Privacy policy

Last updated: February 18, 2026

Lumina Lovers (“we”, “us”, “our”) is owned and operated by Valentina Maino, sole proprietor, NIF Y2768093B, based at Avinguda Corts Catalanes 2, 3-5, 08173 Sant Cugat del Vallès, Barcelona, Spain.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, make a purchase, or interact with us. We process your data in accordance with EU GDPR, Spanish data protection laws (LOPDGDD), and other applicable international regulations.

By using our website and services, you agree to the practices described below.

1. Information We Collect

We may collect the following categories of personal information:

Information you provide directly

  • Name

  • Email address

  • Billing and shipping address

  • Phone number

  • Payment details (processed securely by our payment providers)

  • Account login details (email + password)

  • Information you include when contacting us

Information collected automatically

  • IP address

  • Browser and device information

  • Cookies and tracking technologies

  • Pages viewed, actions taken, timestamps

  • Shopping activity (items viewed, added to cart, purchased)

Information from third parties

  • Payment processors (Shopify Payments, PayPal, Stripe)

  • Analytics services (e.g., Google Analytics)

  • Shipping carriers

2. How We Use Your Information

We use your personal data to:

  • Process and fulfill orders

  • Communicate regarding your orders or account

  • Provide customer support

  • Improve and personalize your shopping experience

  • Prevent fraud or misuse of our services

  • Comply with legal obligations (tax, accounting, etc.)

  • Send marketing communications only if you have provided consent

3. Legal Basis for Processing (GDPR)

We process your data based on:

  • Performance of a contract: to process orders, payments, deliveries

  • Consent: for marketing communications

  • Legitimate interest: website operation, security, and fraud prevention

  • Legal obligation: tax, accounting, consumer protection

4. Sharing Your Information

We do not sell your personal data.

We may share data with:

  • Shopify, who hosts our store and processes data on our behalf

  • Payment processors (Shopify Payments, PayPal, Stripe)

  • Shipping providers to deliver your orders

  • IT, analytics, and customer service providers

  • Legal authorities if required by law

International transfers: Your data may be processed outside the EU/EEA. We ensure such transfers comply with GDPR safeguards, including Standard Contractual Clauses (SCCs) or adequacy decisions.

Learn more: Shopify Consumer Privacy Policy.

5. Retention of Data

We store personal data only as long as necessary:

  • Order and customer data: 5–10 years (legal requirement)

  • Account data: until you request deletion

  • Marketing data: until you unsubscribe

  • Analytics and cookies: per standard industry lifecycles

6. Your Rights (GDPR & International Rights)

You can exercise the following rights:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Delete your data (“right to be forgotten”)

  • Restrict certain types of processing

  • Object to processing, including marketing

  • Withdraw consent at any time

  • Data portability

  • Not be subject to automated decisions/profiling

  • File a complaint with the Spanish Data Protection Authority (AEPD) or your local authority

To exercise your rights, please contact us via our Contact page. We may need to verify your identity before responding.

7. Children’s Privacy

Our website and services are not intended for individuals under 16 years old. We do not knowingly collect personal data from anyone under this age.
If you believe we have inadvertently collected data from a child, please contact us via our Contact page to request deletion.

8. Security

We implement reasonable organizational and technical measures to protect your personal information.
While no method is completely secure, we take all appropriate steps to safeguard your data.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • Operate the website

  • Remember your preferences

  • Analyze website performance

  • Personalize content and marketing with consent

You can manage cookies through your browser settings.

10. Third-Party Services

Some third-party services (including Shopify, payment gateways, and analytics providers) may process your data according to their own policies.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes to practices, services, or legal requirements. The newest version will always be posted here.

12. Contact

For questions about this Privacy Policy, your personal data, or your rights, please reach us via our Contact page.