Legal
Privacy
notice.
Last updated 2 August 2026
This notice explains what personal data the house collects, what we do with it and what rights you have. It is written to meet the UK GDPR and the Data Protection Act 2018.
Controller: LEMON GROUP INTERNATIONAL LIMITED, trading as PAUL SAGOO. Registered in England and Wales, company number 05807099. Correspondence: the contact page. PAUL SAGOO® is a registered UK trade mark, number UK00004009291.
What we collect and why
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Name, email, phone, country | To record your order and requested number, and contact you to confirm it | Performance of a contract | Until the order completes or is cancelled, then 6 years for tax records |
| Delivery address | To ship your order and calculate duties | Performance of a contract | 6 years |
| Order and edition number | To run the register and honour the lifetime repair undertaking | Legitimate interests — keeping a permanent register is the point of a numbered edition | Indefinitely, as the register is permanent |
| Prescription details | To glaze lenses correctly | Performance of a contract; explicit consent where it is health data | 3 years, so we can remake a lens |
| Name and email on an order or the waiting list | To confirm your order and tell you when your piece is ready | Consent | Until you unsubscribe |
Cookies and similar technology
We use a small number of strictly necessary cookies and browser storage entries to keep your bag, your configuration and your intro preference between pages. These are exempt from consent under PECR because the site cannot work without them. We set no advertising or cross-site tracking cookies. Full detail is on the cookies page.
Who we share it with
Only with parties who need it to fulfil your order: our payment processor, our carrier, and our glazing laboratory where a prescription is involved. We also use Plausible Analytics (Plausible Insights OÜ, Estonia) to count visits. Plausible is cookieless, hosted in the EU, and collects no personal data and no cross-site identifier: it tells us how many people read a page and which links were clicked, never who did it. It is the only analytics that runs without asking you. If you allow cookies we also load the Meta pixel (Meta Platforms Ireland Limited) and the TikTok pixel (TikTok Information Technologies UK Limited), which are advertising vendors and are told which pieces you looked at, added or enquired about — never your name, your address or your prescription. Refuse, and neither script is fetched at all. Every one of these is named here because a processor you do not disclose is a processor you have not been transparent about. Each acts under contract and may not use your data for their own purposes. We do not sell data, ever.
Where a processor is outside the UK, transfers are made under the UK International Data Transfer Addendum or an adequacy decision.
Your rights
- Ask for a copy of the data we hold about you.
- Have inaccurate data corrected.
- Have data erased, unless we must keep it for tax or for the permanent edition register.
- Restrict or object to processing based on legitimate interests.
- Receive your data in a portable form.
- Withdraw consent at any time, without affecting what came before.
To exercise any of these, write to us through the contact page. We answer within one month.
If you are not satisfied you may complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113.