Privacy policy
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website. Below we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller for data processing within the meaning of the UK GDPR is: Andrii Mydlyak, Lumis Beauty, ul. Krakowska 1/88, 35-111 Rzeszów, Poland. Email: care@lumis-beauty.com.
1.3 For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.
1.4 Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products to you. Your data is stored through Shopify’s data storage, databases, and the general Shopify application.
2) Data Collection When Visiting Our Website When using our website for information purposes only, we only collect data that your browser transmits to our server (so-called "server log files"). This includes: visited page, date and time of access, amount of data sent, source/reference from which you reached the page, browser used, operating system used, and IP address. Processing is carried out in accordance with Art. 6(1)(f) UK GDPR based on our legitimate interest in improving the stability and functionality of our website.
3) Cookies In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies. You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general.
4) Contacting Us Personal data is collected when you contact us (e.g., via contact form or email). This data is stored and used exclusively for the purpose of responding to your request. The legal basis is Art. 6(1)(f) UK GDPR (or Art. 6(1)(b) UK GDPR if the request aims at the conclusion of a contract).
5) Data Processing for Account Opening and Contract Handling Pursuant to Art. 6(1)(b) UK GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms.
6) Newsletter (Existing Customers) If you have provided us with your email address when purchasing goods, we reserve the right to regularly send you offers for similar goods by email. The legal basis is Art. 6(1)(f) UK GDPR (direct advertising). You can object to this use at any time.
7) Data Processing for Order Fulfilment To process your order, we work together with service providers who support us in whole or in part in the execution of concluded contracts. Note on International Shipping: As our products are shipped directly from our international warehouse in China, your delivery data will be shared with our logistics partners for the purpose of shipping and customs clearance. When personal data is transferred to our partners in China, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) as recognised by the UK GDPR, to ensure your data remains protected.
8) Review Reminders We use your data to remind you by email to submit a review of your order, provided you have given us your express consent in accordance with Art. 6(1)(a) UK GDPR.
9) Social Media Buttons (Shariff Solution) Social media buttons are used on our website. To increase the protection of your data, these buttons are only integrated as HTML links, so that no connection is established with the servers of the respective providers when our website is called up.
10) Online Marketing (DoubleClick & Google Ads) This website uses online marketing tools from Google (DoubleClick and Google Ads conversion tracking) to display relevant ads to users and measure campaign performance. The legal basis is Art. 6(1)(f) UK GDPR.
11) Web Analytics Services (Google Analytics) This website uses Google Analytics, a web analysis service from Google LLC. We use the "anonymizeIp()" function, which means that IP addresses are shortened within the UK/EU/EEA. The legal basis is Art. 6(1)(f) UK GDPR.
12) Retargeting / Remarketing We use Facebook Pixel and Google Ads Remarketing to measure the effectiveness of advertisements and show you interest-based advertising. This is based on your consent (Art. 6(1)(a) UK GDPR) or our legitimate interest (Art. 6(1)(f) UK GDPR).
13) Rights of the Data Subject The applicable data protection law grants you comprehensive rights (Art. 15-21 UK GDPR): Right of access, rectification, erasure, restriction of processing, and data portability. Right to object: If we process your data based on legitimate interests, you have the right to object to this processing at any time for reasons arising from your particular situation. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
14) Duration of Storage of Personal Data The duration of the storage of personal data is determined by the respective statutory retention periods (e.g., commercial and tax law retention periods). After the expiry of the period, the corresponding data is routinely deleted.