Privacy Policy

Last updated: 16 December 2025

Lovelost respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store, and protect your information when you use our website.

Information We Collect

We may collect and process the following personal data:

  • Information you provide: name, email address, phone number, billing and delivery address, and any other details you provide when contacting us, placing an order, or subscribing to our mailing list.
  • Technical information: IP address, browser type, device information, and site usage data collected via cookies or analytics tools.
  • Order information: purchase history, transaction details, and delivery information.

We do not collect special category (sensitive) data.

How We Use Your Information

We process your personal data for:

  • Responding to enquiries and providing information you request.
  • Processing orders and payments.
  • Fulfilling contracts with customers (selling and delivering products).
  • Sending marketing communications (if you have subscribed).
  • Maintaining and improving our website and user experience.
  • Meeting legal and regulatory obligations.

Lawful basis for processing:

  • Performance of a contract – to process and fulfil your orders.
  • Legitimate interests – to respond to your communications and manage our website.
  • Consent – when you agree to cookies, analytics tracking, or subscribe to marketing emails.
  • Legal obligation – to comply with tax and accounting requirements.

Data Sharing

We do not sell or rent your personal data. We may share data with trusted service providers who process it on our behalf under strict contractual obligations, including:

  • Payment processors (SumUp) for secure payment processing.
  • Delivery services (e.g., Royal Mail, courier services) solely for the purpose of delivering your order.
  • Website hosting and analytics providers.

Payment Information

We do not store payment card details. All payments are processed securely by SumUp, who handle your payment information in accordance with PCI-DSS standards and their own privacy policies:

We may store billing address, order history, and transaction details for accounting, tax purposes, and order fulfilment.

Order Processing and Fulfilment

We collect delivery address, contact details, and purchase information to process and fulfil your orders. This information may be shared with third-party delivery services solely for the purpose of delivering your order.

Marketing Communications

If you subscribe to our mailing list via the subscription form on our website, your email address will be used to send you updates about new releases, merchandise, tour dates, and band news.

You can unsubscribe at any time by emailing us at info@lovelostband.com with 'Unsubscribe' in the subject line, and we will remove you from our mailing list.

Lawful basis: Consent (when you subscribe via the form).

Cookies and Tracking

We use cookies and similar technologies to:

  • Improve website performance and user experience.
  • Understand site traffic via Google Analytics.

Google Analytics helps us understand how visitors use our website by collecting anonymous information about pages visited, time spent on site, and traffic sources. This data is processed by Google and subject to Google's privacy policy.

You can manage or disable cookies through your browser settings or using our cookie consent tool. For detailed information about the cookies we use, please see our Cookie Policy.

Data Retention

We keep your personal data only as long as necessary to fulfil the purposes we collected it for, including legal or reporting requirements.

  • Enquiry-related data: retained for no more than 12 months.
  • Order and transaction data: retained for 6 years to comply with tax and accounting requirements.
  • Marketing subscriber data: retained until you unsubscribe.

How We Protect Your Information

We implement appropriate technical and organisational measures to secure your data, including encryption, secure servers, and access controls.

Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access, correct, or delete your personal data.
  • Restrict or object to our processing.
  • Withdraw consent (where processing is based on consent).
  • Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us at info@lovelostband.com.

Changes to This Policy

We may update this policy from time to time. The latest version will always be posted on this page, with the "last updated" date shown at the top.

Contact Us

If you have questions about this policy or how we handle your data, please contact: info@lovelostband.com