Privacy notice

This notice explains which personal data we process when you order, and why.

Data controller

Data we process

Identity and contact: name, email, phone
Delivery: address, city, postal code, country
Order: items purchased, amount, currency, order history
If you create an account: your email and an irreversible hash of your password

Your card details never reach us. Payment is taken on the provider's own secure page; we only learn whether it succeeded.

Purposes and legal basis

Preparing and shipping your order and handling returns — performance of a contract
Invoicing and accounting records — legal obligation
Customer support and order notifications — performance of a contract

Who we share with

Payment providers: iyzico and Stripe
Email delivery: SendGrid
Hosting and database: Railway
Carriers — your name, address and phone, to deliver the parcel

The data controller, FUSENE LTD., is established in the United Kingdom, so your data is processed abroad even though your order ships from Türkiye. Some of the providers listed above are also located outside your country.

Cookies

Only essential cookies are used today: one that remembers your cart, and a session cookie if you sign in. No advertising or analytics cookies are used. If analytics are added later this notice will be updated and consent will be requested from visitors in the European Union.

Your rights

You have the right to learn whether your data is processed, to request correction or deletion, to object to processing, and to seek redress. If you are in the European Union, the GDPR additionally gives you the right to data portability.

Requests to: info@lumiafemme.com

Retention

Order and invoice records are kept for the period tax law requires. You can ask us to delete your account at the address above; records we are legally required to keep are retained until that period ends.