Privacy Policy

1. Information we collect

• Order information — name, shipping and billing address, email, phone number and order contents. Payment card details are handled by our payment processors; we never see or store full card numbers.
• Email address — if you sign up for our newsletter or discount offers.
• Analytics and advertising data — pages viewed, device and browser type, approximate location and referring site, collected through cookies and tracking pixels (including the Meta pixel).
• Support messages — anything you send us by email or through our contact form.

2. How we use your information

• To process, ship and support your orders.
• To send order and shipping notifications.
• To send marketing email if you opted in (you can unsubscribe at any time).
• To measure and improve our website, products and advertising.
• To detect and prevent fraud and abuse.

3. Third parties we share data with

• Shopify — our ecommerce and checkout platform; stores order and customer records.
• Payment processors — to authorise and settle payments.
• Shipping carriers and fulfilment partners — to deliver your order.
• Meta (Facebook/Instagram) pixel and analytics providers — to measure marketing performance.

We do not sell your personal data. [REVIEW: list any additional apps, email platform or analytics tools you use.]

4. Cookies

We use cookies and similar technologies to keep your cart, remember preferences and measure traffic and advertising. You can block or delete cookies in your browser settings; some store features may not work correctly if you do.

5. Data retention

We keep order records for as long as needed to fulfil orders, handle returns and meet accounting and tax obligations. [REVIEW: confirm your retention period, e.g. 5–7 years for order records.]

6. Your rights (including GDPR for EU/EEA and UK visitors)

If you are located in the EU, EEA or UK you have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to withdraw consent for marketing at any time. Where processing relies on consent, you may withdraw it without affecting past processing. You also have the right to complain to your local data protection authority.

To make a request, email support@lumascrub.com. We respond within 30 days.

7. Children

Our store is not directed at children under 16, and we do not knowingly collect their data.

8. Changes and contact

We may update this policy as our store or the law changes. Questions or privacy requests: support@lumascrub.com.