Privacy policy

Last updated: March 4, 2026

Lumivela operates this online store and website, including all related information, content, features, tools, products, and services, to provide you as a customer with a first-class shopping experience (the "Services"). Lumivela is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal data when you visit, use, make a purchase or other transaction, or otherwise communicate with us through the Services. In the event of any conflict between our Terms and Conditions and this Privacy Policy, this Privacy Policy shall take precedence with respect to the collection, processing, and disclosure of your personal data.

Please read this Privacy Policy carefully. By using the Services, you confirm that you have read this Privacy Policy and understand how your data is collected, used, and disclosed as described herein.

Personal Data We Collect or Process

"Personal data" refers to information that identifies you or another person, or can reasonably be linked to you. Personal data does not include information collected anonymously or de-identified in such a way that it cannot be associated with you. Depending on how you interact with the Services, where you live, and to the extent permitted or required by law, we may collect or process the following categories of personal data:

  • Contact data, including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information, including credit and debit card numbers, payment information, transaction details, payment method, payment confirmation, and other payment details.
  • Account information, including username, password, security questions, settings, and preferences.
  • Transaction information, including items you view, add to your cart, add to your wishlist, purchase, return, exchange, or cancel, as well as your past transactions.
  • Communications with us, including information you provide in messages to us, such as customer service requests.
  • Device information, including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information, including information about how and when you use or navigate the Services.

Sources of Personal Data

We may collect personal data from the following sources:

  • Directly from you — when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal data.
  • Automatically through the Services — from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
  • From our service providers — when we engage them to provide certain technologies and they collect or process your personal data on our behalf.
  • From our partners or other third parties.

How We Use Your Personal Data

Depending on how you interact with us or which Services you use, we may use personal data for the following purposes:

  • Providing, customising, and improving the Services. We use your personal data to provide the Services to you, including fulfilling our contract with you, processing your payments, fulfilling your orders, storing your preferences, sending account-related notifications, handling returns and exchanges, arranging shipping, and creating a personalised shopping experience.

  • Marketing and advertising. We use your personal data for marketing and advertising purposes, such as sending you marketing communications by email, SMS, or post, and showing you online advertisements for products or services on the Services or other websites, including based on items you have previously purchased or added to your cart.

  • Security and fraud prevention. We use your personal data to authenticate your account, provide a secure payment and shopping experience, detect, investigate, or respond to potentially fraudulent, illegal, or harmful activities, protect public safety, and secure our Services.

  • Communicating with you. We use your personal data to provide you with customer support, respond to your enquiries, and maintain our business relationship.

  • Legal reasons. We use your personal data to comply with applicable laws, respond to lawful requests including from law enforcement authorities, and enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Data

Under certain circumstances, we may share your personal data with third parties:

  • With Shopify, vendors, and other third parties that provide services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping).
  • With business and marketing partners to provide marketing services and show you advertisements. Our partners use your data in accordance with their own privacy policies. Depending on where you live, you may have the right to opt out of sharing your data for targeted advertising.
  • When you instruct or consent to us sharing certain information with third parties, for example for shipping purposes or through the use of social media widgets.
  • With affiliated companies within our corporate group.
  • In connection with business transactions such as mergers or insolvency proceedings, to comply with legal obligations, to enforce our Terms of Use, and to protect the Services and the rights of our users.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your access to the Services in order to provide and improve the Services for you. Information you submit to the Services is shared with Shopify and third parties who may be located in countries other than your country of residence. For more information about how Shopify uses your personal data and your rights in that regard, please refer to the Shopify Privacy Policy.

Third-Party Websites and Links

The Services may contain links to third-party websites or online platforms. If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies. We do not guarantee the security or accuracy of such websites and are not responsible for them.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect personal data from children under the age of majority in your jurisdiction. If you are a parent or guardian of a child who has provided us with their personal data, you may contact us using the contact details below to request deletion.

Security and Retention of Your Data

Please note that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." How long we retain your personal data depends on various factors, such as whether we need the information to maintain your account, provide the Services, comply with legal obligations, or resolve disputes.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal data. These rights are not absolute and may be limited in certain cases:

  • Right of access. You may have the right to request access to the personal data we hold about you.
  • Right to erasure. You may have the right to request the deletion of your personal data.
  • Right to rectification. You may have the right to request correction of inaccurate personal data.
  • Right to data portability. You may have the right to receive a copy of your personal data and request its transfer to a third party.
  • Communication preferences. We may send you promotional emails, and you can unsubscribe at any time via the unsubscribe link in our emails. If you unsubscribe, we may still send you non-promotional emails, for example regarding your account or orders.

If you reside in the United Kingdom or the European Economic Area, you also have the following rights:

  • Right to object and right to restrict processing: You may have the right to ask us to stop or restrict the processing of your personal data for certain purposes.
  • Right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

You may exercise these rights by contacting us using the contact details below. For more information about how Shopify uses your personal data and your rights, please visit https://privacy.shopify.com/en.

Complaints

If you have complaints about the processing of your personal data, please contact us using the contact details below. Depending on where you live, you may have the right to challenge our decision or file a complaint with your local data protection authority.

International Data Transfers

Please note that we may transfer, store, and process your personal data outside your country of residence. When we transfer your personal data from the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the transfer is to a country with an adequate level of data protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website and update the "Last updated" date accordingly.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of the rights described above, please contact us by email at lumivela@lumivela.eu. For the purposes of applicable data protection laws, we are the controller of your personal data.