Privacy policy

Last updated: September 1, 2026
Lume Accessories operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Lume Accessories is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

1. COMPANY IDENTIFICATION (DATA CONTROLLER)
For the purpose of applicable data protection laws (including the General Data Protection Regulation - GDPR), we are the data controller of your personal information.
  • Trade Name: Lume Accessories
  • Address: Torenallee 101, 5617 BR Eindhoven, The Netherlands
  • Email: Wearlume1@gmail.com
  • Chamber of Commerce (KVK) Number: 42148634
  • VAT Number: NL005534166B42
2. PERSONAL INFORMATION WE COLLECT OR PROCESS
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified. We may collect or process the following categories of personal information depending on how you interact with the Services:
  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, payment confirmation and other payment details.
  • Account information including your username, password, security questions, preferences and settings.
  • Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
  • Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
3. PERSONAL INFORMATION SOURCES
We may collect personal information from the following sources:
  • Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
  • Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies (such as Google Analytics);
  • From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties.
4. HOW WE USE YOUR PERSONAL INFORMATION (LEGAL BASES FOR PROCESSING)
Under the European GDPR, we rely on the following legal bases to process your personal information: performance of a contract with you, compliance with our legal obligations, our legitimate interests, and your consent where applicable. We use your data for the following purposes:
  • Provide, Tailor, and Improve the Services: We use your personal information to perform our contract with you, to process your payments, to fulfill your orders, to create, maintain and manage your account, to arrange for shipping, and to facilitate any returns and exchanges.
  • Website Optimization and Data Analytics: We utilize Google Analytics to understand how visitors engage with our site, track browsing behavior, and compile reports on website activity. This processing is based on our legitimate interest to improve our Services, or your explicit consent given via our cookie banner.
  • Marketing and Advertising: We use your personal information for marketing and promotional purposes, such as to send marketing communications by email, text message or postal mail, and to show you online advertisements.
  • Security and Fraud Prevention: We use your personal information to authenticate your account, to provide a secure payment experience, and to detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity.
  • Communicating with You: We use your personal information to provide you with customer support and maintain our business relationship.
  • Legal Reasons: We use your personal information to comply with applicable Dutch and EU laws, respond to valid legal processes, or enforce our policies.
5. HOW WE DISCLOSE PERSONAL INFORMATION
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances include:
  • With Shopify: Our store is hosted by Shopify, which processes personal information to support our operations.
  • With Google and Analytics Providers: We share anonymized or pseudonymized user data with Google Analytics to track website performance and metrics.
  • With Vendors and Third Parties: Such as IT management, payment processing (Payment Service Providers), cloud storage, fulfillment, and shipping/logistics companies (e.g., PostNL, DHL).
  • With Business and Marketing Partners: To provide targeted advertising. You can opt out of targeted advertising through your browser settings or regional opt-out mechanisms.
  • In Connection with Business Transactions: Such as a merger, bankruptcy, or to comply with applicable legal obligations.
6. RELATIONSHIP WITH SHOPIFY
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside (including the United States).
In addition, we use certain Shopify enhanced features that incorporate data obtained from your interactions with our Store. In these circumstances, Shopify is responsible for the processing of your personal information for these enhanced services. To learn more, you can visit the Shopify Consumer Privacy Policy and exercise your rights via the Shopify Privacy Portal.

7. THIRD PARTY WEBSITES AND LINKS
The Services may provide links to websites operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites. We highly recommend reviewing the privacy and security policies of any third-party networks you interact with.

8. CHILDREN'S DATA
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority. If you are a parent or guardian and believe your child provided us with personal information, you can contact us at Wearlume1@gmail.com to request deletion.

9. SECURITY AND RETENTION OF YOUR INFORMATION
Please be aware that no security measures are perfect or impenetrable. Any information you send to us may not be secure while in transit. We recommend using secure channels to communicate sensitive details.
How long we retain your personal information depends on different factors (e.g., to maintain your account, fulfill orders, or comply with Dutch tax laws which require us to keep financial records and administration for 7 years).

10. YOUR RIGHTS AND CHOICES (GDPR / AVG RIGHTS)
Because you reside in or do business within the European Economic Area (EEA), you have the following guaranteed rights under the GDPR regarding your personal information:
  • Right to Access / Know: The right to request access to the personal information we hold about you.
  • Right to Delete ("Right to be Forgotten"): The right to request that we delete your personal information.
  • Right to Correct: The right to request that we correct inaccurate or incomplete data.
  • Right of Portability: The right to receive a copy of your data in a structured, machine-readable format or transfer it to a third party.
  • Objection to Processing and Restriction of Processing: The right to ask us to stop or restrict our processing of personal data for certain purposes (including direct marketing).
  • Withdrawal of Consent: Where we rely on consent (such as cookies or newsletters), you have the right to withdraw this consent at any time.
To exercise any of these rights, please contact us at Wearlume1@gmail.com. We will respond to your request within 30 days. We may need to verify your identity before processing the request.

11. COMPLAINTS
If you have complaints about how we process your personal information, please contact us first at Wearlume1@gmail.com so we can resolve it with you. You also have the absolute right to lodge your complaint with your local data protection authority. For The Netherlands, you can file a complaint directly with the Autoriteit Persoonsgegevens via their official website: autoriteitpersoonsgegevens.nl.

12. INTERNATIONAL TRANSFERS
Please note that we may transfer, store and process your personal information outside the country you live in, including the United States. When we transfer your personal information out of the European Economic Area (EEA), we rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses (SCCs) to ensure your data remains protected to European standards.

13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. We will post the revised Privacy Policy on this website and update the "Last updated" date.

14. CONTACT
Should you have any questions about our privacy practices, this Privacy Policy, or if you would like to exercise your rights, please email us at Wearlume1@gmail.com or write to us at: Lume Accessories, Torenallee 101, 5617 BR Eindhoven, The Netherlands.