Privacy policy

Lumovex ("we", "us", "our") is an online lighting and home decor store based in Johannesburg, South Africa, selling to customers worldwide. This policy explains how we collect, use, store, and protect your personal information, and applies to visitors and customers regardless of where you're located. Depending on where you live, you may have specific rights under your local law — including South Africa's Protection of Personal Information Act (POPIA), the EU/UK General Data Protection Regulation (GDPR), or the California Consumer Privacy Act (CCPA) — each summarised below.

Information we collect: Contact details (name, email, phone, delivery address); order information; payment information (processed directly by PayFast/PayPal — we don't store your card or bank details); technical information (IP address, browser type, site usage via analytics once enabled).

Why we collect it: To process and deliver orders across borders, communicate about orders/enquiries, improve the site, and — where opted in — send marketing. You can opt out anytime.

International transfers: Because we're based in South Africa and sell internationally, your information may be processed in South Africa and other countries where our service providers operate. Where required (e.g. GDPR), we take reasonable steps to protect data transferred out of the EU/UK.

Who we share it with: Only what's needed to operate — PayFast/PayPal for payment, courier/customs partners for delivery, Shopify/Netlify for running the store. We don't sell your data.

Retention: Generally no longer than 5 years after your last order, unless local law requires otherwise.

Your rights: You can generally request to know, access, correct, delete, or restrict processing of your data, and object to marketing at any time. California residents have specific CCPA rights including opt-out of "sale" of data — Lumovex does not sell personal information. Contact us to exercise these rights; we'll respond within the legally required timeframe (typically 30 days).

Cookies: Used for essential site functions (cart, currency) and, once enabled, analytics/advertising (Google Analytics, Meta Pixel, TikTok Pixel). We'll ask consent where required by law.

Security: We take reasonable technical and organisational measures to protect your information, though no online system is 100% secure.

Information Officer: In line with POPIA, Lumovex's Information Officer handles data protection compliance, GDPR, and CCPA requests — contact via the details below.

Contact: hello@lumovex.co.za or via our Contact page.