Privacy Policy

LUMEA SENSES (Legal/Business Name "LUMEA SENSES", Athens Greece, All Rights Reserved, Terms & Conditions Applied, "we", "us") respects your privacy. This policy explains what personal data we collect through www.lumea-senses.com, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR).

1. Data we collect

• Order & payment data — when you buy from us, our payment provider Stripe collects your name, shipping & billing address, email, phone number and card details. Your card details never reach our servers — they are processed exclusively by Stripe.
• Request-form data — when you send a custom or wholesale request: name, email, phone (optional), country and your message.
• Technical data — our hosting provider (Netlify) processes standard server logs (IP address, browser type) to deliver the website securely.

2. Why we process it (legal bases)

• To fulfil and deliver your order — performance of a contract (Art. 6(1)(b) GDPR).
• To answer your requests — your consent / steps prior to a contract.
• To meet tax and accounting obligations — legal obligation.
• To keep the site secure — legitimate interest.

3. Cookies & local storage

We do not use advertising or tracking cookies. The site stores only two small values in your browser's local storage: your preferred language and the contents of your shopping cart. These never leave your device. Stripe may set strictly necessary cookies during checkout for security and fraud prevention.

4. Who receives your data

• Stripe Payments Europe, Ltd. — payment processing (Stripe privacy policy).
• Netlify, Inc. — website hosting and form handling (Netlify privacy policy).
• Google Fonts — the fonts used on this site are loaded from Google's servers, which receive your IP address.
• Courier companies — name, address and phone, strictly to deliver your parcel.

We never sell your personal data. Where providers process data outside the EEA, they rely on EU-approved safeguards (Standard Contractual Clauses / Data Privacy Framework).

5. How long we keep it

Order and invoicing data are kept as long as Greek tax law requires. Request-form messages are kept for up to 24 months, then deleted.

6. Your rights

You may at any time request access, correction, deletion, restriction or portability of your data, or object to its processing. Email us at lumea.senses@gmail.com and we will respond within 30 days. You also have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr).

7. Changes

We may update this policy from time to time; the current version will always be published on this page.