Privacy Policy

This Privacy Policy explains how LumGem handles personal information when you browse, shop, create an account, subscribe to email or text messages or contact Customer Care.

Last updated: September 3, 2026. LumGem uses information to operate the store, fulfill orders, protect customers and improve relevant services. We do not ask you to send passwords or complete payment-card numbers by email.

Information we collect

• Contact, billing, shipping and account information you provide.
• Orders, payments, returns, rewards, wishlists and Customer Care communications.
• Marketing choices, email and SMS subscription status, phone number when provided, and the source and time of a signup.
• Device, browser, IP address, cookie identifiers and interactions with pages, products, carts and checkout.
• Reviews, questions, photographs or other content you choose to submit.

Complete payment-card credentials are handled by the payment services presented at checkout and are not stored in LumGem theme or public website code.

How we use information

We use information to provide and secure the website; maintain carts, accounts and preferences; process and fulfill orders; provide product, delivery, return, warranty and fraud support; meet legal obligations; analyze performance; and, where applicable, measure or personalize marketing. Transactional messages about an order do not depend on marketing subscription status.

Cookies, analytics and advertising

Required technologies support the cart, checkout, account, security and saved privacy choices. Optional analytics and advertising technologies may measure visits, product interest and conversions. The current categories, examples and controls are described in our Cookie Policy.

Services and recipients covered by this policy

Depending on which features are active or used for a transaction, LumGem may work with:

• Cloudflare for network delivery, security and country-level request information.
• LumGem storefront systems for account, cart, checkout and order operations.
• Payment providers, including PayPal and any card or digital-wallet provider actually presented at checkout, for authorization, fraud checks and payment processing.
• Google Tag Manager and Google Analytics 4 for tag delivery and analytics.
• Google Ads and Enhanced Conversions for advertising measurement, attribution and audience functions when enabled.
• Meta Pixel and Meta Conversions API for advertising measurement and audience functions when enabled.
• TikTok Pixel and TikTok Events API for advertising measurement and audience functions when enabled.
• Klaviyo for profiles, consent status, forms, email automation and SMS messaging when enabled.
• Hosting, email delivery, shipping, fraud-prevention, Customer Care and professional service providers needed to operate the store.

Browser and server events may share an event identifier for deduplication. Where a configured advertising feature permits and the applicable choice allows it, contact fields may be normalized and cryptographically hashed before transmission for matching. Hashing does not make personal information anonymous, and a server connection is not used to override a saved opt-out or Global Privacy Control signal.

Email and text message marketing

When you subscribe to LumGem text messages, we use the phone number and SMS consent record to administer the program, send the promotional messages and cart reminders you requested, honor messaging preferences, provide support and comply with applicable requirements. Message frequency varies, message and data rates may apply, and you may reply STOP to cancel or HELP for help.

LumGem uses cookies and ecommerce or messaging integrations to keep track of items placed in a shopping cart, including when a cart has been abandoned. This information may be used to determine when to send a cart reminder by text message to a person who has provided the required SMS consent.

Text messaging originator opt-in data and consent are excluded from disclosures to non-affiliated third parties for their own marketing and are not sold. LumGem may provide this information only to service providers and messaging partners that help operate the text message program, deliver messages, maintain consent records, prevent abuse or comply with law.

How information is disclosed

We may provide the information needed for a service to hosting, ecommerce, payment, fraud-prevention, shipping, communications, analytics, advertising and professional service providers. We may also disclose information when required by law, to protect customers or the site, or in connection with a business transaction subject to appropriate safeguards. Each provider controls its own systems and may process information under its own privacy terms.

Retention and security

We retain information for the period reasonably needed for the purpose collected, including fulfillment, accounting, legal compliance, disputes, fraud prevention and enforcement. Marketing preferences are retained so that an opt-out can continue to be honored. We use reasonable administrative and technical safeguards, but no online service can promise absolute security.

Your choices and rights

You may unsubscribe through the link in a marketing email, reply STOP to a LumGem marketing text, or change optional cookie choices through the Cookie Policy page. Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction or information about certain disclosures; to appeal a decision; or to opt out of certain targeted advertising, sharing or profiling. Requests may require identity verification and can be subject to legal exceptions.

Global Privacy Control

When the browser exposes a Global Privacy Control signal to LumGem, the site treats optional analytics and advertising as off for that browser. Required store and security functions remain available.

Children and international processing

The site is not directed to children under 13, and LumGem does not knowingly use the site to collect personal information from children under 13. Providers may process information in countries other than the country where you live, subject to their applicable safeguards and legal requirements.

Changes and contact

We may update this policy when our services, providers or legal requirements change. Privacy questions and rights requests can be sent to [email protected]. Include enough information to identify the request, but do not send passwords or complete payment-card numbers.