Privacy Policy

Last updated: September 1, 2026

Luma Collective is operated by ALC AB, a company registered in Sweden.

This Privacy Policy explains how Luma Collective and ALC AB collect, use, disclose, and protect personal information when you visit our website, place an order, contact us, or otherwise use our services.

Our online store is hosted and powered by Shopify, which provides the ecommerce platform used to operate our website and process certain information necessary to provide our services.

By using our website, you acknowledge the practices described in this Privacy Policy.

1. Personal Information We Collect

Depending on how you interact with Luma Collective, we may collect the following categories of personal information:

Contact information, including your name, email address, phone number, billing address, and shipping address
Order and transaction information, including products viewed, purchased, returned, or added to your cart
Account information, if you create or use an account on our website
Customer communications, including information you provide when contacting customer support
Device and technical information, including IP address, browser type, device information, and similar identifiers
Usage information, including how you interact with our website and services
Payment-related information, which is processed securely by our payment providers

Luma Collective does not store or have access to your full payment card number.

2. How We Collect Personal Information

We may collect personal information:

Directly from you when you place an order, contact us, create an account, or provide information through our website
Automatically through cookies and similar technologies when you browse our website
From Shopify and other service providers that help us operate our store
From payment processors, shipping providers, analytics providers, advertising platforms, and other service providers where appropriate

3. How We Use Personal Information

We may use personal information to:

Process and fulfill orders
Process payments
Provide shipping and delivery services
Handle returns and refunds
Provide customer support
Communicate with you about your orders
Maintain and improve our website and services
Detect and prevent fraud or unauthorized activity
Comply with applicable legal requirements
Provide marketing or advertising where permitted by law

4. How We Share Personal Information

We may disclose personal information to service providers and third parties where necessary to operate our business, including:

Shopify
Payment processors
Shipping and fulfillment providers
Customer service providers
Analytics and technology providers
Advertising and marketing providers
Professional advisers where necessary
Government authorities or other parties where required by applicable law

We do not disclose personal information for unauthorized purposes.

5. Shopify

Our online store is hosted by Shopify.

Shopify may collect and process personal information as necessary to provide its ecommerce and technology services.

Shopify's own privacy practices are governed by its applicable privacy policies and notices.

6. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to operate the website, remember preferences, analyze website usage, improve performance, prevent fraud, and support advertising where permitted.

Your browser may allow you to block or remove certain cookies. Disabling cookies may affect some website functionality.

7. Marketing Communications

If you choose to receive marketing communications from us, we may send promotional emails or other messages.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the message.

You may still receive transactional communications related to orders, shipping, payments, returns, or customer service.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including fulfilling orders, maintaining business records, resolving disputes, preventing fraud, and complying with legal obligations.

Retention periods may vary depending on the type of information and applicable requirements.

10. Your Privacy Rights

Depending on the state in which you reside and applicable law, you may have certain rights regarding your personal information, including the right to:

Request access to certain personal information we hold about you
Request correction of inaccurate personal information
Request deletion of certain personal information
Obtain certain information about how your personal information is used or disclosed
Opt out of certain forms of targeted advertising or other processing where applicable
Withdraw from marketing communications

These rights may be subject to legal exceptions and eligibility requirements.

To submit a privacy request, please contact us at info@LumaCollective.store.

We may need to verify your identity before completing certain requests.

11. Children's Privacy

Our website and services are not directed to children, and we do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us improperly, please contact us so we can review and address the matter.

12. Third-Party Websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy or security practices of those websites. We encourage you to review their privacy policies before providing personal information.

13. International Data Processing

Because Luma Collective is operated by ALC AB and uses service providers that may operate in different countries, personal information may be processed outside the state or country in which you reside.

Where required by applicable law, appropriate measures are used to protect personal information transferred across jurisdictions.