Privacy policy

Lumi's LTD, 66 Paul Street, London, EC2A 4NA. We cook home-style ready meals for academy players, and this website is where you order them. We are the people responsible for your details.

Questions about your details, or want something changed or deleted? Email us at To confirm: Lumi's privacy email address.

Registered with the Information Commissioner's Office: To confirm: registration number, once Lumi's is registered.

• You. Your name, your email address and a password. We use these so you can log in and so we know who an order belongs to. Your password is stored scrambled, so not even we can read it.
• Your player. Their first and last name, which you give us. We use it only to pack and label the right meals for them. We do not ask for, or keep, any allergy or health information. Allergens are shown on the menu and the choice is yours. To confirm: the site can now show allergens, but this sentence is only true once Ella's real allergens are entered for every dish (check that no dish has them missing)
• Your orders. Which meals, for which player, on which days, what they cost, and whether they are paid for.
• Your payment. Payments are taken by Stripe on their own secure page. Your card details never reach us. We keep only a reference number from Stripe that links the payment to your order. Stripe keeps its own record of the payment under its own privacy policy, which we cannot delete.
• Your email preference. If you tick the box when you sign up, we will email you when the new monthly menu is out. You can change your mind at any time.
• One cookie. A small file that keeps you logged in. We do not use advertising cookies, tracking or analytics.

• To take and cook your order, because you asked us to.
• To keep the records the law requires us to keep, such as for accounts and tax.
• To keep the website secure and sort out problems or complaints.
• To email you about the menu, only if you ticked the box. That is your choice and you can take it back whenever you like.

A few companies help us run the website. They only handle your details to do that job, and we do not sell or share your details with anyone for their own use.

• Supabase, who store our database and look after logins.
• Stripe, who take payments.
• Vercel, who host the website.
• To confirm: the email service used for menu emails, once it is chosen

Some of these companies may process data outside the UK. Where they do, they must protect it to a UK standard. To confirm: where our database is stored, and the safeguards each company uses.

• Your account details, for as long as you have an account with us. You can delete your account yourself from the Account page. That removes your name, your email and your players' names, and closes your login. Orders you have paid for are kept without your details, for the periods below.
• The details of what was in an order and who it was for, for 12 months after the order, so we can look back if there is ever a question or a complaint. To confirm: Lumi's to confirm 12 months
• Orders you saved but never paid for, about 30 days after their last meal day.
• Basic payment and accounting records, for as long as the law requires for tax, which is usually six years. To confirm: Lumi's to confirm with their accountant
• Your email preference, until you tell us to stop emailing you.

You can ask us at any time to:

• show you what we hold about you,
• correct anything that is wrong,
• delete your details (you can do this yourself from the Account page),
• stop using your details in a particular way, and
• stop sending you emails, which you can also do from any email.

Email us at To confirm: Lumi's privacy email address and we will reply within a month. If you are unhappy with how we have handled your details, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Players are often children, so please only add a player if you are their parent or carer. We only hold their name, and we only use it to label their meals.

If we change how we use your details, we will update this page and the date at the top.