Privacy policy

This Privacy Policy describes how 4thehome.co.uk collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Amazon Selling Partner API and DrStock

4THEHOME is the trading name of Lumen8 Ltd, a UK-based lighting and electrical supplies retailer. Lumen8 uses Amazon’s Selling Partner API (SP-API) through DrStock, an internal order management, inventory and fulfilment application.

DrStock is currently used only by authorised Lumen8 personnel for Lumen8’s own Amazon seller operations. No third-party sellers are currently onboarded to DrStock, and DrStock does not currently provide Amazon OAuth authorisation to other organisations.

Information received from Amazon

Depending on the Amazon API permissions approved for Lumen8, DrStock may receive and process:

• Amazon order numbers and marketplace information;
• order status, purchase date and fulfilment dates;
• product identifiers, SKUs, quantities and order values;
• listing, inventory and pricing information;
• delivery information needed to fulfil an order, including the recipient’s name, delivery address, town or city, postcode and country;
• telephone number or email address where supplied by Amazon;
• dispatch, tracking and shipment-confirmation information.

DrStock does not use Amazon SP-API to collect payment card details, Amazon account passwords or other payment authentication information.

How Amazon information is used

Lumen8 uses Amazon information only for legitimate business and fulfilment purposes, including:

• importing and managing Lumen8’s own Amazon orders;
• matching Amazon SKUs to products held in Lumen8’s warehouse;
• managing inventory quantities and product listings;
• updating prices and stock availability;
• preparing and processing merchant-fulfilled orders;
• generating Royal Mail Click & Drop shipping labels;
• confirming dispatch and storing tracking information;
• preventing incorrect, unmatched or incomplete orders from being dispatched;
• maintaining operational, accounting and fulfilment records.

Amazon buyer information is not sold, used for advertising, used for behavioural profiling or used to contact buyers for marketing purposes.

Sharing and service providers

Amazon information is shared only where necessary to operate Lumen8’s fulfilment process:

• Amazon provides the SP-API services and processes information under its own agreements and privacy documentation.

• Royal Mail Click & Drop receives the delivery information required to generate and process a postage label and fulfil the shipment.

• Veeqo may process order identifiers, line-item information and delivery information where it is used as an order-management or fulfilment service to recover or verify information needed to process an Lumen8 order.

• DrStock is hosted on managed cloud infrastructure. Hosting, database and security providers may process encrypted application data on Lumen8’s behalf as service providers.

Lumen8 does not share Amazon buyer information with other Amazon sellers, data brokers, advertisers or unrelated organisations. Access is limited to service providers necessary for order fulfilment and authorised Lumen8 personnel.

Security and access control

Lumen8 applies technical and organisational measures to protect Amazon information, including:

• role-based access limited to authorised personnel;
• authenticated application sessions;
• account lockout after repeated failed login attempts;
• automatic session expiry after a period of inactivity;
• encryption of marketplace credentials before database storage;
• encrypted connections between application services;
• monitoring and review of application activity;
• controls preventing incomplete, unmatched or unauthorised orders from being labelled or dispatched.

Marketplace credentials are not stored in source code or exposed in application responses. Amazon information is not intentionally downloaded to personal devices or removable media.

Retention and deletion

Amazon delivery information is retained only for as long as it is needed to complete fulfilment and resolve immediate delivery issues. Shipping-address information in active DrStock order records is automatically redacted no later than 30 days after dispatch. The same rule applies to Amazon-origin orders mirrored through Royal Mail Click & Drop.

Active or undelivered fulfilment orders are not redacted prematurely. Once delivery information has been redacted, it is not repopulated through later Amazon recovery or synchronisation processes.

Non-identifying order, product, inventory, tracking and fulfilment records may be retained for up to 12 months for accounting, VAT, operational and reconciliation purposes. Information held separately by Amazon, Royal Mail, Veeqo, hosting providers or other service providers is subject to those providers’ own retention and deletion procedures.

