Privacy policy

This policy explains how LUMIRA ("we", "us") handles personal data collected through LUMIRA. We are the data controller for that data. You can reach us about anything in this policy at support@example.com.

What we collect. Your email address. The recipient name, delivery address and phone number you enter at checkout. What you ordered and what you paid. Your order history. Your IP address, browser type and the pages you visit. If you contact our support chat, the messages you send. If you upload review photos, those images. We do not ask for and do not want sensitive data — please do not send us identity documents, and never send card numbers by email or chat.

Why we use it. To take payment and fulfil your order. To hand your parcel to a carrier and give you tracking. To answer your questions and handle returns. To keep accounting and tax records as required by law. To detect fraud and abuse. Only if you consent, to measure how the store is used so we can improve it.

Our legal bases under the GDPR. Performance of a contract for anything needed to process and deliver your order. Legal obligation for invoices and tax records. Legitimate interests for fraud prevention, security and defending legal claims. Consent for analytics cookies and, where we send it, marketing email.

Payments. Card payments are processed by our payment provider. Card data is entered on their infrastructure — we never see or store your full card number. Cryptocurrency payments are made on public blockchains; we store the wallet address you give us for a refund and the transaction reference, so that we can match a payment to an order.

Who we share it with. Our payment provider, to take payment. The carrier and our fulfilment warehouse, to deliver your parcel — they receive your name, address and phone number, and nothing about what is inside. Our hosting provider, which stores the site and database. Our email provider, to send order and shipping notifications. Professional advisers, if we need legal or accounting help. We do not sell your data, and we do not share the contents of your order with anyone outside this chain.

International transfers. We are based in the European Union, but our fulfilment warehouse and some of our service providers are located outside the EEA, including in China. Where personal data leaves the EEA, we rely on Standard Contractual Clauses approved by the European Commission, together with additional technical and organisational safeguards. You can ask us for a copy of those safeguards at any time.

How long we keep it. Order and invoice records for the period required by tax law, which is generally ten years. Support conversations for up to three years. Analytics data in aggregate form. Anything we no longer need is deleted. If you ask us to delete your account, we delete what we are not legally required to keep.

Your rights. You can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to processing based on legitimate interests, and receive your data in a portable format. Where we rely on consent, you can withdraw it at any time without affecting anything done before that. Email us at support@example.com and we will respond within one month. If you are not satisfied, you may complain to the data protection authority in your country of residence.

Security and discretion. Order data sits behind authentication and is accessible only to staff who need it. The outside of your parcel never shows what is inside — no product name, no brand, no logo. Your bank statement shows a neutral descriptor rather than our store name.

Children. This store sells adult products and is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has given us data, contact us and we will delete it.

Cookies. We use a small number of cookies. See the Cookie policy for what they are and how to control them.

Changes. If we change how we handle data, we update this page and change the date at the bottom. Material changes affecting existing customers are notified by email.