Privacy policy

Privacy Policy – LU’MA Srl

Last updated: October 2025

LU’MA – Embody the Light Within, operated by LU’MA Srl, Via Bonifazio Lupi 14, 50129 Firenze (Italy) – VAT 07487010485, (“LU’MA”, “we”, “us”, or “our”) operates this store and website, including all related information, content, features, tools, products, and services (collectively, the “Services”), to provide you with a curated and conscious shopping experience.

Our store is powered by Shopify, which enables us to process orders and operate securely under European data protection standards (GDPR).
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through our Services.

1. Personal Information We Collect

We collect only the information necessary to provide and improve your experience:

  • Contact details: name, address, phone number, and email.

  • Payment information: credit or debit card details and billing data, processed securely through Shopify Payments or other certified gateways.

  • Order information: products purchased, wishlists, returns, and order history.

  • Account details (if applicable): username, password, preferences.

  • Device and usage data: IP address, browser type, pages visited, and cookies (technical and analytical).

We do not collect sensitive personal data and we never sell your information.

2. How We Use Your Information

Your personal data is used solely for:

  • Processing and delivering your orders.

  • Managing payments and returns.

  • Communicating with you regarding orders, updates, or assistance.

  • Sending marketing emails (only if you consent).

  • Maintaining security and preventing fraud.

  • Complying with legal obligations and tax requirements.

3. How We Share Your Information

We may share your data with:

  • Shopify, which hosts our online store and manages secure transactions.

  • Trusted service providers (logistics, analytics, customer care) acting on our behalf.

  • Legal authorities if required by law or to protect our rights.

All partners comply with GDPR and use your information only for the purposes stated here.

4. Relationship with Shopify

Our e-commerce platform is hosted by Shopify Inc., which processes certain information (such as checkout, cookies, and device data) to provide the Services.
For details on how Shopify manages customer data, please see the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

5. International Data Transfers

Your information may be stored or processed outside the European Union, including Canada and the United States, where Shopify’s servers are located.
When this occurs, your data is protected by Shopify’s use of Standard Contractual Clauses (SCCs) and other recognized legal safeguards to ensure equivalent protection.

6. Data Retention and Security

We retain your personal data only as long as necessary to:

  • fulfill your orders,

  • provide Services and support,

  • comply with legal requirements.

Shopify and LU’MA implement appropriate technical and organizational measures to prevent unauthorized access, loss, or misuse of personal data.

7. Your Rights

Under the EU General Data Protection Regulation (GDPR), you have the right to:

  • Access, correct, or delete your personal information.

  • Withdraw consent for marketing communications.

  • Request data portability.

  • Object to certain data processing activities.

To exercise your rights, please contact us at info@lumaradiale.com.
We will respond within the time required by law and may ask for verification of your identity.

8. Cookies and Online Tracking

Our site uses essential cookies to operate properly and analytical cookies (anonymous) to understand how visitors use the site.
You can manage your preferences through your browser settings or the cookie banner shown upon first visit.
We do not track or profile visitors beyond the functional needs of the site.

9. Children’s Data

LU’MA does not knowingly collect personal information from individuals under 16 years of age.
If you believe a minor has provided data, please contact us at info@lumaradiale.com and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes.
Any updates will appear on this page with a new “Last updated” date.
We encourage you to review this page periodically.

11. Contact

If you have any questions or requests concerning this Privacy Policy, data protection, or your rights, please contact:

LU’MA Srl
Via Bonifazio Lupi 14
50129 Firenze (FI) – Italy
VAT 07487010485
📩 info@lumaradiale.com

For EU residents, LU’MA Srl acts as the Data Controller for all personal data processed through this website.