Privacy policy

Last updated: November 26, 2025

LumeCraft (“we”, “our”, “us”) operates this website and online store (the “Services”) in order to offer a curated shopping experience. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website, place an order, or otherwise interact with us.

By accessing or using the Services, you acknowledge that you have read and agree to this Privacy Policy and consent to the processing of your personal data as described below.

1. Data Controller and Contact

LumeCraft, located at AV Río Grande S/N, Santa Catarina, Acolman, Estado de México, 55875, Mexico, is the data controller responsible for your personal information.

For any privacy-related questions or to exercise your rights, please contact us at:
📧 lumecraftus@outlook.com

2. Personal Information We Collect

We collect personal data that can identify you directly or indirectly, such as:

  • Contact information: name, email address, phone number, billing and shipping addresses.

  • Payment information: credit/debit card details and transaction records.

  • Account data: username, password, and preferences (if applicable).

  • Usage data: IP address, browser type, device information, and browsing activity.

  • Communications: information you send when contacting us for support or inquiries.

3. How We Collect Your Data

We obtain personal data through:

  • Direct interactions: when you create an account, place an order, or contact us.

  • Automated technologies: cookies and analytics tools used to improve our website.

  • Third-party services: including Shopify, payment processors, and shipping partners.

  • Social media or advertising partners, when you engage with our ads or content.

4. How We Use Your Personal Information

We process your information for the following lawful purposes:

  • To provide our Services: process your order, manage payments, and arrange deliveries.

  • To improve and personalize your experience.

  • To send updates, promotions, and marketing communications (only with your consent).

  • To prevent fraud and ensure security.

  • To comply with legal obligations.

The lawful bases for processing your data include: your consent, contract performance, and our legitimate interest in providing and improving the Services.

5. How We Share Your Information

We may share your data with:

  • Shopify, which powers our online store (see Shopify Privacy Policy).

  • Payment processors (for secure payment transactions).

  • Shipping providers (for order fulfillment).

  • Service providers and IT partners (hosting, analytics, email delivery).

  • Authorities, if required by law.

Your information may be transferred internationally, including to Canada and the United States, under appropriate safeguards such as Standard Contractual Clauses (GDPR) and compliance with Mexico’s LFPDPPP requirements.

6. Your Rights (ARCO, GDPR & Global Equivalents)

You may exercise the following rights at any time:

  • Access: request to know what personal data we hold about you.

  • Rectification: request correction of inaccurate or incomplete data.

  • Cancellation/Deletion: request deletion of your personal data when appropriate.

  • Opposition: object to specific processing activities.

  • Portability: request your data in a structured, machine-readable format.

  • Withdrawal of consent: revoke previously granted consent.

To exercise these rights, contact us at lumecraftus@outlook.com.
We may require proof of identity before processing your request.

7. Children’s Privacy

Our Services are not intended for minors. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us information, contact us immediately.

8. Data Retention and Security

We implement administrative, technical, and physical safeguards to protect your information.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

9. International Data Transfers

When transferring personal data outside Mexico or your country of residence, we ensure it receives adequate protection in compliance with applicable laws, including the GDPR and Mexican Federal Data Protection Law (LFPDPPP).

10. Marketing Preferences

You may opt out of promotional communications at any time using the “unsubscribe” link in our emails. Transactional messages (e.g., order confirmations) will still be sent.

11. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted here with an updated “Last Updated” date. Continued use of our Services after changes constitutes acceptance.

12. Acceptance

By using our website, you acknowledge that you have read, understood, and agree to this Privacy Policy and the processing of your data as described herein.