Privacy Policy

Last updated: June 2026

1. Information We Collect

When you make a purchase on LumaWorld, we collect the following information:

• Contact information: Name, email address, shipping address
• Payment information: Processed securely through Stripe. We never store your full credit card number, CVV, or payment credentials on our servers.
• Order information: Products purchased, order date, transaction amount
• Technical information: IP address, browser type, device type — collected automatically for security and fraud prevention

2. How We Use Your Information

We use your information only for:

• Processing and fulfilling your orders
• Communicating order status and shipping updates
• Preventing fraud and maintaining security
• Complying with legal obligations (tax, accounting)

We never sell, rent, or share your personal information with third parties for marketing purposes.

2a. Refund Policy

LumaWorld operates on a no-refund, no-return policy. All sales are final. We do not accept returns, exchanges, or refunds once an order has been placed. For full details, please see our Returns & Refund Policy.

3. Payment Security

All payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor. Your payment data is encrypted in transit using TLS 1.2+ and never touches our servers directly. Stripe's security practices are audited annually by independent third parties.

4. Data Retention

We retain order information for 7 years to comply with tax and accounting regulations. You may request deletion of your personal data at any time by emailing lumaworldshop@gmail.com, subject to legal retention requirements.

5. Cookies & Tracking

LumaWorld does not use any cookies or tracking scripts.

6. Third-Party Services

We use the following trusted service providers, each with their own privacy practices:

• Stripe — Payment processing (Stripe Privacy Policy)
• Vercel — Website hosting (static site, no server-side data collection)
• AliExpress / DSers — Order fulfillment. Your name, shipping address, and phone number are shared solely to fulfill and deliver your order.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to data processing
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, contact lumaworldshop@gmail.com. We will respond within 30 days.

8. Security Measures

We implement the following security measures:

• TLS/SSL encryption for all data in transit
• Content Security Policy (CSP) headers to prevent code injection
• X-Frame-Options and X-Content-Type-Options headers
• Referrer-Policy set to strict-origin-when-cross-origin
• No storage of sensitive payment data on our infrastructure
• Static website architecture (no database, no server-side code execution)

9. Children's Privacy

LumaWorld does not knowingly collect information from children under 16. If you believe a child has provided us with personal data, contact us immediately for deletion.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We will notify you of material changes via email if you have an active order.

11. Contact

For privacy-related inquiries:
Email: lumaworldshop@gmail.com

LumaWorld
United States