PRIVACY POLICY

Last updated: July 3, 2026

Lumenaxy ("Lumenaxy," "we," "us," or "our") operates this store and website, including all related content, features, tools, products, and services (collectively, the "Services"), to give customers a secure, transparent, and premium shopping experience. Lumenaxy is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. It applies regardless of where you are located, and includes specific sections for visitors in the European Economic Area and United Kingdom (GDPR / UK GDPR), Brazil (LGPD), Singapore (PDPA), South Africa (POPIA), and the United States, including California (CCPA/CPRA).

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

Depending on how you interact with the Services, we may collect the following categories of personal information, including inferences drawn from it:

• Contact details - name, billing address, shipping address, phone number, and email address.
• Financial information - payment card details, financial account information, transaction details, and payment confirmation (processed securely by our payment providers; Lumenaxy does not store full card numbers).
• Account information - username, password, preferences, and settings, if you create an account.
• Order and transaction information - items viewed, added to cart, saved to a wishlist, purchased, returned, exchanged, or cancelled, and your order history.
• Communications - information you share when you contact our support team, submit a review, or respond to a survey.
• Device and usage information - IP address, browser and operating system, device identifiers, and information about how you browse and interact with the Services (collected via cookies and similar technologies - see our Cookie Policy).

2. Sources of Personal Information

• Directly from you - when you create an account, place an order, contact us, or otherwise provide information.
• Automatically through the Services - via cookies, pixels, and similar technologies, subject to your consent choices where required by law.
• From our service providers - including Shopify, payment processors, shipping carriers, and marketing/analytics partners.
• From advertising and business partners - such as Meta (Facebook/Instagram), where permitted and consistent with your consent preferences.

3. How We Use Your Personal Information

• To provide and improve the Services - process payments, fulfil and ship orders, manage your account, provide customer support, and personalize your experience.
• Marketing and advertising - with your consent where required (e.g., for visitors in the EEA/UK), we may show you tailored ads on Meta platforms and elsewhere, send promotional emails, and measure ad performance.
• Security and fraud prevention - authenticate accounts, detect and prevent fraud, and protect the integrity of the Services.
• Communication - respond to inquiries, send order and shipping updates, and maintain our relationship with you.
• Legal compliance - comply with applicable law, respond to lawful requests, and enforce our Terms of Service.

4. Cookies and Tracking Technologies

We use cookies, pixels (including the Meta/Facebook Pixel), and similar technologies to operate the Services, remember your preferences, measure performance, and - where you consent - deliver personalized advertising. Marketing and analytics cookies are only activated after you accept them through our cookie banner where required by applicable law (in particular for visitors in the EU, UK, and other regions requiring opt-in consent). You can change your preferences at any time through the "Cookie Preferences" link in our website footer. See our full Cookie Policy for details.

5. How We Disclose Personal Information

We may disclose your personal information to:

• Shopify and other service providers who support our operations (IT hosting, payment processing, analytics, customer support, order fulfilment, and shipping).
• Marketing and advertising partners, including Meta Platforms, Inc., to deliver and measure advertising - only where consent has been given if required by your location.
• Professional advisors, and government or regulatory authorities, where required by law.
• A successor entity in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information for money. Depending on your location, certain sharing of information for advertising purposes may be considered a "sale" or "share" under applicable law - see Section 8 below for your opt-out rights.

6. Relationship with Shopify

The Services are hosted on Shopify, which collects and processes personal information about your access to and use of the Services to help us provide and improve them. To learn more about how Shopify uses personal information, see Shopify's Consumer Privacy Policy. Depending on your location, you may be able to exercise certain rights directly through Shopify's Privacy Portal.

7. International Data Transfers

We may store, process, and transfer your personal information outside the country in which you reside, including to the United States. Where we transfer personal information out of the EEA or the UK, we rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses or the UK's International Data Transfer Addendum.

8. Your Rights, by Region

European Economic Area & United Kingdom (GDPR / UK GDPR)

If you are located in the EEA or UK, you have the right to: access, correct, or delete your personal information; obtain a copy of it in a portable format; object to or restrict certain processing; and withdraw consent at any time without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with your local data protection authority (a list of EEA authorities is available here).

Brazil (LGPD)

If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD) gives you the right to confirm the existence of processing, access your data, correct incomplete or inaccurate data, request anonymization or deletion of unnecessary data, request portability, obtain information about entities with which we have shared your data, and revoke consent at any time.

Singapore (PDPA)

If you are located in Singapore, under the Personal Data Protection Act (PDPA) you have the right to withdraw consent for the collection, use, or disclosure of your personal data, to request access to and correction of your personal data, and to be informed of the purposes for which your data is collected, subject to applicable exceptions.

South Africa (POPIA)

If you are located in South Africa, under the Protection of Personal Information Act (POPIA) you have the right to access, correct, or delete your personal information, to object to processing on reasonable grounds, and to lodge a complaint with the Information Regulator of South Africa.

United States, including California (CCPA/CPRA)

Depending on your state of residence, you may have the right to know what personal information we collect, to request deletion or correction of your information, and to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. To exercise your opt-out right, visit our Data Sharing Opt-Out page. If you visit our site with the Global Privacy Control (GPC) signal enabled, we will treat that signal as a valid opt-out request for your browser and device, where applicable.

Other Regions (including Latin America)

Wherever you are located, we apply the privacy practices described in this Policy in good faith and in line with generally accepted data protection principles, including transparency, purpose limitation, and data minimization.

You will not be discriminated against for exercising any of these rights. We may need to verify your identity before processing your request, as permitted or required by applicable law.

9. Children's Data

The Services are not directed to children, and we do not knowingly collect personal information from minors under the age required by applicable law in their jurisdiction. If you believe we have inadvertently collected information from a minor, please contact us using the details below so we can delete it.

10. Data Security & Retention

We use administrative, technical, and physical safeguards designed to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.

11. Third-Party Links

The Services may contain links to third-party websites or platforms. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the updated Policy on this page and revise the "Last updated" date above.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us:

Lumenaxy (operated by CPA Digital Business LLC)
15310 Amberly Dr, STE 250
Tampa, FL 33647, United States
Email: support@lumenaxy.com