Lumi Frames privacy policy
We collect only what we need to answer you and deliver your frame. We don't use analytics or advertising trackers, and we never sell your personal information.
Last updated
This Lumi Frames privacy policy explains what personal information we collect when you visit lumi-frame.com, send us a message or buy a frame, why we use it, who helps us handle it, and the choices you have. If anything here is unclear, ask us directly and we'll explain.
The short version
- We collect what you choose to give us through our forms, email and checkout, plus basic technical logs that our website host keeps for security.
- We don't use analytics, advertising cookies, tracking pixels, social media plug-ins or third-party scripts.
- Card payments are handled by Stripe. We never see or store your full card number.
- We don't sell your personal information or share it for advertising.
- We don't send marketing email. We email you only to reply to you and about your order.
Who we are
Lumi Frames ("Lumi Frames", "we", "us") runs this website and sells illuminated frames online, with prices in US dollars and shipping worldwide. For personal information collected through this site, we are the business responsible for it (the "controller" under European and UK data protection law). You can reach us at hello@lumi-frame.com.
What we collect and why
| Where it comes from | What we collect | Why we use it |
|---|---|---|
| Contact form | Your name, email address, topic, country, and optionally the frame, size and finish you're interested in, plus your message. | To answer your question or order request, and to give you prices and delivery times for your country. |
| Custom brief form | Name, email, starting frame, quantity, size, delivery country, the date you need it by (optional), your description, and one optional image or PDF of up to 8 MB. We also record that you confirmed you have the right to use the images you send. | To quote for, design and make a custom frame. |
| Send Us Your Piece form | Name, email, the frame, size and finish you want, a description and the size of your piece, your return shipping country and any notes. We also record that you accepted the service conditions and confirmed you own the piece or have permission to have it framed. | To confirm the mounting service, tell you where to send your piece and ship the finished frame back to you. |
| Checkout | Stripe's payment page collects your name, email address, shipping address, the frame you ordered and your payment details, and may ask for a phone number. We receive the order and delivery details and limited payment information, such as the card type and last four digits. We don't receive your full card number. | To take payment, ship your order, send order updates and handle returns and warranty claims. |
| Email with us | Whatever you choose to include, such as an order number or photos of a delivery. | To help you, including with setup questions, returns and warranty claims. |
| Server logs (automatic) | Technical details such as IP address, browser and device type, the page requested, the referring page, and the date and time. | Recorded by our host, Netlify, to deliver the site and protect it against abuse and attacks. |
Please don't send sensitive information through our forms or by email, such as health details, government ID numbers or card numbers. We never ask for them.
Cookies and tracking
Our pages don't set cookies. If you use the accessibility panel, your display choices (such as text size or high contrast) are saved in your browser's local storage on your device so they apply on every page; they are never sent to us, and you can clear them with Reset all. We don't use analytics, advertising, social media plug-ins or tracking pixels, and our fonts and images are served from our own site rather than from third parties. That's why you don't see a cookie banner here. To make browsing faster, our pages may ask your browser to load other pages from our own site in advance; this doesn't involve any other company.
When you select Buy, you leave our site for a payment page run by Stripe. Stripe uses cookies and similar technologies on its own pages, including to keep payments secure and detect fraud, as described in Stripe's cookie policy.
Legal bases for using your information (EU and UK visitors)
If you are in the European Economic Area, the United Kingdom or Switzerland, data protection law requires a legal basis for each use of your information. We rely on:
- Contract: to take payment for and deliver your order, handle returns and honor the warranty, and to take steps you ask for before ordering, such as preparing a quote.
- Legitimate interests: to answer your questions, keep a record of our conversations, keep the site secure, filter spam and defend legal claims. We only rely on these interests where they aren't outweighed by your rights.
- Legal obligation: to keep tax and accounting records and to respond to lawful requests from authorities.
- Consent: where we ask for it for a specific purpose. You can withdraw consent at any time, which doesn't affect anything we did before you withdrew it.
