This policy explains what we collect when you buy from getlumijade.online, why, and what you can do about it. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
What we collect
- Order details: your name, email, phone number and shipping address
- Payment details: handled entirely by Stripe — see below
- Correspondence: anything you send us by email
We never see your card number. Payments are processed by Stripe on their own hosted checkout. Your card details go straight to Stripe and are never stored on our systems or visible to us.
Why we collect it
To take your payment, pack and post your order, send you a confirmation and tracking, respond to questions, handle returns, and keep the sales records we're legally required to keep.
Who we share it with
Only the services needed to get your parcel to you:
- Stripe — payment processing
- Australia Post — delivery and tracking
- Resend — sending your order and tracking emails
- Supabase and Netlify — hosting the store and its order records
We don't sell your personal information, and we don't share it with anyone for their own marketing.
Marketing
We only email you about your order unless you've separately opted in to hear from us. If you do opt in, every email carries an unsubscribe link that works immediately.
How long we keep it
Order records are kept for seven years, which is the retention period required for Australian tax and business records. Email correspondence is kept for two years.
Security
Order data is stored in an access-controlled database and the site is served over HTTPS. No system is perfectly secure, but we limit who and what can reach your data. If a data breach ever occurred that was likely to cause you serious harm, we would notify you and the OAIC as required.
Cookies
The store keeps your cart selection in your own browser's local storage so it survives a page refresh. That data stays on your device and is never sent to us. Stripe sets its own cookies on the checkout page for fraud prevention.
Accessing or deleting your information
Email getlumijade@luxelensmedia.co to ask what we hold about you, correct it, or have it deleted. We'll respond within 30 days. Note that we may need to retain order records to meet our tax obligations even after a deletion request.
Complaints
If you're unhappy with how we've handled your information, email us first and we'll try to sort it out. If you're still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.