Privacy Policy

Last updated: October 1, 2026

This Privacy Policy describes how LUMA (“LUMA,” “we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit, use our services, make a purchase, communicate with us, or otherwise interact with our online store (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we collect.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read and understood the practices described below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices, business operations, legal requirements, or other operational reasons.

When changes are made, we will post the revised Privacy Policy on this page and update the “Last updated” date above.

We encourage you to review this Privacy Policy periodically.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information from a variety of sources depending on how you interact with us.

The information we collect and use may vary depending on whether you browse our website, make a purchase, contact customer support, subscribe to marketing communications, or otherwise interact with LUMA.

In addition to the specific uses described below, we may use information we collect to communicate with you, provide and improve the Services, comply with applicable legal obligations, enforce our terms and policies, and protect the rights and safety of our customers, our business, and others.

What Personal Information We Collect

The types of personal information we collect depend on how you interact with our Services.

“Personal information” generally means information that identifies, relates to, describes, or can reasonably be associated with an individual.

Information We Collect Directly From You

Information that you provide directly to us may include:

• Your name
• Billing address
• Shipping address
• Email address
• Phone number
• Order information
• Purchase history
• Customer account details
• Customer support communications
• Reviews, feedback, and survey responses
• Information you submit through forms on our website
• Marketing preferences
• Any other information you voluntarily provide to us

Certain features of the Services may require you to provide specific information. You may choose not to provide this information, but doing so may prevent you from using certain features or completing a purchase.

Payment Information

When you make a purchase, payment information is processed through Shopify and/or our payment service providers.

Depending on the payment method used, this may include information such as:

• Credit or debit card details
• Billing information
• Payment method
• Transaction details

We generally do not directly store full payment card numbers.

Payment providers process this information according to their own terms and privacy practices.

Information We Collect Automatically

When you visit or interact with our website, we and our service providers may automatically collect certain information about your device and use of the Services.

This information may include:

• IP address
• Browser type
• Device type
• Operating system
• Internet connection information
• Approximate geographic location
• Pages viewed
• Links clicked
• Products viewed
• Items added to cart
• Checkout activity
• Referring website
• Date and time of visits
• Interaction with advertisements
• Cookie identifiers
• Other technical information regarding your use of the Services

We may collect this information using cookies, pixels, tags, web beacons, software development kits, and similar technologies.

Cookies and Similar Technologies

Like many websites, we use cookies and similar technologies.

Cookies are small data files stored on your device when you visit a website.

We may use cookies for purposes including:

• Keeping our website functioning properly
• Remembering products in your shopping cart
• Remembering preferences
• Supporting checkout functionality
• Understanding how visitors use the website
• Measuring website performance
• Detecting fraud and security threats
• Measuring advertising performance
• Personalizing content
• Providing relevant advertising

Shopify and third-party service providers may also place cookies or similar technologies on your device.

Most browsers allow you to control, block, or delete cookies through your browser settings.

Please note that blocking certain cookies may affect the functionality of our website or prevent some features from working correctly.

Where required by applicable law, we may ask for your consent before placing certain non-essential cookies.

Information We Obtain From Third Parties

We may receive information about you from third parties, including companies that provide services on our behalf.

These may include:

• Shopify
• Payment processors
• Shipping and fulfillment providers
• Advertising platforms
• Analytics providers
• Email and SMS marketing services
• Fraud prevention providers
• Customer support platforms
• Social media platforms
• Other technology providers

Any information received from third parties will be handled in accordance with this Privacy Policy and applicable law.

We are not responsible for the accuracy of information supplied to us by third parties or for their independent privacy practices.

How We Use Your Personal Information

Providing Products and Services

We may use your personal information to provide the Services and fulfill our obligations to you, including to:

• Process your orders
• Process payments
• Arrange shipping
• Provide order confirmations
• Provide tracking information
• Manage returns and refunds
• Maintain your customer account
• Remember your preferences
• Provide customer service
• Respond to questions or requests

Marketing and Advertising

Where permitted by law, we may use your personal information for marketing and promotional purposes.

This may include:

• Sending promotional emails
• Sending product updates
• Informing you about offers or promotions
• Measuring advertising effectiveness
• Showing relevant advertisements
• Creating advertising audiences
• Understanding which marketing channels lead customers to our store

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link contained in our marketing messages.

