Last updated: September 3, 2026
Effective date: September 3, 2026
This Privacy Policy explains how Lumikel Store LLC (“Lumikel”, “we”, “us” or “our”) collects, uses, shares and protects the personal information of visitors and customers of lumikelstore.com (the “Site”), an online store for professional hair‑care products (treatments, coloring, styling and related products). It is intended to comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), the EU/UK General Data Protection Regulation (“GDPR”) and Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (“LFPDPPP”). Where these frameworks grant different rights, the section that applies to your place of residence governs.
[TO BE COMPLETED BY LUMIKEL — legal review required before publishing: registered business address, dedicated privacy contact email, name/role of the data controller or privacy officer, and confirmation of the third‑party services actually in use.]
1. Who is responsible for your data
The data controller is Lumikel Store LLC, located at [BUSINESS ADDRESS]. For any question about this policy or to exercise your rights, contact us at [[email protected]].
2. Personal information we collect
- Identifiers and contact data: name, email address, telephone number, billing and shipping address, and account credentials.
- Order and transaction data: products purchased, order history, and payment confirmation. Card and banking details are entered directly into our payment processors and are not stored on our servers.
- Account data: preferences, wishlists and support requests.
- Communications: messages you send through contact forms, email or newsletter sign‑ups.
- Usage and device data (collected automatically): IP address, browser and device type, pages viewed, referring URLs and interactions, gathered through cookies and similar technologies.
- Social media data: information you make available when you interact with our profiles or embedded social content (e.g., an Instagram feed).
We do not intentionally collect sensitive personal information and do not knowingly collect data from children under 13 (or the minimum age required in your jurisdiction).
3. How we collect it
- Directly from you when you create an account, place an order, subscribe to our newsletter or contact us.
- Automatically through cookies, pixels and analytics tools when you browse the Site.
- From third parties such as payment processors, shipping carriers and advertising or analytics platforms, consistent with their terms and applicable law.
4. How we use your information
- Process, fulfill and deliver your orders and manage returns.
- Create and manage your customer account and provide support.
- Send transactional messages (order confirmations, shipping updates).
- Send marketing communications and newsletters where permitted, from which you may opt out at any time.
- Operate, secure, analyze and improve the Site and our products.
- Prevent fraud and comply with legal obligations.
5. Legal bases for processing (GDPR)
Where the GDPR applies, we process personal data on the basis of: performance of a contract (to fulfill your orders), consent (for marketing and non‑essential cookies), legitimate interests (to secure and improve the Site and prevent fraud), and legal obligation (tax and accounting duties). You may withdraw consent at any time without affecting prior processing.
6. How we share your information
We share personal information only with service providers who process it on our behalf and under contract, including:
- Payment processing: our payment gateways (e.g., Stripe / WooCommerce Payments).
- Shipping and fulfillment: carriers and logistics providers.
- Email and marketing: our newsletter provider (e.g., Mailchimp).
- Analytics and site services.
- Advertising and social platforms: Meta/Facebook (including the Facebook Pixel and catalog integration) for measurement and advertising.
We do not sell your personal information for money. However, some advertising cookies and pixels (such as the Facebook Pixel) may qualify as a “sale” or “sharing” for cross‑context behavioral advertising under the CCPA/CPRA. You may opt out as described in Section 9. [Legal review required to confirm the “sale/sharing” characterization and to add a “Do Not Sell or Share My Personal Information” mechanism if applicable.]
7. Cookies and tracking technologies
We use strictly necessary cookies to operate the store and, with your consent where required, analytics and advertising cookies (including the Facebook Pixel) to measure performance and personalize advertising. You can manage cookies through your browser settings and, where available, through our cookie banner.
8. Data retention
We keep personal information only as long as necessary for the purposes described above, including to meet legal, tax and accounting requirements, after which it is deleted or anonymized.
9. Your privacy rights
California residents (CCPA/CPRA)
You have the right to know, access, correct and delete your personal information; to opt out of the sale or sharing of your personal information; to limit the use of sensitive personal information; and not to receive discriminatory treatment for exercising your rights.
EU/UK residents (GDPR)
You have the right to access, rectify, erase, restrict and port your data, to object to certain processing, to withdraw consent, and to lodge a complaint with your local data protection authority.
Mexico residents (LFPDPPP — ARCO rights)
You have the ARCO rights: Access, Rectification, Cancellation and Objection regarding your personal data, as well as the right to revoke your consent and to limit the use or disclosure of your data. Requests are handled in accordance with the LFPDPPP and its Regulations. [If Lumikel operates from or targets Mexico, a Spanish‑language “Aviso de Privacidad” should be published on the Spanish site and the competent authority named per the law in force.]
10. How to exercise your rights
Send your request to [[email protected]], indicating the right you wish to exercise. We will verify your identity and respond within the timeframe required by the law that applies to you. You may also revoke your consent to marketing at any time using the unsubscribe link in our emails.
11. Data security
Lumikel Store LLC implements administrative, technical and physical safeguards appropriate to the risk to prevent loss, misuse, unauthorized access, disclosure or alteration of your personal information. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
12. International data transfers
Your information may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.
13. Children’s privacy
The Site is not directed to children, and we do not knowingly collect their personal information. If you believe a child has provided us data, please contact us so we can delete it.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The “Last updated” date reflects the latest revision, and material changes will be posted on this page.