Privacy Policy

LUMEA SENSES (Legal/Business Name "LUMEA SENSES", Athens Greece, All Rights Reserved, Terms & Conditions Applied, "we", "us") respects your privacy. This policy explains what personal data we collect through www.lumea-senses.com, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR).

1. Data we collect

• Order data — when you place an order by email or through the request form, we receive the details you send us (name, contact details, shipping address and what you would like to order). We never collect or store payment card details on this website — payment is arranged separately with you (e.g. bank transfer or cash on delivery).
• Request-form data — when you send a custom or wholesale request: name, email, phone (optional), country and your message.
• Technical data — our hosting provider (Netlify) processes standard server logs (IP address, browser type) to deliver the website securely.

2. Why we process it (legal bases)

• To fulfil and deliver your order — performance of a contract (Art. 6(1)(b) GDPR).
• To answer your requests — your consent / steps prior to a contract.
• To meet tax and accounting obligations — legal obligation.
• To keep the site secure — legitimate interest.

3. Cookies & local storage

We do not use advertising or tracking cookies. The site stores only one small value in your browser's local storage: your preferred language. It never leaves your device.

4. Who receives your data

• Netlify, Inc. — website hosting and request-form handling (Netlify privacy policy).
• Google (Gmail) — we receive and reply to your orders and enquiries at lumea.senses@gmail.com.
• Google Fonts — the fonts used on this site are loaded from Google's servers, which receive your IP address.
• Courier companies — name, address and phone, strictly to deliver your parcel.

We never sell your personal data. Where providers process data outside the EEA, they rely on EU-approved safeguards (Standard Contractual Clauses / Data Privacy Framework).

5. How long we keep it

Order and invoicing data are kept as long as Greek tax law requires. Request-form messages are kept for up to 24 months, then deleted.

6. Your rights

You may at any time request access, correction, deletion, restriction or portability of your data, or object to its processing. Email us at lumea.senses@gmail.com and we will respond within 30 days. You also have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr).

7. Changes

We may update this policy from time to time; the current version will always be published on this page.