1.1 Order Processing
When you place an order, we collect the following data to fulfil the contract (Art. 6(1)(b) GDPR):
Name and delivery address
E-mail address
Payment information (processed securely by our payment provider)
Order details and purchase history
1.2 Contact & Customer Service
When you contact us via e-mail or contact form, we store your name, e-mail address and message to respond to your enquiry. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).
2.3 Newsletter & Marketing E-Mails
If you subscribe to our newsletter, we store your e-mail address and — if provided — your name to send you marketing communications. Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time by clicking the unsubscribe link in any e-mail or by contacting us at info@lumevetta.com.
2.4 Website Analytics
We use analytics tools to understand how visitors use our website. Where applicable, data is processed on the basis of your consent (Art. 6(1)(a) GDPR) via our cookie consent banner, or on the basis of our legitimate interest (Art. 6(1)(f) GDPR) using anonymised/aggregated data only.
3.1 Stripe
For card payments we use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland). Payment data is transmitted to Stripe for transaction processing. Stripe is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(b) GDPR. Privacy policy: https://stripe.com/privacy
Framer (Frontend Delivery & Design)
We use Framer to design and deliver the frontend interface of our website. Because Framer hosts and serves these visual elements live, your browser establishes a direct connection to Framer's servers when you visit our site. In this process, your IP address and device information are transmitted to Framer to ensure the website is displayed correctly and securely.
Provider: Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical delivery and appealing presentation of our website).
Privacy policy: https://www.framer.com/legal/privacy-policy
Squarespace (Website Hosting)
We use Squarespace to host our website and serve its content. When you visit our website, Squarespace automatically collects and stores information in server log files (such as your IP address, browser type, operating system, and time of request) to ensure the secure and reliable operation of the site.
Provider: Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a secure and reliably accessible website).
Shopify (E-Commerce Platform)
We use Shopify to host and operate our online store. When you visit our store or place an order, your data (e.g., IP address, contact details, order information) is processed on Shopify's servers.
Provider: Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, Ireland.
Legal basis: Art. 6(1)(b) GDPR (contract fulfilment) and Art. 6(1)(f) GDPR (legitimate interest in providing a secure and functional online shop).
Privacy policy: https://www.shopify.com/legal/privacy
Brevo (E-Mail Marketing & Communication)
We use Brevo to send out our newsletters and transactional e-mails. If you subscribe to our newsletter or receive order confirmations, your e-mail address and name will be processed by Brevo.
Provider: Sendinblue SAS, 106 boulevard Richard Lenoir, 75011 Paris, France.
Legal basis: Art. 6(1)(a) GDPR (consent for marketing) and Art. 6(1)(b) GDPR (contract fulfilment for transactional e-mails).
Privacy policy: https://www.brevo.com/legal/privacypolicy/
Google Workspace (Cloud Infrastructure & Administration)
For our internal administration, e-mail hosting (e.g., info@lumevetta.com), and document management, we use Google Workspace. Customer inquiries and administrative data are processed via Google's servers. Google is certified under the EU-US Data Privacy Framework.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient and secure business administration).
Privacy policy: https://policies.google.com/privacy
n8n (Workflow Automation)
To connect our different software tools and automate internal processes (e.g., syncing order data between platforms), we use the automation tool n8n. Order and customer data may be temporarily processed through these automated workflows.
Provider: n8n GmbH, Karl-Liebknecht-Str. 34, 10178 Berlin, Germany.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in optimising and automating our business processes).
Privacy policy: https://n8n.io/privacy-policy/
Judge.me (Customer Reviews)
We use Judge.me to collect, manage, and display customer reviews on our website. When you submit a review, or when a review request e-mail is sent to you following a purchase, personal data such as your name, e-mail address, and specific order details are processed by Judge.me. Additionally, when the review widget loads on our storefront, your IP address is transmitted to Judge.me's servers.
Provider: Judge.me Ltd, 14, 11th Floor, 201 Bishopsgate, London EC2M 3AB, United Kingdom (Data transfers to the UK are covered by an adequacy decision of the European Commission).
Legal basis: Art. 6(1)(a) GDPR (consent for receiving review requests) and Art. 6(1)(f) GDPR (legitimate interest in displaying customer feedback and improving our services).
Privacy policy: https://judge.me/privacy
Meta Pixel & Conversions API (Facebook & Instagram Advertising)
We use the Meta Pixel and Meta Conversions API to measure the performance of our advertising on Facebook and Instagram and to optimise audience targeting. With our current "Maximum" data-sharing setting, customer activity data is shared via the Meta Pixel, Advanced Matching, and the Conversions API. This includes browsing behaviour (e.g. page views, add-to-cart and purchase events) as well as, where available, hashed contact details such as name, email address, and phone number, used to match visitors with their Meta account. Unlike the browser-based Pixel alone, the Conversions API transmits event data directly from our servers to Meta's servers, so it is not affected by browser-based ad blockers.
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Data may also be transferred to Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA, which is certified under the EU-US Data Privacy Framework (DPF).
Legal basis: Art. 6(1)(a) GDPR (consent, obtained via our cookie consent tool before the Pixel/Conversions API is activated).
Privacy policy: https://www.facebook.com/policy.php
You can object to your data being linked to your Facebook/Instagram account via your "Off-Facebook Activity" settings: https://www.facebook.com/off_facebook_activity