Privacy Policy
HOPE LUMLEY™ Privacy Policy
1. Corporate Identity and Data Controller
This Privacy Policy applies to HOPE LUMLEY™, a trading name of FLIGHTBAG LTD, a company incorporated and registered in England and Wales under company number 16398429.
For the purposes of applicable data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, FLIGHTBAG LTD is the data controller responsible for your personal data.
References to “HOPE LUMLEY™”, “the House”, “we”, “us”, or “our” in this policy refer to FLIGHTBAG LTD acting in its capacity as operator of the HOPE LUMLEY™ brand.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
Information you provide directly:
– Full name
– Email address and telephone number
– Billing and shipping addresses
– Order details and purchase history
– Preferences relating to products, fittings, and services
– Communications submitted via our Contact Page
Information collected automatically:
– IP address
– Browser type and device information
– Website usage data, including pages viewed and interaction patterns
– Cookies and tracking identifiers
We do not knowingly collect special category data unless it is voluntarily provided.
3. Lawful Basis for Processing
We process personal data only where we have a lawful basis to do so under UK GDPR, including:
– Contractual necessity, in order to process and fulfil orders
– Legitimate interests, to operate, improve, and secure our website and services
– Consent, where required for marketing communications or non-essential cookies
– Legal obligation, to comply with applicable laws and regulations
4. How We Use Your Information
Your personal data is used for the following purposes:
– Processing and fulfilling orders, including payment and delivery
– Managing customer relationships and communications
– Responding to enquiries and requests
– Providing relevant updates regarding products or services
– Improving website functionality, performance, and user experience
– Preventing fraud and maintaining platform security
We do not sell, rent, or trade personal data to third parties.
5. Data Sharing and Third Parties
We may share personal data with carefully selected third-party service providers where necessary for business operations, including:
– Payment processors
– Logistics and delivery providers
– IT, hosting, and infrastructure providers
– Marketing and analytics service providers
All third parties are contractually required to process personal data in accordance with applicable data protection laws and to implement appropriate technical and organisational safeguards.
We do not permit third parties to use your data for their own independent purposes.
6. International Data Transfers
Where personal data is transferred outside the United Kingdom, appropriate safeguards are implemented, including:
– Transfers to jurisdictions recognised as providing adequate protection; or
– The use of standard contractual clauses or equivalent legal mechanisms
7. Data Security
FLIGHTBAG LTD implements appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.
No method of transmission over the internet is entirely secure, and absolute security cannot be guaranteed.
8. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including:
– Compliance with legal, accounting, and regulatory requirements
– The resolution of disputes and enforcement of agreements
Data that is no longer required is securely deleted or anonymised.
9. Cookies and Tracking Technologies
This website uses cookies and similar technologies to:
– Ensure essential functionality
– Analyse performance and usage
– Enhance user experience
Where required, non-essential cookies are deployed only with your consent. You may manage or disable cookies through your browser settings.
10. Your Rights
Under UK data protection law, you have the right to:
– Access your personal data
– Request correction of inaccurate or incomplete data
– Request erasure of your data
– Restrict or object to processing
– Request data portability
– Withdraw consent where processing is based on consent
Requests may be submitted via the Contact Page. We may require verification of identity before fulfilling requests.
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
11. Children’s Data
This website is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.
12. Changes to This Policy
This Privacy Policy may be updated periodically to reflect legal, regulatory, or operational developments. Updates will be published on this page with a revised “Last Updated” date.
13. Contact and Data Protection Enquiries
All privacy-related enquiries, including the exercise of legal rights, must be submitted via the official Contact Page of this website.
No communication shall be considered legally effective unless acknowledged in writing by an authorised representative of FLIGHTBAG LTD.
Legal Framework
This Privacy Policy forms part of the legal and operational framework governing the activities of FLIGHTBAG LTD trading as HOPE LUMLEY™ and should be read in conjunction with our Terms and Conditions and related policies.
Last Updated: March 2026
