Privacy Policy

Your privacy matters to us

Lumendoo respects your privacy and makes sure your personal information is handled safely, carefully and confidentially. We only process the information we genuinely need to provide, improve and protect our services. We never sell your personal information, and we never pass it on to third parties for commercial purposes.

About this privacy policy

This privacy policy applies to your use of the Lumendoo website and the services we offer. Here we explain what personal information we collect, what we use it for, who it may be shared with, and how we protect it. If you've got any questions, you're welcome to reach out at info@lumendoo.com.

How we handle personal information

Lumendoo handles personal information in line with applicable privacy laws, including the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). We only process information for clear, legitimate and lawful purposes. Our basis for processing is either fulfilling an agreement, meeting a legal obligation, a legitimate interest, or the consent you've given us.

What information we collect

We only collect the information needed to process your order and give you good service:

– First and last name
– Delivery and billing address
– Email address and phone number
– Payment details (handled through secure payment providers)
– Order history and communication with customer service
– Technical information, such as your IP address and browser details

Online store & technical services

Lumendoo uses the Shopify platform to run its online store. Shopify acts as a data processor and securely stores order and customer information on our behalf. We also use trusted tools such as Google Workspace (email and communication) and Klaviyo (customer communication and newsletters). These providers only have access to information as far as it's technically necessary, and they're not allowed to use it for their own purposes. Our website is protected with SSL encryption and appropriate security measures.

Payments & Afterpay

Payments are handled through secure, certified payment providers. When you choose a buy-now-pay-later option such as Afterpay, that provider acts as an independent data controller for its own data. This means they may process your personal information in line with their own privacy policy — for example, to confirm your identity, assess your eligibility and help prevent fraud.

When you use Afterpay, we may share the details needed to process the payment, such as your name, contact details, delivery address and order details. You'll find more about how Afterpay handles your personal information in their own privacy policy on afterpay.com.

Email & customer communication

All customer communication runs through secure systems. We take appropriate technical and organisational measures to prevent loss, misuse or unauthorised access to information. Personal information is only used for customer service and processing orders. We only send marketing or newsletter emails if you've expressly opted in, and you can unsubscribe at any time.

Why we process your information

We process personal information for the following purposes:

– Processing and delivering orders
– Handling payments and preventing fraud
– Customer service and support
– Meeting legal obligations (such as bookkeeping)
– Improving our website and services
– Marketing, where you've given your consent

Sharing information with third parties

We only share your information with parties that are needed to complete your order, such as:

– Payment providers (for card and Afterpay payments)
– Carriers (national and international couriers, such as Australia Post)
– Technical service providers (Shopify, Google Workspace, Klaviyo)

We've put data processing agreements in place with all of these parties to protect your information. We won't share your information for any other purpose without your consent, unless the law requires it.

Automatically collected information

Our website automatically collects technical information, such as anonymised IP addresses, browser details and system data. This is only used to improve how the website works, its security and your experience.

Cookies

Our website uses cookies to improve your experience. Cookies are small text files stored on your device. We use both functional cookies (needed for the website to work) and analytics and marketing cookies (which require your consent). You can manage your cookie preferences anytime through the cookie banner on our website or your browser settings.

Legal obligations

Lumendoo may be required to share personal information with the authorities where the law requires it — for example, in connection with tax obligations or official investigations.

How long we keep your information

We only keep personal information for as long as it's needed for the purpose it was collected, or to meet legal obligations. Bookkeeping records are kept for the period required by law. Once information is no longer needed, it's securely deleted or anonymised.

Your privacy rights

Under Australian privacy law, you have the right to:

– Access: ask what information we hold about you
– Correction: ask us to fix incorrect information
– Deletion: ask us to delete your information where we're able to
– Restriction: ask us to limit how we use your information
– Portability: receive your information in a structured format
– Object: object to certain kinds of processing
– Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these, get in touch at info@lumendoo.com. We'll respond to your request within a reasonable time. Lumendoo doesn't use automated decision-making or profiling that has legal effects for you.

Complaints

If you're not happy with how we've handled your personal information, please contact us first at info@lumendoo.com. You also have the right to lodge a complaint with the privacy regulator. In Australia, this is the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au.

Data security

We take appropriate technical and organisational measures to protect personal information, including:

– SSL-encrypted connections
– Secure servers and systems
– Limited, monitored access to personal information
– Regular security checks

Changes to this privacy policy

Lumendoo may update this privacy policy when needed. The latest version is always available on our website. If we make significant changes, we may let you know by email.