Who we are
This policy applies to lumashow.com (referred to as “the site” or “we”). When you shop with us or contact us, we process the personal information needed to provide the service you request.
If you have questions about this policy or how we handle personal information, submit a request through our Contact Support page and select “Other” as the topic.
Information we collect
Orders & fulfillment
Your name, email address, phone number, billing and shipping addresses, items purchased, order amount and currency, order notes, payment status, tracking number, and delivery status.
Account information
If you create an account, we store your login identifier, account details, addresses, and order history. Passwords are stored by the system in a form that cannot be read directly.
Customer Requests
The name, email address, topic, optional order number, and message you submit through the contact form. Requests are stored in the site’s admin area so authorized personnel can follow up.
Device & access data
Your IP address, browser and device type, access times, request logs, and cookie identifiers. This information may be generated automatically by our server, commerce system, and security controls.
Do not include identity-document numbers, full payment-card numbers, account passwords, or sensitive information unrelated to your request in a support message.
Why we use this information
- To create and manage accounts and to process carts, checkout, payment confirmation, and order records.
- To arrange stock preparation, cross-border shipping, customs coordination, parcel tracking, and after-sales support.
- To respond to questions about products, shipping, orders, returns, and exchanges.
- To detect unusual access, reduce fraud, and protect accounts, transactions, and site security.
- To remember the site language you choose.
- To meet applicable tax, accounting, consumer-protection, and other legal obligations.
We process information where necessary to perform a transaction with you, with your consent, to meet legal obligations, or to protect the site and transaction security. The specific legal basis depends on the laws that apply where you are located.
Sharing, payments & cross-border processing
We do not disclose your order or support information for purposes unrelated to providing the service. To complete a transaction, necessary information may be shared with the following types of providers:
- Payment providers
- When you pay by card, PayPal, or another available method, the relevant payment provider processes your payment information. The site receives a transaction identifier, payment status, and information needed to reconcile the order; it does not store your full card number in the site’s admin area. Current payment providers may include Stripe and PayPal.
- Fulfillment & logistics providers
- For sourcing, packing, dispatch, customs processing, transport, and delivery, we may need to provide the recipient’s name, phone number, address, ordered items, and other shipping details. We provide only what is needed for the relevant stage.
- Site & technology providers
- Providers supporting site hosting, databases, multilingual display, security maintenance, and system support may process necessary technical or business data while providing those services.
- Legal & security requirements
- We may disclose relevant information where required by law, in response to a valid government request, or where necessary to protect the rights and safety of users, the site, or others.
Because products may be fulfilled across borders, payment, hosting, technology, and logistics providers may be located outside your country or region. Where cross-border processing occurs, information is transferred only as needed to provide the service and is subject to the laws and privacy practices applicable to the relevant provider.
Data retention & security
Order and transaction records are retained for as long as needed for fulfillment, after-sales support, tax, accounting, and dispute handling. Account details are generally retained while the account remains active. Support requests are retained as needed to follow up and maintain relevant records. Server and security logs are retained according to hosting and security configurations. Retention periods may vary by order status, dispute, and applicable law.
When information is no longer needed for these purposes, we delete or anonymize it where technically and legally permitted. If the law requires transaction records to be retained, relevant records may need to remain until the required period ends, even if you request deletion.
We use measures such as access controls, HTTPS transmission, and system maintenance to reduce the risk of unauthorized access, alteration, or disclosure. No method of network transmission or storage can be guaranteed to be completely secure.
Your rights & choices
Depending on the laws that apply where you are located, you may have the right to access or obtain a copy of your personal information, request correction or deletion, restrict or object to certain processing, withdraw consent, or lodge a complaint about how your information is handled.
Submit your request through the Contact Support page and include “Privacy Request,” the associated email address, and what you would like us to address. To avoid disclosing information to someone else, we may first verify your identity and your connection to the account or order. Requests may be limited by transaction-record retention, fraud prevention, and other legal obligations.
Submit a Privacy RequestPolicy updates
We may update this policy when site features, service providers, or applicable requirements change. The latest version will be posted on this page with its update date shown at the top. If a material change requires additional notice, we will provide it through an on-site notice or a contact channel associated with your order.