Opting out of promotional communications will not prevent us from sending transactional communications relating to orders, refunds, customer support, or other necessary service messages.

Personalized and Targeted Advertising

We may work with advertising partners such as social media platforms, advertising networks, and search engines.

These partners may use information collected through cookies, pixels, or similar technologies to:

• Measure advertising performance
• Understand customer activity
• Display advertisements that may be relevant to you
• Limit repeated advertisements
• Create or measure advertising audiences

Depending on your jurisdiction, some of these activities may legally be considered “targeted advertising,” “sharing,” or a “sale” of personal information.

Where applicable, you may have the right to opt out of these activities.

Security and Fraud Prevention

We may use your personal information to detect, investigate, or take action regarding possible fraudulent, illegal, or malicious activity.

This may include:

• Identifying suspicious transactions
• Preventing payment fraud
• Protecting customer accounts
• Protecting our website
• Preventing misuse of the Services
• Protecting our rights and property

If you create an account, you are responsible for keeping your login credentials secure.

Communicating With You

We may use your contact information to communicate with you regarding:

• Orders
• Shipping
• Returns
• Refunds
• Customer service inquiries
• Changes to our policies
• Important service notices
• Account-related matters

Improving Our Services

We may use information about how customers interact with our store to understand and improve our business.

For example, we may analyze:

• Website traffic
• Product interest
• Conversion rates
• Checkout behavior
• Customer feedback
• Advertising effectiveness
• Customer support trends

We may use this information to improve our website, customer experience, products, communications, and marketing.

Shopify

Our online store is hosted by Shopify.

Shopify provides the ecommerce infrastructure that allows us to offer the Services to you.

Shopify may collect and process personal information relating to your interaction with our store, including information needed to support:

• Website operation
• Checkout
• Payments
• Fraud prevention
• Analytics
• Personalization
• Shopify services and features

Shopify processes information in accordance with its own privacy practices.

Your information may also be processed by Shopify in countries outside your country of residence.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes consistent with this Privacy Policy.

These third parties may include:

Vendors and Service Providers

We may disclose information to companies that perform services on our behalf, such as:

• Shopify
• Payment processors
• Shipping companies
• Fulfillment partners
• Warehousing providers
• Customer support providers
• Email providers
• Marketing providers
• Data analytics providers
• Website hosting providers
• Security and fraud prevention providers
• Cloud storage providers

These providers may process personal information only as necessary to perform their services or as otherwise permitted by law.

Business and Marketing Partners

We may disclose certain information to advertising, analytics, and marketing partners to help us understand customer behavior and market our Services.

Where required by law, these activities will be subject to your choices or consent.

Legal Requirements

We may disclose personal information where we reasonably believe disclosure is necessary to:

• Comply with applicable law
• Respond to lawful requests
• Comply with court orders
• Cooperate with law enforcement
• Protect our legal rights
• Protect the rights or safety of others
• Prevent fraud
• Enforce our agreements and policies

Business Transactions

If LUMA is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction, personal information may be transferred as part of that transaction.

Third-Party Websites and Links

Our website may contain links to websites, platforms, or services operated by third parties.

If you follow a third-party link, you should review that third party's privacy and security policies.

We are not responsible for the privacy practices, security, accuracy, or content of third-party websites or services.

The inclusion of a third-party link does not necessarily imply that we endorse that third party.

User-Generated Content

If you submit a review, comment, testimonial, image, or other content that is displayed publicly through our Services, that information may be visible to other website visitors.

Please consider carefully what information you choose to make publicly available.

We are not responsible for how information you voluntarily make public may be used by others.

Children's Data

Our Services are intended for adults and are not directed toward children.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided us with personal information without appropriate authorization, please contact us at itsdenislav2@gmail.com.

Where required, we will take reasonable steps to delete the information.

Security of Your Information

We use reasonable administrative, technical, and organizational measures designed to protect personal information from unauthorized access, disclosure, misuse, alteration, or loss.

However, no security system is completely secure.

No transmission of information over the internet or electronic storage system can be guaranteed to be 100% secure.

You should therefore use caution when providing personal information online.

Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy.

