Privacy Policy
Last updated: 1 July 2026
This Privacy Policy explains how Lucky Fours London ("we", "our", or "us") collects, uses, shares, and protects your personal information when you visit our website, place an order, contact our customer support team, or otherwise interact with our store.
This Privacy Policy applies to the Lucky Fours London website and to all purchases made through our online store.
Lucky Fours London is operated by Outlight Systems, registered in the Netherlands. Outlight Systems is the data controller responsible for your personal data. Full business and contact details are provided at the end of this Privacy Policy.
1. Information We Collect
We collect only the personal information necessary to operate our store, process orders, provide customer support, improve our website, and comply with legal obligations.
Information you provide directly may include:
- Full name
- Email address
- Phone number, if provided
- Shipping address
- Billing address
- Order details and purchase history
- Customer service communications, including emails, messages, return requests, and refund requests
- Account details, if you create an account on our website
Information collected automatically when you visit our website may include:
- IP address
- Browser type, language, operating system, and device information
- Pages visited and time spent on our website
- Referral source
- Approximate location based on your IP address
- Cookies and similar tracking technologies
Payment Information
We do not store full credit card, debit card, or bank account details on our own servers.
Payments are processed securely by our payment service providers. We may receive limited payment-related information, such as the payment method used, transaction reference, payment status, and partial card details where available, for order management and record-keeping purposes.
2. How We Use Your Information
We use your personal information for the following purposes:
- To process and deliver your order
- To confirm payments
- To provide order updates and tracking information
- To respond to customer enquiries
- To process returns and refunds
- To manage your customer account
- To prevent fraud and maintain website security
- To send marketing communications where you have given consent
- To improve our website and customer experience
- To comply with legal, tax, accounting, consumer protection, GDPR, and UK GDPR obligations
We do not sell your personal information.
3. Legal Basis for Processing
Where the GDPR, UK GDPR, or similar data protection laws apply, we process your personal data on the following legal bases:
- Performance of a contract
- Consent
- Legitimate interests
- Legal obligation
You may withdraw your consent at any time where processing is based on consent.
4. Who We Share Your Information With
We only share personal information where necessary to operate our business and provide our services.
This may include:
- Payment service providers
- Shipping carriers and delivery partners
- Fulfilment partners and warehouses
- Customer support and email platforms
- Website hosting and e-commerce providers
- Analytics providers
- Advertising platforms such as Google or Meta, where permitted by law
- Legal, tax, accounting, and regulatory authorities where required
All service providers are required to process your personal information securely.
5. International Data Transfers
Some of our service providers may process personal information outside the European Economic Area, the United Kingdom, or your country of residence.
Where this occurs, we use appropriate safeguards such as:
- Adequacy decisions
- Standard Contractual Clauses
- Approved international transfer mechanisms
- Sharing only the information necessary to provide the relevant service
6. How Long We Keep Your Information
We only retain personal information for as long as necessary or required by law.
Typical retention periods include:
- Order records: up to 7 years
- Customer support communications: up to 3 years
- Return and refund documentation: up to 7 years
- Marketing consent records: as long as required
- Customer accounts: until deleted, unless legal retention applies
- Website analytics: according to provider settings
- Cookie data: as described in our Cookie Policy
After the applicable retention period, personal information is securely deleted, anonymised, or archived where legally required.
7. Your Privacy Rights
Depending on your location, you may have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction
- Right to data portability
- Right to object
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
To exercise any of these rights, please contact:
We aim to respond within 5 business days, and no later than one month where required by law.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to operate our website, improve your shopping experience, analyse website performance, and, where you consent, support marketing and advertising.
Cookies may include:
- Strictly necessary cookies
- Functional cookies
- Analytics cookies
- Marketing cookies
Non-essential cookies are only used where required by law after your consent.
For more information, please see our Cookie Policy.
9. Marketing Communications
We only send marketing emails where you have opted in or where otherwise permitted by law.
Every marketing email contains an unsubscribe link.
You may also unsubscribe at any time by contacting:
Transactional emails relating to your orders are not considered marketing communications.
10. Data Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, misuse, loss, or disclosure.
Security measures include:
- HTTPS/TLS encryption
- Secure payment processing
- Restricted access to personal information
- Security measures implemented by our technology providers
- Regular reviews of our systems and processes
Although we take appropriate security measures, no method of electronic transmission or storage is completely secure.
11. Children's Privacy
Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16.
If you believe that a child has provided us with personal information, please contact us at:
12. Third-Party Links
Our website may contain links to third-party websites, including social media platforms, payment providers, shipping carriers, or other external services.
We are not responsible for the privacy practices or content of third-party websites.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, or legal requirements.
When changes are made, the "Last updated" date at the top of this page will be revised.
14. Governing Law
This Privacy Policy is governed by the laws of the Netherlands unless mandatory consumer protection or data protection laws in your country of residence provide otherwise.
15. Who We Are
Brand name:
Lucky Fours London
Operating company / Data Controller:
Outlight Systems
Registered office:
Hendrik Soeteboomstraat 4
1035 NX Amsterdam
The Netherlands
Dutch Chamber of Commerce number (KvK):
42045311
VAT number:
NL869455904B01
16. Contact Us
For privacy-related questions, requests, or complaints, please contact us:
Email:
support@luckyfours-london.com
Postal address:
Outlight Systems / Lucky Fours London
Hendrik Soeteboomstraat 4
1035 NX Amsterdam
The Netherlands
Customer service hours:
Monday – Friday: 09:00 – 17:00 GMT/BST
Saturday – Sunday: 09:00 – 13:00 GMT/BST
Average response time:
Within 24 hours on business days.
We aim to respond to all privacy-related enquiries within 5 business days, and no later than one month where required by applicable data protection law.