SECTION 1 – WHAT INFORMATION DO WE COLLECT?

When you make a purchase from LumiLab, we collect personal information such as your name, address, email address, and phone number as part of the transaction process.

Additionally, when you browse our store, we automatically receive your device’s Internet Protocol (IP) address.

This helps us understand your browser type, device settings, and operating system to improve your experience.

Email & SMS Marketing (if applicable):

With your explicit permission, we may send you marketing emails or text messages about product updates, exclusive offers, and important order notifications (e.g. checkout reminders).

Certain actions such as cart abandonment may trigger messages via secure automated tools.

SECTION 2 – CONSENT

How do you give consent?

By providing your personal information to complete a transaction, verify payment, place an order, or arrange delivery, you consent to our collection and use of that information for the specific purpose of fulfilling your request.

If we ask for your information for a secondary reason (e.g., marketing), we will either ask for your explicit consent or provide a clear opt-out mechanism.

How to withdraw consent?

If you change your mind after opting in, you may withdraw your consent at any time by contacting us at:

info@lumilabseoul.com

SECTION 3 – DISCLOSURE

We may disclose your personal information if required to do so by law or if you violate our Terms of Service.

SECTION 4 – SHOPIFY

Our online store is hosted on Shopify Inc. They provide the e-commerce platform that enables us to sell our products and services.

Your data is stored through Shopify’s secured data storage systems and databases behind industry-standard firewalls.

Payment Processing

If you complete a transaction using a direct payment gateway, your credit card information is encrypted and handled according to PCI-DSS (Payment Card Industry Data Security Standard) protocols. This information is retained only as long as necessary to complete the transaction and then deleted securely.

SECTION 5 – THIRD-PARTY SERVICES

Third-party providers we work with will only collect and use your information as necessary to perform their contractual obligations (e.g. payment processing, shipping).

However, some third parties, such as payment gateways, may operate in different jurisdictions. If you engage with their services, your data may be subject to foreign privacy laws.

For example, if you're located in the EU and your data is processed by a US-based gateway, it may be subject to US legislation such as the Patriot Act.

Once you leave our website or are redirected to a third-party platform, this Privacy Policy no longer applies.

Links

Our website may contain links to external websites. We are not responsible for the privacy practices of other sites and recommend reviewing their privacy policies separately.

Analytics

We use Google Analytics to understand user behavior, traffic sources, and to improve website performance.

SECTION 6 – SECURITY

We take data protection seriously and implement industry best practices to prevent unauthorized access, alteration, or disclosure of your personal information.

Sensitive data, such as payment details, are encrypted using SSL (Secure Socket Layer) technology and stored with AES-256 encryption.

SECTION 7 – COOKIES

Our site uses cookies to improve your browsing experience. Here are examples of cookies we may use:

CookieDescription_session_idStores session details such as referrer and landing page_shopify_visitInternal analytics to track visits_shopify_uniqCounts unique visits by a single customercartStores cart content for 2 weeksstorefront_digestDetermines password access if store is protectedPREFUsed by Google to track traffic origin

You may choose to disable cookies through your browser settings.

SECTION 8 – AGE OF CONSENT

By using this site, you confirm that you are at least the age of majority in your jurisdiction of residence, or that you are the age of majority and have provided consent for your minor dependents to use this site.

SECTION 9 – POLICY CHANGES

This policy may be updated from time to time. All changes take effect immediately upon being posted to our website. We encourage you to review this policy regularly.

If LumiLab is acquired or merged with another entity, your information may be transferred to the new owners for continued service.

QUESTIONS OR REQUESTS

To access, correct, or delete any personal information we hold about you, or if you wish to file a complaint or require further clarification, please contact:

Privacy Compliance Officer

info@lumilabseoul.com