The length of time we retain information may depend on factors such as:

• Whether we need the information to provide the Services
• Whether you maintain an account with us
• Legal obligations
• Accounting requirements
• Tax requirements
• Fraud prevention
• Dispute resolution
• Enforcement of agreements
• Legitimate business needs

When information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information.

Right to Access

You may have the right to request access to personal information we hold about you.

Right to Know

You may have the right to request information about:

• Categories of personal information collected
• Sources of personal information
• Purposes for collecting or processing information
• Categories of third parties to whom information is disclosed

Right to Correct

You may have the right to request correction of inaccurate or incomplete personal information.

Right to Delete

You may have the right to request deletion of personal information we maintain about you, subject to certain legal exceptions.

Right to Data Portability

You may have the right to receive a copy of certain personal information in a portable format.

Right to Restrict Processing

In certain circumstances, you may have the right to request that we restrict how your information is processed.

Right to Object

You may have the right to object to certain forms of processing, including processing based on legitimate interests or direct marketing.

Right to Withdraw Consent

Where we process information based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing performed before the consent was withdrawn.

Right to Opt Out of Targeted Advertising

Depending on where you live, you may have the right to opt out of certain uses of personal information for targeted or personalized advertising.

Right to Opt Out of Sale or Sharing

Certain laws define some transfers of personal information for advertising purposes as a “sale” or “sharing.”

Where applicable, you may have the right to opt out of such activity.

Right to Appeal

Residents of certain jurisdictions may have the right to appeal a decision we make regarding a privacy request.

Exercising Your Privacy Rights

To exercise an applicable privacy right, contact us at:

itsdenislav2@gmail.com

Please clearly describe your request.

We may need to verify your identity before fulfilling certain requests.

Depending on the nature of the request, we may ask you to provide information that allows us to reasonably verify that you are the person about whom we collected the information.

We will not discriminate against you for exercising privacy rights available under applicable law.

Authorized Agents

Where permitted by law, you may designate an authorized agent to submit a privacy request on your behalf.

We may require evidence that the agent has permission to act for you and may also require you to verify your identity directly with us.

European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area (“EEA”), United Kingdom, or Switzerland, you may have additional rights under applicable data protection laws.

Depending on the circumstances, we may process your personal information based on:

Contractual Necessity

We may process personal information where necessary to perform a contract with you, such as processing and delivering an order.

Legal Obligations

We may process information where necessary to comply with legal requirements.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Examples may include:

• Preventing fraud
• Improving our Services
• Providing customer support
• Understanding website performance
• Protecting our business

Consent

For certain processing activities, including certain forms of marketing or cookie use, we may rely on your consent.

You may withdraw your consent where applicable.

International Transfers

LUMA is based in Bulgaria, and we use service providers that may operate internationally.

As a result, your personal information may be transferred to, stored in, or processed in countries outside your country of residence.

These countries may have data protection laws that differ from those where you live.

Where required, appropriate safeguards may be used to protect personal information transferred internationally.

For users in the EEA or United Kingdom, these safeguards may include mechanisms recognized under applicable data protection laws.

United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights under state law.

Depending on the applicable law, these may include rights to:

• Access personal information
• Correct personal information
• Delete personal information
• Obtain a portable copy of personal information
• Opt out of targeted advertising
• Opt out of certain sales or sharing of personal information
• Opt out of certain forms of profiling
• Appeal a decision relating to a privacy request

The availability of these rights varies depending on your state of residence and applicable legal requirements.

You may contact us at itsdenislav2@gmail.com to submit a request.

Do Not Track Signals

Some browsers offer “Do Not Track” signals.

Because there is not currently a universally accepted standard for how websites should respond to all such signals, our website may not respond to every browser-based Do Not Track signal.

Where applicable law requires recognition of specific opt-out preference signals, we will handle such signals in accordance with applicable requirements and available technology.

Complaints

If you have concerns about how we process your personal information, please contact us first so that we can try to resolve your concern.

You may also have the right to lodge a complaint with the data protection authority in your country or region.

If you are located in the European Economic Area, you may contact the relevant supervisory authority responsible for data protection in your country.

Contact

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise your rights, please contact us:

LUMA

Email: itsdenislav2@gmail.com
Location: Pleven, Bulgaria

We will respond to legitimate privacy inquiries and requests in accordance with applicable law.