LAUNCH OFFER • Free shipping on your Lumino.Plus a free e-guide • 14-day returns

Privacy policy

Last updated: October 7, 2026

Data controller

Marchi Theo, sole proprietorship, 7 Rue Lucien Bonmarchand, 92370 Chaville, France – SIRET 108 089 814 00017 – contact@get-lumino.com.

Data collected and purposes

  • Orders: name, delivery address, email, phone, order contents and amount. Purpose: perform the contract, deliver, invoice, handle returns and guarantees. Legal basis: contract; legal obligation (accounting).
  • Payment: handled by Stripe; we never receive or store your card number.
  • Free e-guide (pop-up): first name, last name, email, phone (optional), answers to the mini-quiz, language and country. Purpose: send your e-guide and occasional lumino emails. Legal basis: consent (unsubscribe any time by replying “STOP”).
  • Service emails: order confirmation and thank-you, sent automatically through Resend once payment is validated. Legal basis: contract.
  • Contact form: name, email, message. Purpose: reply to your request. Legal basis: legitimate interest / pre-contractual steps.
  • Security: an irreversible salted hash of your IP address is used for minutes to 24 hours to limit abuse. Legal basis: legitimate interest.
  • Visitor country: determined technically by Cloudflare to offer the right language; not stored against your identity.

Retention

Orders and invoices: 10 years (accounting). Leads: until unsubscribe, and at most 3 years after last contact. Contact messages: 3 years. Anti-abuse hashes: 24 hours.

Recipients and processors

Stripe Payments Europe Ltd (payments), Cloudflare, Inc. (hosting, CDN, D1 database, security), Resend (order and e-guide emails) and carriers. Some providers are located outside the EU (USA): transfers rely on the European Commission’s standard contractual clauses or the Data Privacy Framework.

Cookies and trackers

This website uses no advertising or analytics cookies. Only strictly necessary items are stored in your browser (cart, language choice, closing the offer pop-up), exempt from consent. If analytics were added, a consent banner would be put in place first. The site uses no third-party fonts or scripts.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent. Contact: contact@get-lumino.com. You may lodge a complaint with your data protection authority (in France, the CNIL – cnil.fr).

Security

HTTPS, security headers, restricted data access, abuse limiting, signature-verified payment confirmation, no card data stored.

Minors

This website is intended for adults.

Changes

This policy may change; the update date is shown at the top.