1. Who We Are

Business Name: LumoLable
Country of Operation: Australia
Contact Email:  lumolabel@gmail.com

 

2. Information We Collect

We collect personal and non-personal data for order fulfilment, customer service, website functionality, and compliance purposes.

 

2.1 Personal Data You Provide

When you interact with us, you may provide:

• Full name

• Shipping and billing address

• Email address

• Phone number

• Order details

• Payment information (processed securely by third-party payment providers)

We do not store full credit card or PayPal account details.

 

2.2 Automatically Collected Data

 

When you visit our website, we may automatically collect:

• IP address

• Browser type and version

• Device identifiers

• Usage data, including pages visited and time spent

• Cookies and tracking technologies (see Section 6)

 

2.3 Data Received From Third Parties

We may receive information from:

• Payment processors (fraud checks, payment status)

• Shipping carriers (delivery confirmations)

• Shipping suppliers (inventory/fulfilment updates)

 

3. How We Use Your Personal Data

We process your personal data for:

• Fulfilling and delivering orders

• Processing payments

• Providing customer support

• Sending service-related emails (order confirmations, delivery updates)

• Website functionality and analytics

• Improving our products and services

• Meeting legal, tax, and regulatory obligations

 

We rely on lawful bases under GDPR, including:

• Contractual necessity — to process and deliver your order

• Legitimate interests — to improve our website and prevent fraud

• Legal obligation — tax and accounting purposes

• Consent — for marketing communications and cookies where required

 

. Dropshipping & Third-Party Service Providers

To fulfil orders, LumoLable uses trusted third-party suppliers (dropshipping partners). We share only the information necessary for shipping your order:

• Customer name

• Shipping address

• Phone number (if needed for delivery)

• Specific product ordered

Additional third-party service providers include:

 

4.1 Payment Processors

• Wix Payments

• PayPal

These providers process payment data under their own privacy policies.

 

4.2 Website & IT Services

• Wix.com (hosting, analytics, site functionality)

• Google Analytics (traffic monitoring, anonymised where required)

 

4.3 Logistics & Delivery Partners

• International and local courier services

All third parties are required to process personal data only for the purpose of performing their contracted services.

 

5. International Data Transfers

Because we ship products worldwide and use third-party service providers located outside Australia and the EU, your personal data may be transferred internationally.

When transferring data outside the European Economic Area (EEA), we ensure appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs)

• Transfers to countries with an adequacy decision

• Binding contractual obligations

 

6. Cookies & Tracking Technologies

LumoLable uses cookies to:

• Enable website functionality (shopping cart, login)

• Improve user experience

• Track website performance

• Personalize content

• Support advertising (if enabled)

You may disable cookies in your browser settings. Certain cookies are necessary for the site to function.

A detailed Cookie Policy can be provided separately upon request.

 

7. Data Retention

We retain personal data only as long as necessary for:

• Order fulfillment

• Customer service

• Legal and tax compliance

• Fraud prevention

• Warranty and return purposes

Retention periods vary by data type but generally do not exceed 7 years, unless required by law.

 

8. Your Rights Under GDPR

If you are located in the EU/EEA or UK, you have the following rights:

 

8.1 Right to Access

You may request a copy of the personal data we hold about you.

 

8.2 Right to Rectification

You may request corrections to inaccurate or incomplete data.

 

8.3 Right to Erasure (“Right to Be Forgotten”)

You may request deletion of your data where legally permissible.

 

8.4 Right to Restrict Processing

You may request that we limit how your data is processed.

 

8.5 Right to Data Portability

You may request your data in a machine-readable format.

8.6 Right to Object

 

You may object to processing based on legitimate interests or for marketing purposes.

8.7 Right to Withdraw Consent

You can withdraw consent for marketing or cookies at any time (where applicable).

To exercise any GDPR rights, email: (insert email)

 

9. Right to Lodge a Complaint

If you believe your privacy rights have been violated, you may lodge a complaint with:

 

Your Local Supervisory Authority

A list of EU supervisory authorities is available at:
https://edpb.europa.eu/about-edpb/board/members_en

 

Or Your Australian Authority:

Office of the Australian Information Commissioner (OAIC)
https://www.oaic.gov.au/

We encourage you to contact us first so we can address your concern.

 

10. Data Security

We take reasonable technical and organizational measures to protect your information, including:

• SSL encryption

• Secure hosting through Wix

• Access-restricted data storage

• Encrypted payment processing

• Fraud prevention systems

Although we strive to protect your data, no online system is completely secure.

 

11. Children’s Privacy

We do not knowingly collect data from children under age 13.
If you believe we have collected such data, please contact us immediately.

 

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically.
Changes will be posted on this page with a revised “Last Updated” date.
Continued use of the site indicates acceptance of the updated policy.