At Lumi’Skin, we highly value your privacy. We handle your personal data with care and process it only when necessary to provide our services, ensure the proper functioning of our online store, and improve our services.

This Privacy Policy explains what information we collect, why we process it, and what rights you have.

Who Are We?
Lumi’Skin is responsible for the processing of personal data as described in this Privacy Policy.

If you have any questions about this Privacy Policy or how we handle your personal data, please feel free to contact us at hello@thelumiskin.com.

What Personal Data Do We Collect?
Depending on how you use our online store, we may process the following information:

Information you provide to us:

• First and last name
• Billing and shipping address
• Email address
• Telephone number
• Payment information (via our payment provider)
• Order information
• Any information you provide when contacting us

Information collected automatically
When you visit our website, certain information may be collected automatically, such as:

• IP address
• Browser type
• Device information
• Language settings
• Pages visited
• Click behaviour
• Time of visit
• Cookies and similar technologies

Why Do We Process Your Personal Data?
We process personal data only where there is a valid legal basis for doing so. This includes processing your data to:

• Process your order;
• Process payments;
• Ship products;
• Contact you regarding your order;
• Respond to questions or complaints;
• Process returns and refunds;
• Prevent fraud;
• Secure our online store;
• Improve our website and services;
• Comply with legal obligations.

Where you have given your consent, we may also keep you informed about new products, offers, and developments relating to Lumi’Skin.

You can unsubscribe at any time using the unsubscribe link in our emails.

Who Do We Share Your Data With?
We never sell your personal data to third parties.

Where necessary to provide our services, we may share your information with carefully selected third parties, such as:

• Shopify (our e-commerce platform)
• Payment providers
• Shipping partners
• Email service providers
• Analytics and marketing services
• IT service providers

These parties process your data only to the extent necessary to provide their services or to support us in providing ours.

Where a third party processes personal data on our behalf, we enter into a data processing agreement where required by law.

Shopify
Our online store is hosted by Shopify.

When you visit our online store or place an order, Shopify processes certain personal data to enable the technical operation of the store and securely process orders.

For more information, please see Shopify’s Privacy Policy:
https://www.shopify.com/legal/privacy

Cookies
Our website uses cookies and similar technologies.

Cookies help us to:

• Ensure the proper functioning of our online store;
• Remember your preferences;
• Understand how our website is used;
• Improve the user experience.

For more information, please see our Cookie Policy.

How Long Do We Retain Your Data?
We do not retain personal data for longer than necessary.

The retention period depends on the purpose for which the data was collected and any applicable legal obligations.

For example, we retain administrative records for as long as required by law.

Data collected for marketing purposes is retained until you unsubscribe or until the data is no longer necessary.

Your Rights
You have the right to:

• Request access to your personal data;
• Have your personal data corrected;
• Request the deletion of your personal data;
• Object to certain types of processing;
• Request restriction of processing;
• Request the transfer of your data;
• Withdraw previously given consent.

If you would like to exercise any of these rights, please contact us at hello@thelumiskin.com.

To prevent misuse, we may ask you to verify your identity before processing your request.

Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, or unlawful processing.

Despite these measures, no internet connection or digital storage method can guarantee complete security.

International Data Transfers
Some of our service providers may process personal data outside the European Economic Area.

Where this occurs, we ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws.

Changes to This Privacy Policy
We may update this Privacy Policy from time to time.

The most current version will always be available on our website.

We recommend reviewing this Privacy Policy periodically.

Contact
If you have any questions about this Privacy Policy or the processing of your personal data, please feel free to contact us at hello@thelumiskin.com.