Privacy policy

LumaNYC | Data Protection & Privacy Policy

Effective Date: April 24, 2026

LumaNYC (“the Company,” “we,” “us,” or “our”) operates this digital storefront and related services (the “Services”). As a Delaware-registered entity powered by Shopify, we are committed to the highest standards of data sovereignty and transparency. This Privacy Policy outlines how we collect, utilize, and protect your personal information when you engage with our brand.

1. COLLECTION OF PERSONAL INFORMATION

We collect information that identifies or can be reasonably linked to you (“Personal Information”). The specific data collected depends on your interaction with the Services:

  • Identity & Contact Data: Legal name, shipping address, billing address, email, and telephone number.

  • Financial & Transactional Data: Payment card details (processed via encrypted gateways), transaction history, and order preferences.

  • Technical & Usage Data: IP addresses, browser types, device identifiers, and behavioral data regarding your interaction with our storefront.

2. SOURCES OF DATA

  • Direct Interaction: Information provided during account creation or checkout.

  • Automated Technologies: Cookies, pixels, and server logs.

  • Third-Party Analytics: Information from service providers such as Shopify, Google, and Meta.

3. UTILIZATION OF INFORMATION

LumaNYC processes data for the following legitimate business purposes:

  • Operational Fulfillment: To execute our contractual obligations, including payment processing and international shipping.

  • Security & Fraud Mitigation: To detect and prevent unauthorized transactions or malicious activity.

  • Marketing Optimization: To provide curated advertisements and promotional communications (subject to your opt-out rights).

  • Legal Compliance: To adhere to statutory obligations or respond to valid legal requests from government agencies.

4. DATA DISCLOSURE & GLOBAL TRANSFERS

To facilitate our global fulfillment model, your information may be shared with:

  • Shopify: Our primary infrastructure provider.

  • Logistics Partners: International fulfillment centers and carriers.

  • Legal Authorities: When required by the laws of the State of Delaware or international jurisdictions.

  • International Transfers: As a US-registered company with global sourcing, your data will be transferred to and processed in the United States, Canada, and other regions. We utilize Standard Contractual Clauses (SCCs) to ensure data protection for our European and UK clientele.

5. DATA SUBJECT RIGHTS (GDPR/CCPA/UK-GDPR)

Depending on your residency, you may possess the following rights:

  • The Right to Access/Know: Request a copy of your stored data.

  • The Right to Erasure: The “Right to be Forgotten.”

  • The Right to Correction: Amend inaccurate personal details.

  • The Right to Opt-Out: Object to targeted advertising or data "sharing" as defined by law.

6. DATA RETENTION & SECURITY

We retain Personal Information only for as long as necessary to fulfill the purposes outlined in this policy. While we implement industry-leading SSL encryption and security protocols, no digital transmission is 100% secure. Users are responsible for maintaining the confidentiality of their account credentials.

7. CONTACT & GOVERNANCE

For inquiries regarding your data or to exercise your rights, please contact our Data Privacy Liaison:

  • Email: support@lumanyc.shop

  • Corporate Address: 1007 N Orange St. 4th Floor, Suite #5594, Wilmington, DE 19801, USA

IMPORTANT: MANDATORY ACKNOWLEDGEMENT & BINDING AGREEMENT

PLEASE READ CAREFULLY: By accessing this website and/or finalizing a transaction with LumaNYC, you hereby represent, warrant, and certify that you have read, understood, and unequivocally agreed to be legally bound by this Privacy Policy and all related Terms of Service.

  1. CONSENT TO PROCESSING: Your use of our Services constitutes explicit consent to the collection, transfer, and processing of your data as described above.

  2. FINALITY OF AGREEMENT: You acknowledge that a "failure to read" these disclosures does not waive your consent. Your successful checkout serves as a legally binding digital signature of acceptance.

  3. WAIVER OF CLAIM: You agree to waive any right to claim "unauthorized data usage" for actions clearly defined in this policy, including the transfer of data to international fulfillment partners.

  4. GOVERNING LAW: This policy is governed by the laws of the State of Delaware, USA. Any disputes regarding data privacy shall be resolved within the jurisdiction of Delaware courts.

IF YOU DO NOT AGREE TO THESE TERMS IN THEIR ENTIRETY, YOU ARE LEGALLY INSTRUCTED TO DISCONTINUE USE OF THIS SITE AND REFRAIN FROM PLACING AN ORDER.