Who handles your information for us
We use a small number of service providers to run the site and fulfill orders. They may use your information only to provide their service to us, except where noted below.
| Provider | What they do | What they receive |
|---|---|---|
| Netlify | Hosts the website, receives and stores form submissions for us, sends us a notification of each one, and keeps server logs. Netlify checks form submissions for spam using a filtering service called Akismet, as described in Netlify's forms documentation. | Form submissions, including any file you upload, and technical log data. |
| Stripe | Runs our payment pages, processes card payments and sends payment receipts. Stripe also uses some payment data for its own purposes, such as preventing fraud, as explained in the Stripe privacy policy. | Your name, contact and shipping details, payment details and what you ordered. |
| Our email provider | Hosts our mailbox, which we use to receive form notifications and reply to you. | Messages you send us and our replies. |
| Shipping carriers and customs | Deliver your order. For international shipments, customs authorities receive the customs declaration. | Your name, delivery address, phone number if provided, and the contents and value of the parcel. |
We may also disclose information if the law requires it, to protect our rights or the safety of others, or to a buyer or successor if Lumi Frames is sold or reorganized. Anyone who takes over customer records must use them in line with this policy.
International transfers
Lumi Frames operates in the United States, and our main service providers are based there, so information you send us from other countries is transferred to the United States and may be processed in other countries where our providers work. Where the law requires it, these transfers rely on recognized safeguards, such as the European Commission's standard contractual clauses. Netlify, for example, states in its privacy statement that it uses these clauses and has self-certified to the EU-U.S. Data Privacy Framework.
How long we keep information
- Messages and quote requests: we keep them only as long as needed to answer you and to keep a reasonable record of our conversation. If a message leads to an order, we keep it with the order record.
- Images and files you upload: only as long as needed to quote for, make and support your order, including any warranty claim. After that we delete them.
- Order records: as long as needed to fulfill your order, handle returns and the 2-year warranty, and meet tax and accounting laws, which can require us to keep records for several years.
- Server logs: kept by Netlify for a limited period under its own policies.
Your privacy rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- delete your information; and
- stop using your information for a particular purpose (object).
If you are in the European Economic Area, the United Kingdom or Switzerland, you can also ask us to restrict how we use your information, ask for a copy in a portable format, and withdraw consent where we rely on it. You have the right to complain to your local data protection authority, although we'd appreciate the chance to sort out your concern first.
To make a request, email hello@lumi-frame.com. We may need to confirm it's really you, usually by replying to the email address we have on file, and we'll respond within the time the law allows. We may keep some information where the law requires it, such as tax records of a completed order.
California residents
If you live in California, the California Consumer Privacy Act, where it applies, gives you the right to know what personal information a business collects, uses and discloses; to delete it; to correct it; to opt out of its sale or sharing; to limit the use of sensitive personal information; and not to be treated differently for using these rights. The California Attorney General's CCPA page explains these rights in more detail.
In the past 12 months, we have collected the kinds of information described in the table above: identifiers such as your name, email address, postal address and IP address; order and purchase details; and technical log data about visits to the site. We collected it from you, from Stripe when you pay, and automatically through our host. We use it only for the purposes described in this policy. We don't sell personal information or share it for cross-context behavioral advertising, and we use payment card details only to complete your purchase, through Stripe. You or an authorized agent can make a request by emailing us. Residents of other US states with privacy laws can use their rights the same way.
Children
This site is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has sent us personal information, email us and we will delete it. If you are under the age of majority where you live, please ask a parent or guardian to place an order for you.
How we protect your information
- The site is served only over encrypted HTTPS connections, with a strict security policy that allows scripts only from our own site.
- Card payments happen on Stripe's payment pages, so card numbers never pass through our site or our inbox.
- Only the people who need it to answer you and fulfill orders can access form submissions, email and order records. We protect those accounts with strong passwords and two-factor sign-in where it's available.
No website or email system is completely secure. If a security incident affects your personal information, we will tell you and the relevant authorities as the law requires.
Other websites and apps
This policy covers lumi-frame.com and orders placed with us. It doesn't cover other websites we link to, such as Stripe's payment pages or the sources cited in our illuminated frame guides, or any app you use to control a frame's lighting. Those have their own privacy terms.
Changes to the Lumi Frames privacy policy
We'll update this page when our practices or the law change, and change the "Last updated" date at the top. If a change significantly affects how we use information we already hold about you, we'll tell you by email before it takes effect.
Contact us about privacy
Email hello@lumi-frame.com with "Privacy" in the subject line, or use the contact form. We reply within 1 business day. For how orders, payments and returns work, see our terms of sale and use, shipping policy and returns policy.