Privacy Policy

Who is responsible

This policy explains how personal information is used when you visit trustlumi.com, place an order, use an account or contact the Lumi team. Last updated: 10 October 2026.

SBS.Trading, trading as Lumi, is responsible for the store’s use of your personal information.
Address: Bredestraat 81, 9041 Oostakker, Belgium.
Business/VAT number: BE 0871.699.408.
Privacy and customer-service email: hello@trustlumi.com.

Information we use

• Orders and payments: your name, email, billing and delivery information, products, quantities, order references, transaction details, payment status and correspondence about your purchase.
• Accounts and Lumi features: login details, account preferences and the information you choose to submit through registration or My Lumi, such as a registration code or nickname. You can also buy using guest checkout.
• Contact and returns: your name, contact details, order information, message and any attachments you choose to send. An online withdrawal notice also records its contents and submission date and time so we can handle the request and provide an acknowledgement.
• Gift purchases: delivery or gift-card recipient details and any message you provide. If you share somebody else’s information, use only what is needed for the gift and make this policy available to them.
• Website use: technical information such as IP address, browser and device information, visited pages, interactions, referring links, cookie identifiers and consent preferences, depending on the feature or service involved.

Information marked as required is needed to provide the requested feature, process your order or respond to you. Without necessary contact, payment or delivery information, we may be unable to complete the purchase. Do not include sensitive personal information in a nickname, gift message or general enquiry.

Why information is used

• To process and support your purchase: taking payment, preparing delivery, sending order information, managing returns and providing a requested account or related service. The basis is performance of a contract or steps you ask us to take before a purchase.
• To meet legal duties: keeping required accounting and tax records, handling consumer rights and responding to lawful requests. The basis is the relevant legal obligation.
• To answer general enquiries and protect the shop: resolving questions, preventing misuse and keeping the service secure. The basis is our legitimate interest in operating a reliable shop and handling requests, balanced against your rights.
• For optional communications and tracking: where consent is required for an optional message, analytics or advertising technology, consent is the legal basis. You may withdraw consent; doing so does not affect processing that was lawful before withdrawal.

Order, payment and return acknowledgements are service messages, separate from optional marketing.

Payments and service providers

The shop uses WordPress and WooCommerce. Information is available to the people and service providers who need it to run the shop, including hosting and technical support, payment services, email delivery, fulfilment and delivery providers, and professional advisers where required. Public authorities may receive information where the law requires it.

Combell provides the hosting and outgoing email infrastructure used by the shop. This involves storing website and order information and processing messages and the technical information needed to provide those services. See Combell’s Privacy Policy.

Stripe supports the payment service used at checkout. Stripe and the provider of your selected payment method process the information needed to authorise and manage payment, refunds, security and fraud prevention. This can include payment details, contact and order information, and technical signals. Lumi receives the transaction information needed to manage your order. Payment providers can also act as controllers for their own regulated services and security purposes. See Stripe’s Privacy Policy.

Available payment methods can vary by country. If you choose a method such as Klarna, that provider’s payment and privacy information applies to its service, including any eligibility or automated checks it describes. Review the information shown for the chosen method before confirming payment.

Cookies and your choices

Cookies and browser storage support functions such as the basket, login session, checkout and preferences. Cookiebot is used to present cookie choices and record consent preferences. Necessary storage supports the service you request; optional analytics and advertising storage requires consent.

You can reopen the cookie choices to review or change your preferences. Browser settings can also remove or restrict stored data, although blocking necessary storage may affect the basket or account features.

Review cookie choices

The site includes these analytics and advertising integrations:

• Automattic / Jetpack and WooCommerce analytics: website and shop usage information, such as page views, referring links and order-related events. See Automattic’s notice for site visitors.
• Microsoft Clarity: interaction analytics, including clicks, scrolling, heatmaps and session recordings, to help understand how the site is used. Microsoft also explains its own processing in the Microsoft Privacy Statement.
• Meta / Facebook and TikTok: website-event and advertising measurement integrations that can associate page or purchase events, technical identifiers and campaign information with advertising activity. See Meta’s Privacy Policy and TikTok’s Privacy Policy.

These providers’ notices explain their own processing and privacy choices. Details about Cookiebot’s handling of consent information are available in its Privacy Policy.

International processing

Some providers operate internationally, so information may be processed outside the European Economic Area, including in the United States. The provider notices linked above describe their locations and transfer arrangements, such as applicable adequacy decisions or standard contractual clauses. You can contact us for further information about the providers handling your information and the relevant safeguards.

How long information is kept

Retention depends on the purpose: completing and supporting an order, dealing with returns or disputes, maintaining an account you use, meeting applicable accounting and tax obligations, and protecting the shop. A record needed for an unresolved issue or legal obligation may need to be kept after an account is closed.

The store does not currently apply an automatic deletion timetable to customer accounts and order records. Requests for access or deletion are handled individually against the purposes and obligations above. Service providers may keep records for their own legal or service purposes, as explained in their notices.

Your privacy rights

Depending on the circumstances, you can ask to access, correct or erase your information, restrict its use, receive portable information, or object to processing based on legitimate interests. You can always object to direct marketing and withdraw consent where processing relies on it. Some records must be retained to meet legal obligations or deal with legal claims.

Send your request to hello@trustlumi.com. Give enough information for us to locate the relevant account or order. We may ask for proportionate information to verify your identity before disclosing or changing personal data.

You can complain to the Belgian Data Protection Authority or another competent supervisory authority. You do not have to contact us before using that right.

Changes and questions

We may update this policy when the shop, its services or relevant requirements change. The date above identifies the latest version. Contact hello@trustlumi.com with questions about how your information is used.