Privacy policy

PRIVACY POLICY

Last updated: May 2026

This policy describes how LUMEE, operated by Amandine Neves, sole proprietor, collects, uses and protects your personal data when you browse and shop on the website www.lumeetan.com.

  1. DATA CONTROLLER

LUMEE - Amandine Neves (Sole proprietor)
c/o LUMEE, Place de l'Europe, L-4112 Esch-sur-Alzette, Luxembourg
RCS Luxembourg: A46721
Business license: No. 10181960/0
Email: contact@lumeetan.com

  1. PERSONAL DATA WE COLLECT

When you browse the website:

  • IP address, browser type, operating system
  • Country, language, time zone
  • Pages visited, length of visit, traffic source
  • Cookies and technical identifiers

When you make a purchase or sign up:

  • First name, last name
  • Mailing address (billing and shipping)
  • Email address, phone number
  • Payment information (securely processed by our service providers)
  • Order history
  1. PURPOSES OF PROCESSING

Your data is processed to:

  • Fulfill your order (payment, shipping, billing)
  • Provide customer service
  • Send you our marketing communications (if you have consented)
  • Improve our website and personalize your experience
  • Deliver targeted advertising
  • Prevent fraud
  • Comply with our legal and accounting obligations
  1. LEGAL BASIS FOR PROCESSING

In accordance with the GDPR, each processing activity is based on one of the following legal grounds:

  • Performance of a contract: order processing, shipping, customer service
  • Consent: newsletter, marketing cookies, targeted advertising
  • Legitimate interest: security, website improvement, fraud prevention
  • Legal obligation: retention of invoices, tax obligations
  1. COOKIES

The website uses cookies for the following purposes:

  • Website functionality (Shopify technical cookies)
  • Personalized advertising (Meta Pixel)

You can manage or decline cookies through the banner displayed on your first visit. For more information, please see our Cookie Policy.

  1. DATA SHARING

Your data may be shared with:

  • Shopify International Ltd. (Ireland): hosting and e-commerce platform
  • Shopify Payments: secure card payment processing
  • PayPal (Europe) S.à r.l. (Luxembourg): payment processing
  • Klarna Bank AB (Sweden): installment payment solution
  • Meta Platforms Ireland Ltd.: personalized advertising (Facebook / Instagram)
  • Our logistics partners and carriers: order preparation and shipping (Post Luxembourg, La Poste France, Colissimo, DHL, FedEx, and others depending on the destination country)

This sharing is carried out in strict compliance with the GDPR, under contract or appropriate clauses.

  1. TRANSFERS OUTSIDE THE EU

Some of your data may be transferred outside the European Union, in particular to our advertising service providers and our international logistics partners. These transfers are governed by the EU-U.S. Data Privacy Framework (for Meta) and by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring a level of protection equivalent to that of the GDPR.

  1. DATA RETENTION
  • Order data: 10 years (accounting obligations)
  • Customer account data: period of account activity + 3 years
  • Browsing data: 13 months maximum
  • Marketing / newsletter data: 3 years after the last contact
  • Cookies: 13 months maximum
  1. YOUR RIGHTS

In accordance with the GDPR, you have the following rights at any time:

  • Access to your data
  • Rectification
  • Erasure
  • Restriction of processing
  • Objection
  • Data portability
  • Withdrawal of consent

You can exercise your rights by contacting us at contact@lumeetan.com. You will receive a response within one month at most.

If you believe your rights have not been respected, you also have the right to lodge a complaint with the competent supervisory authority: the National Commission for Data Protection (Commission Nationale pour la Protection des Données, CNPD), cnpd.public.lu.

  1. DATA SECURITY

Your data is hosted on Shopify's secure servers. We implement technical and organizational measures to ensure its confidentiality: HTTPS/SSL connection, encryption, and access restricted to authorized persons.

  1. TARGETED ADVERTISING

We use your data to show you ads tailored to your interests through Meta (Facebook / Instagram). You can turn off personalized advertising directly in your Facebook / Instagram settings at: https://www.facebook.com/settings/?tab=ads

  1. DATA RELATING TO MINORS

LUMEE is not intended for individuals under the age of 16. We do not knowingly collect data from minors. If you are a parent and discover that a minor has provided us with their data, please contact us immediately so we can delete it.

  1. CHANGES

This policy may be modified at any time to reflect legal developments or changes in our practices. The version in effect is the one published on this page.

  1. CONTACT US

Email: contact@lumeetan.com
Address: LUMEE, c/o Amandine Neves, Place de l'Europe, L-4112 Esch-sur-Alzette, Luxembourg