site, collected through cookies and similar technology so we can keep the site working and understand what’s useful.

Payment information

• When you buy something, your card details go directly to our payment provider. We never see or store your full card number — we only receive confirmation that a payment succeeded and a limited record of the transaction.

How we use your information

We use your information to:

• process and deliver your orders and manage your subscription;
• reply to your messages and provide support;
• send you the newsletter and shop updates, if you’ve asked us to;
• keep the site secure, prevent fraud and fix problems;
• understand how the site is used so we can make it better;
• meet our legal and accounting obligations.

Our legal basis (GDPR)

We rely on the following legal grounds to process your data:

• Contract — to fulfil an order or subscription you’ve placed with us.
• Consent — to send marketing emails and to set non-essential cookies. You can withdraw consent at any time.
• Legitimate interests — to keep the site secure, prevent abuse, and understand how it’s used, in a way that doesn’t override your rights.
• Legal obligation — to keep tax and accounting records as required by law.

Who we share it with

We don’t sell your personal information. We share it only with the trusted service providers who help us run Little Lumiverse, and only as far as they need it to do their job. These include:

• our website and hosting provider;
• our payment processor;
• shipping and fulfilment partners who deliver your order;
• our email and newsletter platform;
• analytics providers who help us understand site usage.

Some of these providers may process data outside the European Economic Area. Where that happens, we make sure appropriate safeguards are in place (such as the European Commission’s Standard Contractual Clauses). We may also disclose information if required by law.

Cookies

We use cookies to keep the site working, remember your preferences, and understand how it’s used. Strictly necessary cookies are always on; everything else runs only with your consent. You can change your choices any time through the cookie settings link on our site, or by adjusting your browser settings.

How long we keep it

We keep your information only as long as we need it: order and transaction records for as long as tax and accounting law requires (typically seven years), newsletter data until you unsubscribe, and contact-form messages for as long as needed to handle your enquiry.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• correct anything that’s inaccurate or incomplete;
• erase your data (“right to be forgotten”);
• restrict or object to how we process it;
• portability — receive your data in a usable format;
• withdraw consent at any time, without affecting processing that already happened.

To exercise any of these, email hello@littlelumiverse.com. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or your local supervisory authority.

Marketing emails

If you’ve signed up for our newsletter, you can unsubscribe at any time using the link at the bottom of every email, or by emailing us. We won’t add you to marketing lists without your consent.

Children

Little Lumiverse isn’t directed at children, and we don’t knowingly collect personal data from anyone under 16. If you believe a child has given us their information, please contact us and we’ll delete it.

Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “last updated” date above, and for significant changes we’ll do our best to let you know.

Contact

Questions, requests, or a photo of your Westie? Email hello@littlelumiverse.com.