PRIVACY POLICY
Lumea-clean.com
PREAMBLE
This Privacy Policy (the "Policy") is intended to inform users and customers (the "Customer") of the website Lumea-clean.com (the "Site") about how their personal data is collected, used, retained, and protected by RZZK CONSULTING LTD (the "Seller").
This Policy applies to any person visiting the Site, creating a customer account, placing an order, subscribing to the newsletter, or interacting with the Seller in any way whatsoever.
The Seller undertakes to comply with applicable personal data protection legislation, in particular the UK GDPR, the European General Data Protection Regulation (GDPR), as well as any other relevant regulation depending on the Customer's country of residence.
ARTICLE 1 — DATA CONTROLLER
The controller responsible for processing personal data collected on the Site is:
RZZK CONSULTING LTD, a company incorporated under English law (Private Limited Company), Company Number: 16511012. Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Contact for any questions relating to personal data: therapieposturepro@gmail.com
ARTICLE 2 — PERSONAL DATA COLLECTED
The Seller collects various categories of personal data, depending on the Customer's interactions with the Site:
Identification and contact data:
First name, last name
Email address
Postal address (delivery and billing)
Phone number
Order-related data:
Order history
Products viewed or purchased
Transaction amounts
Payment information (processed exclusively by payment providers; the Seller does not have access to full banking data)
Connection and browsing data:
IP address
Browser and operating system type
Pages visited, time spent on the Site, traffic source
Cookie and tracker identifiers
Customer account data:
Login credentials
Account preferences and settings
Customer review data:
Reviews, ratings, and comments left on products
Newsletter data:
Email address and subscription preferences
ARTICLE 3 — PURPOSES OF PROCESSING
Personal data is collected and processed for the following purposes:
Processing, management, and delivery of orders
Management of the customer account
After-sales service, management of returns, complaints, and disputes
Marketing communications and sending the newsletter (with the Customer's consent)
Requesting customer reviews after delivery
Improving the Site, the user experience, and the products offered
Statistical analysis of visitor traffic and behavior
Personalization and targeting of advertisements displayed on third-party platforms
Fraud prevention and transaction security
Compliance with the Seller's legal, tax, and accounting obligations
ARTICLE 4 — LEGAL BASES FOR PROCESSING
In accordance with applicable regulations, data processing is based on the following legal bases:
Performance of the contract: for processing orders, delivery, after-sales service, and management of the customer account
Customer consent: for the newsletter, non-essential cookies, the Meta advertising pixel, Google tools, and requests for customer reviews
Seller's legitimate interest: for fraud prevention, Site security, service improvement, and statistical analysis
Legal obligation: for retaining invoices and complying with accounting and tax obligations
ARTICLE 5 — DATA RECIPIENTS
The Customer's personal data may be shared with the following recipients, to the extent necessary for the performance of their duties:
Shopify Inc. (Site host and e-commerce platform, Canada)
Payment providers (PayPal, Shopify Payments, Apple Pay, etc.) for secure processing of transactions
Carriers and postal services for delivery of orders
Loox for the collection and display of customer reviews
Meta Platforms Inc. (Facebook, Instagram) via the advertising pixel installed on the Site, for advertising targeting and measurement purposes
Google LLC via Google Analytics and/or Google Ads services, for audience measurement and advertising purposes
Administrative or judicial authorities where required by law
The Seller does not sell or rent the Customer's personal data to third parties for commercial purposes.
ARTICLE 6 — TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA AND THE UNITED KINGDOM
Given the international nature of the providers used (notably Shopify, Meta, Google, Loox), certain personal data may be transferred to countries located outside the European Economic Area and the United Kingdom, in particular to the United States and Canada.
The Seller ensures that these transfers are governed by the appropriate safeguards provided for under applicable regulations (standard contractual clauses, adequacy decisions, certifications such as the Data Privacy Framework, etc.).
ARTICLE 7 — RETENTION PERIOD
The Customer's personal data is retained for the following periods:
Order-related data: for the entire duration of the business relationship, then archived for the legal retention period required by accounting and tax obligations (generally 6 to 10 years depending on the jurisdiction)
Customer account data: for as long as the account is active, then deleted or anonymized in the event of prolonged inactivity or upon the Customer's request
Newsletter data: until the Customer unsubscribes
Cookies and trackers: for a maximum period of 13 months from the date they are set
Marketing prospecting data: 3 years from the Customer's last active contact
Customer reviews: for the entire period during which the relevant product is commercially marketed
ARTICLE 8 — COOKIES AND TRACKERS
The Site uses cookies and similar technologies to ensure it functions properly, analyze traffic, and offer personalized advertising.
The cookies used include:
Cookies strictly necessary for the Site to function (cart, session, security): set without prior consent
Audience measurement cookies (Google Analytics): help understand how the Site is used
Advertising cookies (Meta Pixel, Google Ads): used to measure the effectiveness of advertising campaigns and offer targeted content
Personalization cookies: remember the Customer's preferences (language, currency, etc.)
On their first visit, the Customer is informed via a cookie banner and may accept, refuse, or customize their choices. Consent may be changed at any time via the preference management module available on the Site.
ARTICLE 9 — CUSTOMER RIGHTS
In accordance with applicable regulations (UK GDPR, GDPR, and other local laws), the Customer has the following rights regarding their personal data:
Right of access: obtain confirmation that data concerning them is being processed and obtain a copy of it
Right to rectification: have inaccurate or incomplete data corrected
Right to erasure ("right to be forgotten"): request deletion of their data in the cases provided for by law
Right to restriction of processing: request the suspension of certain processing activities
Right to object: object to the processing of their data, in particular for marketing purposes
Right to data portability: receive their data in a structured, readable format, or have it transmitted to another controller
Right to withdraw consent at any time, where processing is based on consent
Right to define directives regarding the fate of their data after their death
To exercise these rights, the Customer may send a request by email to: therapieposturepro@gmail.com, specifying their identity and the purpose of their request. A response will be provided within one month of receipt of the request.
The Customer also has the right to lodge a complaint with the competent supervisory authority (in particular the Information Commissioner's Office in the United Kingdom — ico.org.uk — or any other data protection authority in the Customer's country of residence).
ARTICLE 10 — DATA SECURITY
The Seller implements appropriate technical and organizational measures to protect the Customer's personal data against unauthorized access, loss, alteration, or disclosure. The Site is hosted on the Shopify platform, which benefits from recognized security standards (SSL encryption, PCI-DSS compliance for payments, etc.).
However, no data transmission over the Internet can be guaranteed to be completely secure. The Customer acknowledges that providing their data via the Site is done at their own risk.
ARTICLE 11 — MINORS
The Site is not intended for persons under the age of 16. The Seller does not knowingly collect personal data concerning minors. If a parent or legal guardian becomes aware that a minor has provided personal data without authorization, they are invited to contact the Seller at therapieposturepro@gmail.com so that the data can be deleted.
ARTICLE 12 — CHANGES TO THE POLICY
The Seller reserves the right to modify this Policy at any time, in particular to adapt to legislative, regulatory, or technical developments. The applicable version is the one in effect on the date the Site is consulted. The Customer is invited to regularly review this Policy.
ARTICLE 13 — CONTACT
For any question relating to this Policy or to the processing of their personal data, the Customer may contact the Seller at the following address: therapieposturepro@gmail.com