Privacy policy

We take data protection very seriously

When you order from Lumevre, send us a message or sign up for our newsletter, you share personal data with us. We want you to know exactly what we do with it, and why. You can read that here.

I. Who is responsible

Lumevre (hereinafter "Lumevre", "we" or "us"), a sole proprietorship (eenmanszaak) under Dutch law, De Nieuwe Erven 3, 5431 NV Cuijk, the Netherlands, Chamber of Commerce (KVK) 42082791 · VAT number NL005481767B19 · contact@lumevre.com

Lumevre is the controller within the meaning of the General Data Protection Regulation (GDPR) for all data collected via lumevre.com.

II. What data do we collect?

  • When you place an order: name, billing and delivery address, e-mail address, telephone number and payment details.
  • When you contact us: your name, your e-mail address and the content of your message.
  • When you sign up for the newsletter: your e-mail address and, if provided, your name.
  • When you visit our website: your IP address, browser type, pages visited and time of the visit. This happens through cookies and similar technologies. You can read more about this in Section V.

Data of minors

Our services are not intended for use by minors. Lumevre does not knowingly collect personal data from persons who have not yet reached the age of majority in their jurisdiction. Are you a parent or guardian and has your minor child provided us with personal data? Please contact us at contact@lumevre.com to request deletion.

III. What we use this data for

We use your data solely for specific purposes, each with its own legal basis:

  • Processing and shipping your order, and assisting you about it through our customer service. This follows directly from the agreement you enter into with us when you place an order.
  • Complying with our tax and administrative obligations, such as the statutory retention requirement for invoices. We are legally required to do so.
  • Sending our newsletter, which only happens if you have given your consent via the opt-in on our website.
  • Improving our website based on how visitors use the site, and preventing fraud and securing the site. This falls under our legitimate interest in a secure, well-functioning web shop.

IV. How long we retain data

We retain order and invoice data for 7 years. This is a statutory tax obligation. Messages you send us are retained for up to 2 years after the last contact. Newsletter data is retained until you unsubscribe. Website statistics are anonymised after 26 months at the latest.

V. Cookies

Cookies are small files that are stored on your device when you visit our website.

Functional cookies are always active. Without them, features such as your shopping cart or your language setting would not work. No consent is required for these.

We use analytical cookies via Google Analytics to understand how visitors use the website. The data is processed anonymously and is never used for advertising purposes.

We only place marketing cookies with your consent. Providers such as Meta (Instagram/Facebook) and TikTok use these to show you targeted advertisements. In addition to cookies, and likewise only with your consent to marketing cookies, we may share certain order data (such as a hashed version of your e-mail address and purchase data) directly with Meta through a secure server connection, to measure and improve the effectiveness of advertisements.

You set your preferences on your first visit and can change them at any time via the cookie settings at the bottom of the page.

VI. Who we share data with

We only pass your data on to third parties where this is necessary to handle your order or where we are legally required to do so:

  • Carriers (PostNL, DHL or similar): for delivery of your order
  • Payment service providers (Shopify Payments, Mollie B.V., PayPal (Europe) S.à r.l. et Cie, S.C.A. and Klarna, if you choose to use them): for processing your payment
  • Shopify Inc.: as the platform on which our web shop runs, certified under the EU-US Data Privacy Framework
  • Meta Platforms Ireland Limited (Facebook/Instagram): for advertising purposes, only if you have given your consent to marketing cookies. You can find more information in Meta's privacy policy.
  • Google Ireland Limited (Google Analytics): for measuring website usage
  • Judge.me and Trustpilot: for optionally inviting and displaying reviews (name and e-mail address)
  • Tax authorities and tax advisers: solely to comply with legal obligations

Shopify Inc. may also use data about your interactions with our web shop to offer its own "enhanced features", such as personalised advertisements based on your activity at one or more Shopify stores. In doing so, Shopify acts as an independent controller. You can find more information in the Shopify Consumer Privacy Policy.

Outside the cases mentioned above, we do not share your data with third parties, unless you have given us your explicit consent to do so.

VII. Transfers of data outside Europe

Shopify is based in Canada and the United States and is certified under the EU-US Data Privacy Framework for data protection. For other services that process data outside the European Economic Area (EEA), we ensure appropriate contractual safeguards.

VIII. Your rights

You have the right to:

  • Receive information about which data we have stored about you
  • Have inaccurate data corrected
  • Demand the deletion of your data
  • Have the processing of your data restricted
  • Receive your data in a portable format
  • Object to processing based on our legitimate interest
  • Withdraw any consent you have given at any time

Send an e-mail to contact@lumevre.com for this purpose. We respond within 30 days. For complex requests we may extend this period by up to two months. In that case, we will let you know within the first month.

To prevent misuse of these rights, we may ask you to identify yourself before we process your request. You can appoint an authorised representative to submit a request on your behalf. Before we process such a request, we ask for proof of this authorisation, and possibly also verification of your own identity.

IX. Security

No security measure is completely watertight, and we therefore cannot guarantee "perfect" security. We protect your data through SSL encryption, secured system access and by working exclusively with certified processors. Should we establish that a data breach has occurred, we will investigate it very seriously and, where the law requires, notify you and the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within the applicable period after we have established it.

X. Lodging a complaint

If you believe we are not handling your data with care, please contact us first at contact@lumevre.com. In most cases we will find a solution together. In addition, you always retain the right to lodge a complaint with the competent Dutch data protection supervisory authority (Autoriteit Persoonsgegevens).

You may also lodge a complaint with the supervisory authority in the EU country where you live or work.

XI. Changes

We may amend this privacy policy, for example in the event of new legislation or new tools we start to use. If fundamental changes are made to this policy, we will announce this on our website on this page. We will also check whether, in individual cases, there is an obligation to give other notice of changes to this policy and, if necessary, comply with that obligation accordingly.