Privacy Policy

Lume Haven LLC ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit or make a purchase through our website.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect the following categories of information when you visit our website, place an order, or communicate with us.

Personal Information

Depending on how you interact with our website, we may collect:

Name and billing information.
Shipping address and delivery details.
Email address and telephone number.
Order details, purchase history, and transaction records.
Information you voluntarily provide when contacting customer support.

Payment Information

When you make a purchase, payment information is processed through our payment service providers. We may receive limited transaction details, such as payment status, transaction references, and billing information necessary to manage your order.

We do not intentionally store complete payment card numbers or card security codes on our own servers.

Technical and Usage Information

When you visit our website, certain information may be collected automatically, including:

IP address and general device information.
Browser type and operating system.
Pages visited, browsing activity, and referring URLs.
Access dates, session information, and website interaction data.
Cookie identifiers and similar tracking technologies.

2. How We Use Your Information

We may use collected information for the following purposes:

To process, confirm, fulfill, and deliver orders.
To communicate order updates and shipping information.
To respond to inquiries and provide customer support.
To process refunds, returns, and payment-related requests.
To maintain website functionality, security, and performance.
To detect and prevent fraud, unauthorized transactions, and other harmful activities.
To comply with applicable legal, tax, accounting, and regulatory obligations.
To improve our services and understand customer preferences.
To send promotional communications where permitted by applicable law and subject to your preferences.

3. Legal Bases for Processing

Where applicable law requires a legal basis for processing personal information, we process information as necessary to perform a contract, comply with legal obligations, pursue legitimate business interests, or obtain your consent when required.

You may withdraw consent where processing relies on consent. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions, remember preferences, maintain shopping cart information, analyze website traffic, and improve the shopping experience.

You can manage cookies through your browser settings. Disabling certain cookies may affect some website features or prevent parts of the purchasing process from functioning properly.

Where required by law, we will request consent before using non-essential cookies or similar tracking technologies.

5. How We Share Information

We do not sell personal information in exchange for monetary compensation. We may disclose personal information when reasonably necessary to operate our business, including to:

Payment processors: To authorize and process transactions.
Shipping and fulfillment providers: To deliver orders and provide tracking information.
Website hosting and technology providers: To maintain our website and related services.
Analytics and security providers: To evaluate website performance and help prevent fraud.
Professional advisers: To obtain legal, accounting, or other professional assistance.
Government authorities and legal parties: When disclosure is required by law or necessary to protect our rights, customers, or business.

Service providers are expected to handle personal information in accordance with applicable contractual obligations and legal requirements.

We may also disclose information in connection with a merger, acquisition, restructuring, or transfer of business assets, subject to applicable law.

6. Payment Security

We use third-party payment service providers to facilitate payment transactions. These providers apply their own security measures and privacy practices to the information they process.

We take reasonable measures to protect order and transaction information against unauthorized access, disclosure, alteration, or destruction. However, no method of electronic transmission or storage can be guaranteed to be completely secure.

Customers should avoid sending complete payment card details or other sensitive financial information through ordinary email.

7. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including order fulfillment, customer support, dispute resolution, fraud prevention, and legal compliance.

Order and transaction records may be retained for seven years after order completion, where appropriate for accounting, tax, legal, and business recordkeeping purposes, unless a longer retention period is required by law or necessary to resolve a dispute.

When information is no longer needed, we will take reasonable steps to delete it, anonymize it, or securely dispose of it, subject to applicable legal obligations.

8. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information. Access to personal information is limited to authorized individuals and service providers who need it for legitimate business purposes.

Although we work to protect your information, we cannot guarantee absolute security. You use our website and provide information at your own risk.

9. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

Request access to personal information we maintain about you.
Request correction of inaccurate or incomplete information.
Request deletion of personal information, subject to legal exceptions.
Obtain a copy of certain personal information in a portable format.
Withdraw consent where processing is based on consent.
Opt out of certain marketing communications.
Appeal a decision regarding a privacy request where applicable.
Exercise your rights without unlawful discrimination.

To submit a privacy request, contact us using the email address provided at the end of this policy. We may need to verify your identity before processing certain requests.

10. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), may provide you with additional rights, subject to applicable eligibility requirements and exceptions.

These rights may include:

Right to Know: Request information about the categories and specific pieces of personal information we collect, the sources of that information, the purposes for collecting it, and the categories of recipients to whom it is disclosed.
Right to Delete: Request deletion of personal information, subject to applicable exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt Out: Opt out of the sale or sharing of personal information as those terms are defined under California law.
Right to Limit Certain Uses: Limit certain uses and disclosures of sensitive personal information where applicable.
Right to Non-Discrimination: Exercise applicable privacy rights without unlawful discriminatory treatment.

Categories of Personal Information

Depending on your interactions with our website, we may collect identifiers, customer record information, commercial information, internet or electronic network activity, and other categories permitted by applicable law.

We collect these categories from customers, website interactions, and service providers, and use them for the purposes described in this policy.

We may disclose relevant information to payment processors, shipping providers, hosting providers, analytics providers, and other service providers for legitimate business purposes. We do not sell personal information for monetary consideration. If our use of certain technologies constitutes "sharing" under California law, you may have the right to opt out.

Do Not Sell or Share My Personal Information

To submit a request to opt out of the sale or sharing of personal information, contact us at:

Email: hanh@lumehavenllc.com

Please include "California Privacy Request" in the subject line and describe your request. We will review and respond in accordance with applicable law.

Where required by law, we will also honor applicable opt-out preference signals, such as the Global Privacy Control (GPC).

11. Children's Privacy

Our website is intended for a general audience and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without legally required authorization.

If we learn that we have collected personal information from a child in circumstances that violate applicable law, we will take reasonable steps to delete that information.

12. Third-Party Websites and Services

Our website may contain links to third-party websites, payment services, or other external platforms. These third parties maintain their own privacy policies and practices.

We are not responsible for the privacy, security, or content practices of third-party websites. We encourage you to review their privacy policies before providing personal information.

13. International Data Processing

Our service providers may process or store information in locations outside your state or country of residence. Where required, we will take appropriate steps to ensure that such processing complies with applicable privacy and data protection laws.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, website operations, technology, or legal requirements.

When changes are made, we will update the "Last Updated" date at the beginning of this policy. Your continued use of the website after an update means you have had the opportunity to review the revised policy, subject to any consent requirements imposed by applicable law.