Last updated: 22 February 2026
This privacy policy applies to the websites operated by Hudson Lighting:
When we say “we”, “us”, or “our” in this policy, we mean the relevant Hudson Lighting entity that operates the website you are using. Hudson Lighting Ltd is the data controller for hudsonlighting.co.uk and Hudson Lighting Limited is the data controller for hudsonlighting.ie.
| When | Data collected |
|---|---|
| Creating an account (Public or Trade) | Name, email address, phone number, company name, billing/delivery address, password (hashed), account type |
| Guest checkout | Name, email address, phone number, delivery address, optional password |
| Placing an order | Order details, payment method, delivery address, any order notes |
| Contacting us (email, phone, contact form) | Name, email address, phone number, message content |
| Requesting a brochure or marketing materials | Name, postal address, email address |
| Newsletter sign-up | Email address, name (if provided) |
| Social messaging (Facebook Messenger, Instagram DMs) | Your social media user ID, display name, profile picture URL, message content including any images or attachments you send |
| Lighting design consultations | Name, project details, site plans, property information |
| Technology | Data collected | Purpose |
|---|---|---|
| Essential cookies | Session ID, login state, basket contents | Site functionality |
| Google Analytics | Pages visited, time on site, device type, approximate location | Understanding how visitors use our site |
| Google Ads (AW-11123832819) | Conversion events (add to cart, purchase) | Measuring advertising effectiveness |
| Meta Pixel (1043562269981773) | Page views, add to cart, checkout, purchase events | Measuring social media advertising effectiveness |
| Google reCAPTCHA | Browser and interaction data | Preventing spam and abuse on forms |
| Server logs | IP address, browser type, pages requested, timestamps | Security and troubleshooting |
We accept payments via Stripe (credit/debit cards) and BACS bank transfer. When you pay by card, your payment details are processed directly by Stripe and are never stored on our servers. We only receive a confirmation of payment and a truncated card reference. For BACS payments, you transfer funds to our bank account using details we provide.
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and fulfilling your orders | Contract performance |
| Managing your account | Contract performance |
| Sending order confirmations and delivery updates | Contract performance |
| Responding to your enquiries (email, phone, social messaging) | Legitimate interest / Contract performance |
| Sending brochures and marketing materials you’ve requested | Consent |
| Sending our newsletter | Consent (you can unsubscribe at any time) |
| Following up on dispatched marketing materials | Legitimate interest |
| Improving our website and services | Legitimate interest |
| Running advertising campaigns and measuring their effectiveness | Consent (cookie consent) |
| Preventing fraud and ensuring site security | Legitimate interest |
| Complying with tax, accounting, and legal obligations | Legal obligation |
| Managing lighting design projects and storing design files | Contract performance / Legitimate interest |
We use Facebook Messenger and Instagram Direct Messages to communicate with customers who contact us through those platforms. When you message us on Facebook or Instagram:
This applies to messages sent to our UK page (Hudson Lighting Ltd) and our Ireland page (Hudson Lighting Ireland) on both Facebook and Instagram.
Cookies are small text files placed on your device when you visit our website. We use the following types:
These are required for the website to function (e.g., session management, shopping basket, login). They cannot be disabled.
Google Analytics helps us understand how visitors use our site. These cookies collect information in an aggregated form. You can opt out via your browser settings or by using the Google Analytics Opt-out Browser Add-on.
We use Google Ads and Meta (Facebook) Pixel to measure the effectiveness of our advertising and to show you relevant ads on other platforms. These cookies track actions such as adding items to your basket and completing a purchase. You can manage your preferences through:
We share your personal data only where necessary:
| Recipient | Purpose |
|---|---|
| Stripe | Processing card payments securely |
| Royal Mail / courier services | Delivering orders and marketing materials |
| Meta (Facebook/Instagram) | Delivering social media messages you send us; advertising measurement |
| Analytics and advertising services | |
| IONOS | Web hosting provider (servers located in the EU/UK) |
| Dropbox | Storing lighting design project files |
| Anthropic (Claude AI) | Automated email categorisation and customer service assistance (email content only, used to improve response times) |
We do not sell your personal data to any third party. We will disclose personal data if required by law or to protect our legal rights.
Some of our service providers (Stripe, Google, Meta, Anthropic) may process data outside the UK and the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner’s Office (ICO), or the service provider’s participation in an approved certification framework.
| Data type | Retention period |
|---|---|
| Customer accounts and order history | Duration of account + 7 years (for tax/legal obligations) |
| Guest checkout data | 7 years from order date |
| Social messaging conversations | 3 years from last message, or until you request deletion |
| Newsletter subscribers | Until you unsubscribe |
| Brochure dispatch records | 2 years |
| Website analytics data | 26 months (Google Analytics default) |
| Server logs | 90 days |
Under the UK GDPR and EU GDPR, you have the following rights:
To exercise any of these rights, please contact us using the details below. We will respond within one month.
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
We take appropriate technical and organisational measures to protect your personal data, including:
No method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority:
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.
