Legal

Privacy Policy

Effective date: August 10, 2026 · Last updated: August 10, 2026

1. Controller and scope

Lumenar Commerce LLC, a limited liability company organised in the State of New Mexico, United States, with registered office at 2335 E. Atlantic Blvd, Ste 200, Pompano Beach, FL 33062, United States, is the controller responsible for the personal information described in this policy.

This policy applies to this website and to the online stores, checkouts and support channels we operate. It does not apply to third-party websites we link to, which publish their own privacy notices.

We do not sell personal information, and we do not share it for cross-context behavioural advertising in the sense given to those terms by United States state privacy laws.

2. Information we collect

Information you give us

  • Identity and contact data — name, email address, telephone number, billing and delivery address.
  • Order data — items purchased, order value, currency, delivery preferences and order history.
  • Payment data — the card brand, the last four digits and the authorisation result, as reported to us by our payment processor. We never receive or store the full card number, expiry date or security code.
  • Correspondence — the content of messages you send to our support or contact channels, including any attachments.
  • Account data — where a store offers accounts, your credentials in hashed form and your saved preferences.

Information collected automatically

  • Device and usage data — IP address, browser type and version, operating system, referring page, pages viewed and timestamps.
  • Cookie identifiers — as described in section 6.
  • Fraud signals — risk indicators generated by our payment processor and fraud screening tools, such as address verification results and device reputation.

Information from third parties

  • Delivery status and exception data from shipping carriers.
  • Settlement, chargeback and dispute information from payment processors and acquiring banks.

3. How we use information

  • To process orders, take payment, arrange delivery and issue receipts.
  • To provide customer support, and to handle returns, replacements, refunds and warranty claims.
  • To detect, investigate and prevent fraud, unauthorised transactions and abuse of our stores.
  • To comply with legal, tax, accounting and anti-money-laundering obligations, and to respond to lawful requests from authorities.
  • To defend or exercise legal claims, including responding to payment disputes and chargebacks with order and delivery evidence.
  • To improve our products, catalog and website, using aggregated or de-identified analytics wherever possible.
  • To send transactional messages (order confirmations, dispatch and delivery notices, service announcements).
  • To send marketing messages, where you have opted in or where permitted by law. Every marketing email includes a one-click unsubscribe link.

4. Legal bases

Where the General Data Protection Regulation or a comparable law applies to you, we rely on the following legal bases:

  • Performance of a contract — to process and deliver your order and to provide support.
  • Legal obligation — to keep tax, accounting and transaction records.
  • Legitimate interests — to prevent fraud, secure our systems, defend legal claims and improve our services, balanced against your rights and freedoms.
  • Consent — for optional analytics and marketing cookies and for marketing email, which you may withdraw at any time.

5. Who we share with

We share personal information only with service providers that need it to perform a function for us, and only under contracts that require them to protect it and to use it solely for that purpose. These categories are:

  • Payment processors and acquiring banks — to authorise, settle, refund and dispute transactions.
  • E-commerce and hosting platforms — to run our stores and this website.
  • Fulfillment partners and shipping carriers — to pick, pack, ship and deliver your order, and to clear customs where applicable.
  • Email and helpdesk providers — to send transactional messages and manage support conversations.
  • Analytics providers — to understand aggregate site usage.
  • Professional advisers — accountants, auditors and lawyers, bound by professional confidentiality.
  • Authorities — where disclosure is required by law, court order or a valid regulatory request.
  • A successor entity — in the event of a merger, acquisition or sale of assets, subject to this policy continuing to apply.

6. Cookies and tracking

We use cookies and similar technologies in three groups:

  • Strictly necessary — session management, cart contents, checkout security and load balancing. These cannot be switched off without breaking the store.
  • Functional — remembering your preferences, such as the language selected on this website, which is stored locally in your browser.
  • Analytics and marketing — measuring traffic and campaign performance. These are set only where you have consented, in jurisdictions that require consent.

You can delete or block cookies in your browser settings. Blocking strictly necessary cookies will prevent checkout from working.

7. Data retention

We keep personal information only as long as needed for the purpose it was collected for, and then for the period required by law:

  • Order and transaction records: retained for the statutory tax and accounting period, which is at least seven years in the United States.
  • Support correspondence: up to three years after the case is closed.
  • Marketing contact data: until you unsubscribe, and then on a suppression list so that we do not contact you again.
  • Website analytics: normally up to 26 months in aggregated form.

8. International transfers

We are established in the United States and our service providers may process data in the United States and in other countries. Where personal information is transferred out of the European Economic Area, the United Kingdom or another jurisdiction with transfer restrictions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with additional technical and organisational measures where required.

You may request details of the safeguards applied by contacting us at the address in section 12.

9. Security

We apply technical and organisational measures appropriate to the risk, including encryption of traffic in transit (TLS), access control on a need-to-know basis, multi-factor authentication on administrative accounts, and the use of PCI-DSS compliant processors so that payment card data never reaches our systems.

No method of transmission or storage is completely secure. If a breach affects your personal information and is likely to result in a risk to your rights, we will notify you and the competent authorities as required by applicable law.

10. Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and receive a copy of it;
  • have inaccurate information corrected;
  • request deletion, subject to our legal retention obligations;
  • object to or restrict certain processing, including direct marketing;
  • receive your data in a portable, machine-readable format;
  • withdraw consent at any time, without affecting processing already carried out;
  • not be discriminated against for exercising any of these rights.

To exercise a right, write to us using the contact details in section 12. We will verify your identity before acting and will respond within the period set by applicable law, normally within 30 days. If you are in the EEA or the UK, you also have the right to complain to your local supervisory authority.

11. Children

Our stores are not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes and contact

We may update this policy to reflect changes in our practices or in the law. The current version is always published on this page with its effective date. Material changes will be signalled on our stores or by email where we hold your address.

Privacy questions and rights requests can be sent to:

Lumenar Commerce LLC
Attn: Privacy
2335 E. Atlantic Blvd, Ste 200, Pompano Beach, FL 33062, United States
contact@lumenarcommerce.com