Privacy policy
Last updated: 24 August 2026
Who we are
Ranumi Ltd ("Ranumi", "we", "us") is the data controller for personal data collected through ranumi.com. We are registered in England and Wales under company number 16849368, and our correspondence address is Pantiles, Lyndale, London, NW2 2NY. You can reach us at founder@ranumi.com. We are registered with the Information Commissioner's Office under reference ZC168705, as required by the Data Protection Act 2018.
What we collect
When you buy from us we collect your name, delivery and billing address, email address, phone number, order history and delivery details. We never see or store your full card details. Payments are handled by Shopify Payments and, where you choose it, PayPal, Apple Pay, Google Pay or Shop Pay.
When you join our waitlist or sign up to emails or SMS we collect your email address, and your phone number if you give it. If you join the waitlist we will email you about launch, early access and offers until you unsubscribe.
When you contact us we collect whatever you send, including your email address and the content of your message.
When you use the site we collect your device type, browser, IP address, the pages you view, the site that referred you and how you move through the site. This is collected through cookies and similar technologies, which are explained in the cookie policy below.
When you leave a review we collect your name and the content of your review. Reviews are handled by Trustpilot under their own privacy policy.
Why we use it, and our lawful basis
We process and deliver your order, send you order and delivery updates, and handle returns, refunds and complaints. Our lawful basis for all of this is performance of the contract you entered into when you bought from us.
We keep financial and transaction records because we are legally required to. Our lawful basis is legal obligation.
We run the waitlist and tell you when we launch because you asked us to. Our lawful basis is consent.
We send marketing emails and SMS to tell you about products and offers. Our lawful basis is your consent, or legitimate interest where you have bought from us before. Either way you can opt out at any time.
We use analytics to understand what works on the site and to fix what does not, and we use advertising and retargeting to show you relevant ads. Our lawful basis for both is your consent, given through the cookie banner.
We take steps to prevent fraud and keep the site secure, and we invite customers to review a purchase so we can collect honest feedback. Our lawful basis for both is legitimate interest.
Who we share it with
We use third party suppliers to run the business. Each acts as our processor under a written agreement and can only use your data to provide their service to us. None of them can use it for their own purposes. We do not sell your personal data.
Our ecommerce platform, hosting, checkout and order management are provided by Shopify, which receives your name, email, phone number, billing and delivery address, order history and browsing data, and processes it in Canada, the EU and the US. Card payments and fraud checks are handled by Shopify Payments, which receives your name, billing address, a payment token and the transaction amount. Where you choose to pay another way, PayPal receives your name, email and transaction amount, and Apple Pay, Google Pay and Shop Pay receive your name, address and a payment token. These providers process data in the UK, the EU and the US.
Deliveries are made by Evri and Royal Mail. Evri receives your name, delivery address, email address, phone number and order reference so it can deliver your parcel and send you tracking updates. Royal Mail receives your name and delivery address. Both process data in the UK. We pass your email and phone number to the carrier so they can keep you updated and contact you about a delivery, which is part of fulfilling your order.
Our email marketing and CRM platform handles marketing email, customer lists, segmentation and automated campaigns. It receives your name, email address, phone number if you have given it, your order history, what you have opened and clicked, and your purchase behaviour. Transactional email such as order and shipping confirmations is sent through Shopify Email, which receives your name, email address and order details. Where we send marketing or delivery SMS, our SMS platform receives your name and phone number. Depending on the provider, these services may process data in the UK, the EU or the US.
Marketing platforms build a picture of how you interact with our emails, including what you open, what you click and what you have bought, and we use that to decide what to send you. You can opt out at any time and we will stop.
We may change provider from time to time within any of these categories. Where we do, the replacement is held to the same contractual and security standards, and we will update this policy.
Review invitations and review hosting are handled by Trustpilot, which receives your name, email address and order reference and processes data in the EU. Site analytics are provided by Google Analytics 4, which receives a pseudonymous identifier, your IP address, your device and browser and the pages you view. Advertising and conversion measurement are handled by Meta and TikTok, which receive a hashed version of your email address along with browsing and purchase events, and by Google Ads, which receives a pseudonymous identifier along with browsing and purchase events. These providers process data in the US. None of them receive anything unless you have accepted the relevant cookies.
We also share data with our accountants and professional advisers where they need access to financial records, and with any authority we are legally required to disclose to.
International transfers
Some of our suppliers process data outside the UK, including in the United States. Where that happens, transfers are protected by UK adequacy regulations, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
We keep order and transaction records for seven years for tax and accounting purposes. We keep marketing contact data until you unsubscribe, after which we hold a suppression record so that we do not contact you again. We keep customer service correspondence for two years. Website analytics data is kept for the periods set out in the cookie policy below.
Your rights
Under UK GDPR you have the right to ask for a copy of the data we hold about you, to ask us to correct anything that is wrong, and to ask us to delete your data where we do not need it for a legal reason. You can also ask us to restrict how we use it, object to processing we carry out on the basis of legitimate interest, ask for your data in a portable format, and withdraw your consent at any time, including for marketing.
To exercise any of these rights, email founder@ranumi.com and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Marketing
Every marketing email we send has an unsubscribe link and every marketing SMS has a stop instruction. You can also just email us and we will take you off the list.
Children
Our site and products are not aimed at under-18s and we do not knowingly collect data from them.
Changes
We will update this policy when what we do changes. The date at the top tells you when it last changed.
RANUMI Cookie Policy
Last updated: 24 August 2026
What cookies are
Cookies are small files placed on your device when you visit a website. They let the site remember things like what is in your basket, and they let us understand how the site is being used.
Your choices
When you first visit ranumi.com you will see a cookie banner. Strictly necessary cookies are always on because the site cannot work without them. Everything else only runs if you agree to it. You can change your mind at any time using the cookie settings link in the site footer, or by clearing cookies in your browser.
Strictly necessary cookies
These are always on. They run the basket, the checkout, login and security, and without them you would not be able to buy anything.
Shopify sets cart, cart_ts and cart_ver to keep your basket, which last two weeks. It sets _secure_session_id to track your session through checkout, which lasts 24 hours, and secure_customer_sig to keep you logged in, which can last up to 20 years. It also sets _shopify_essential for core platform function and _cmp_a and _tracking_consent to store your cookie preferences, all of which last a year, and keep_alive for localisation, which lasts 30 minutes.
Analytics cookies
These only run with your consent. They tell us which pages work and where people drop off.
Shopify sets _shopify_y and _shopify_s for visitor and session analytics, lasting a year and 30 minutes respectively, and _landing_page and _orig_referrer to record where visitors arrive from, which last two weeks. Google Analytics sets _ga and ga* to distinguish visitors and measure sessions, which last two years.
Marketing cookies
These only run with your consent. They let us show you ads and measure whether they work.
Meta sets _fbp for ad delivery and measurement, which lasts three months. TikTok sets _ttp and ttclid for ad delivery and conversion measurement, which last 13 months. Google Ads sets _gcl_au for conversion linking and measurement, which lasts three months, and Google also sets IDE and test_cookie through doubleclick.net for ad targeting and measurement, lasting 13 months and 15 minutes respectively.
Third party embeds
Trustpilot sets its own cookies when our review widgets load. These are governed by Trustpilot's own cookie policy.
Turning cookies off
You can block or delete cookies in your browser settings. Bear in mind that blocking strictly necessary cookies will break the basket and the checkout.
Contact
If you have any questions about cookies or this policy, email founder@ranumi.com.