If a label document or backup contains delivery information, it is retained only where necessary for fulfilment, security, legal or audit purposes and is deleted or expires in accordance with the applicable document or backup retention schedule.

Future availability of DrStock

DrStock is currently an internal Lumen8 application. If Lumen8 later makes DrStock available to other businesses, Lumen8 will update this privacy notice, review its Amazon developer registration, complete any required public-developer or application review, and obtain the appropriate Amazon authorisations before onboarding third-party sellers.

Privacy enquiries

Questions about Lumen8’s handling of Amazon information can be sent to:

Lumen8 Ltd
Trading as 4THEHOME
Unit 9 Hinksey Business Centre
North Hinksey Lane
Oxford
OX2 0NR
United Kingdom

Email: customerservice@4thehome.co.uk

You can also contact us through:

https://4thehome.co.uk/pages/contact-us

Legal operator: Lumen8 Ltd, trading as 4TheHome.

Privacy enquiries: For any questions relating to your data or this policy, please contact us at customerservice@4thehome.co.uk.

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

Device information

  • Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
  • Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
  • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels (Google Analytics, Google Ads, Microsoft Ads, Microsoft Clarity, Mouseflow, Facebook
  • Disclosure for a business purpose: shared with our processor Shopify 

Order information

  • Examples of Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers ( Amazon Pay, Amex, Paypal, Visa, Mastercard, Shopify Pay) email address, and phone number.
  • Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
  • Source of collection: collected from you.
  • Disclosure for a business purpose: shared with our processor Shopify 

 

Minors

The Site is not intended for individuals under the age of 16. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address below to request deletion.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

  • We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
  • We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Behavioural Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Using Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

 

ON WHAT LEGAL BASIS DO WE USE YOUR DATA?

 

To be able to process your data, we may rely on different legal bases, including:

  • Your consent (only when legally required or permitted). If we rely on your consent as a legal basis for processing your data, you may withdraw your consent at any time;
  • The necessity to establish a contractual relationship with you and to perform our obligations under a contract;
  • The necessity for us to comply with legal obligations and to establish, exercise, or defend against legal claims;
  • The necessity to pursue our legitimate interests, including:
  • To ensure that our networks and information are secure
  • To administer and generally conduct business within the Company
  • To prevent or investigate suspected or actual violations of law, breaches of a business customer contract, or non-compliance with Lumen8 Ltd policies;
  • To optimize or extend our marketing reach and communication relevance;
  • The necessity to respond to your requests
  • The necessity to protect the vital interests of any person;
  • Any other legal basis anyhow permitted by local laws.

 

Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We DO NOT engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

  • Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
  • Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.

 

Your rights

GDPR

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

Cookies Necessary for the Functioning of the Store

Name

Function

_ab

Used in connection with access to admin.

_secure_session_id

Used in connection with navigation through a storefront.

cart

Used in connection with shopping cart.

cart_sig

Used in connection with checkout.

cart_ts

Used in connection with checkout.

checkout_token

Used in connection with checkout.

secret

Used in connection with checkout.

secure_customer_sig

Used in connection with customer login.

storefront_digest

Used in connection with customer login.

_shopify_u

Used to facilitate updating customer account information.

 

Reporting and Analytics

Name

Function

_tracking_consent

Tracking preferences.

_landing_page

Track landing pages

_orig_referrer

Track landing pages

_s

Shopify analytics.

_shopify_fs

Shopify analytics.

_shopify_s

Shopify analytics.

_shopify_sa_p

Shopify analytics relating to marketing & referrals.

_shopify_sa_t

Shopify analytics relating to marketing & referrals.

_shopify_y

Shopify analytics.

_y

Shopify analytics.

 

 

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at customerservice@4thehome.co.uk or by mail using the details provided below:

Lumen8 LTD

T/A 4THEHOME Unit 9 Hinksey Business Centre, North Hinksey Lane Oxford OX2 0NR, United Kingdom

Last updated: 04/09/2026

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here https://www.gov.uk/data-protection