Privacy Policy

The data controller is Lumdia. Full company registration, VAT, and registered address will be published on this site when available.

Contact: infolumdia@gmail.com

Depending on how you interact with us, we may process:

• Contact details — name, email address, and the content of messages you send us (for example order enquiries).
• Order / configuration details — product choices (colour, model, bulb) and quantities you share when enquiring or ordering.
• Technical data — standard server logs such as IP address, browser type, and pages visited, processed by our hosting provider as needed to operate the website securely.
• Cart preferences — your design selections may be stored in your browser’s local storage so the cart works on your device. This stays on your device unless you send it to us in an enquiry.

We do not currently run advertising cookies or third-party analytics pixels on this site. If that changes, we will update this policy and, where required, ask for consent.

• Contract / pre-contract (Art. 6(1)(b) GDPR) — to respond to enquiries, prepare quotes, and fulfil orders.
• Legitimate interests (Art. 6(1)(f) GDPR) — to operate, secure, and improve our website, and to prevent abuse.
• Legal obligation (Art. 6(1)(c) GDPR) — where we must keep records for tax, accounting, or consumer law.
• Consent (Art. 6(1)(a) GDPR) — if we later use non-essential cookies or marketing emails, only after you opt in.

We do not sell your personal data. We may share data with service providers who help us run the business (for example website hosting, email delivery, and — when online checkout is enabled — a payment / commerce provider). Those providers process data only on our instructions and under appropriate agreements.

If you are outside the EU/EEA and place an order, shipping carriers and customs authorities may receive the data needed to deliver your parcel.

Our site and some tools may be hosted or operated outside the EU/EEA. Where personal data is transferred internationally, we use appropriate safeguards recognised under the GDPR (such as Standard Contractual Clauses) where required.

Enquiry emails are kept only as long as needed to handle your request and any follow-up, then deleted or archived according to our retention practice. Order and invoice records are kept for the periods required by applicable tax and commercial law. Browser cart data remains until you clear it or clear site data in your browser.

Under the GDPR you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data in certain cases
• Restrict or object to processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise these rights, email infolumdia@gmail.com. You also have the right to lodge a complaint with your local data protection authority in the EU/EEA.

We use HTTPS and take reasonable technical and organisational measures to protect personal data. No method of transmission over the internet is completely secure; please use a unique password for any future customer account and contact us if you suspect misuse.

Our products and website are intended for adults. We do not knowingly collect personal data from children under 16.

We may update this policy as our business grows (for example when checkout, payments, or analytics are added). The “Last updated” date at the top of this page will change when we do.