Lumi Lab Cosmetics (“we”, “us”, or “our”) is committed to protecting your privacy and respecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your data when you visit our website: https://lumilab.llc/

By using the Website, you acknowledge that you have read and understood this policy.

1. What Data Do We Collect?

a) Data You Provide Directly:

• Name


• Phone number


• Email address


• Shipping and billing address


• Order details, purchases, returns, and exchanges


• Any communications or content you send to us through forms, email, or social media

b) Data Collected Automatically:

• Pages visited


• Time and date of visits


• Referral source


• Cookie identifiers


• Diagnostic data and performance analytics used to improve the Website

c) Payment Data:

We do not typically store full payment card details. Payments are processed through authorized payment providers. We may only receive limited transaction-related information (such as order number, payment status, and amount).

2. Why Do We Use Your Data?

We use your data for the following purposes:

• To process, fulfill, and deliver orders, including handling returns and exchanges


• To communicate with you about orders, support, or inquiries


• To verify payments, prevent fraud, and manage risks


• To improve user experience, website performance, and analyze usage


• To send marketing messages or offers (only where you have consented or where permitted by law), with the ability to opt out at any time


• To comply with legal and regulatory obligations and resolve disputes

3. Legal Basis for Processing

We process your data based on one or more of the following legal grounds:

• Contractual necessity: to process orders and provide services


• Consent: such as subscribing to marketing communications


• Legitimate interests: such as improving services and preventing fraud (while respecting your rights)


• Legal obligation: where required to comply with applicable laws

4. Who Do We Share Your Data With?

We may share your data only as necessary with:

• Shipping and delivery companies to fulfill orders


• Payment providers to process transactions


• Technology service providers (hosting, email, e-commerce systems, analytics, customer support tools)


• Government or regulatory authorities when required by law or to protect our rights and prevent fraud

We do not sell your personal data to third parties.

5. International Data Transfers

Your data may be processed or stored by service providers located in different countries. In such cases, we take reasonable steps to ensure an adequate level of data protection (such as contractual safeguards and controlled access measures).

6. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Enable essential Website functions (such as shopping cart and login, where applicable)


• Measure performance and analytics and improve user experience


• Remember your preferences

You may adjust your browser settings to disable cookies; however, some Website features may not function properly.

7. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting, and regulatory requirements. After that, data is deleted or anonymized in accordance with our internal policies.

8. Information Security

We implement reasonable organizational and technical measures to protect your data against unauthorized access, loss, or alteration, including:

• Restricted access to data on a need-to-know basis


• Use of trusted service providers


• Appropriate security measures for transactions

However, no method of transmission over the Internet can be guaranteed to be 100% secure.

9. Your Rights

Subject to applicable laws, you may have the right to:

• Access your personal data


• Correct inaccurate or incomplete data


• Request deletion or restriction of processing in certain cases


• Object to certain types of processing


• Withdraw consent (where processing is based on consent)


• Request a copy of your data (data portability), where applicable

To exercise your rights, please contact us using the details below.

10. Children’s Privacy

Our services are not intended for individuals below the legal age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

11. Third-Party Links

Our website may contain links to external websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last Updated” date. Continued use of the Website after updates constitutes acceptance of the changes.