Privacy Policy

Last updated: 31 January 2026

Luminexia operates this store and website, including all related information, content, features, tools, products and services, to provide you with a tailored shopping experience (the “Services”). This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use the Services, make purchases through them or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure practices described in it.

When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you. Personal information does not include information collected anonymously or information anonymised so that it cannot identify or be linked to you. Depending on how you use the Services, where you live and what applicable law permits or requires, we may collect or process the following categories of personal information, including inferences drawn from it:

• Contact details, including your name, address, billing address, shipping address, telephone number and email address.
• Financial information, including credit- and debit-card numbers, financial account numbers, payment-card details, financial-account details, transaction details, payment methods, payment confirmations and other payment data.
• Account information, including your username, password, security questions, preferences and settings.
• Transaction information, including items you view, add to a basket or wish list, purchase, return, exchange or cancel, as well as previous transactions.
• Communications with us, including information supplied when you contact us, for example through a customer-service enquiry.
• Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.
• Usage information, including information about your interaction with the Services and how and when you use or navigate them.

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, communicate with us or otherwise provide personal information.
• Automatically through the Services, including from your device while you use our products or services or visit our websites, and through cookies and similar technologies.
• From service providers, including where we work with them to operate technology and they collect or process your personal information on our behalf.
• From our partners or other third parties.

Depending on how you interact with us and which Services you use, we may use your personal information for the following purposes:

• Providing, tailoring and improving the Services. We use personal information to provide the Services and perform our contract with you, including processing payments and orders; remembering your preferences and products that interest you; sending account notifications; processing purchases, returns, exchanges and other transactions; creating, maintaining and managing your account; arranging shipping; enabling returns and exchanges; allowing reviews to be published; and creating a personalised shopping experience, such as recommending products related to previous purchases. This may include using personal information to personalise and improve the Services.
• Marketing and advertising. We may use personal information for marketing and promotional purposes, including sending marketing, advertising and promotional communications by email, text message or post, and showing online advertisements for products or services in our Services or on other websites, including based on items you have purchased, added to a basket or otherwise interacted with in the Services.
• Security and fraud prevention. We use personal information to authenticate accounts, support secure payments and purchases, detect and investigate potentially fraudulent, illegal, unsafe or malicious activity, respond appropriately, protect public safety and secure our Services. If you register an account, you are responsible for keeping its credentials secure. We strongly advise you not to share your username, password or other authentication details.
• Communicating with you. We use personal information to provide customer support, answer questions, provide effective service and maintain our business relationship with you.
• Legal reasons. We use personal information to comply with applicable law or respond to valid legal process, including requests from law-enforcement or government authorities; to conduct investigations or participate in evidence-gathering in civil matters, potential or actual litigation or other contentious proceedings; and to enforce or investigate possible breaches of our terms or policies.

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes consistent with this Privacy Policy. These circumstances may include disclosure:

• To vendors and other third parties that provide services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
• To business and marketing partners that provide marketing services and show advertisements. We may use third parties to provide personalised advertising based on your online activity. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to opt out of sharing information for personalised advertising and marketing based on online activity.
• When you direct or ask us to disclose certain information to third parties, or consent to it, for example to ship products or in connection with social-media widgets or sign-in integrations.
• To our affiliates or within our corporate group.
• In connection with a business transaction such as a merger or insolvency; to comply with obligations under applicable law, including subpoenas, search warrants and similar requests; to enforce applicable terms or policies; and to protect and defend the Services, our rights, your rights or the rights of others.

The Services may contain links to websites and other online platforms operated by third parties. If you follow a link to a website that is not affiliated with or controlled by us, review its privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of those websites, including the accuracy, completeness or reliability of information found there. Information you provide in public or semi-public areas, including information shared on third-party social-media platforms, may also be visible to other users of the Services or those third-party platforms without restriction on its use by us or the third party. Our inclusion of a link does not by itself imply endorsement of the platform’s content, owners or operators, except where explained in the Services.

The Services are not intended for use by children. We do not knowingly collect personal information about children below the age of majority in the jurisdiction where they live. If you are the parent or guardian of a child who has provided personal information to us, you may contact us using the details below to request its deletion. As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell”, as those terms are defined by applicable law, personal information of anyone under 16.

No security measure is perfect or impenetrable, and we cannot guarantee complete security. Information sent to us may also be insecure while in transit. We advise you not to use insecure channels to send us sensitive or confidential information.

How long we retain your personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal requirements, resolve disputes or enforce other applicable contracts and policies.

Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute, may apply only in certain circumstances and, in some cases, we may refuse a request where the law permits us to do so.

• Right of access and information. You may have the right to access the personal information we hold about you.
• Right to erasure. You may have the right to ask us to delete personal information we hold about you.
• Right to rectification. You may have the right to ask us to correct inaccurate personal information we hold about you.
• Right to data portability. In certain circumstances and subject to exceptions, you may have the right to receive a copy of personal information we hold about you and to ask us to transfer it to a third party.
• Managing communication preferences. We may send promotional emails, and you can opt out at any time by using the unsubscribe option in those emails. If you opt out, we may still send non-promotional emails, for example about your account or orders.

If you live in the United Kingdom or European Economic Area, and subject to exceptions and limitations under local law, you may also have the following rights:

• Objection and restriction: you may have the right to ask us to stop or restrict the processing of your personal information for certain purposes.
• Withdrawal of consent: where we rely on your consent to process personal information, you have the right to withdraw it. Withdrawal does not affect the lawfulness of processing based on consent before it was withdrawn.

You may exercise these rights where indicated in the Services or by using the contact details below.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before acting on a request, as permitted by applicable law. Where the law allows, you may authorise an agent to submit a request on your behalf. Before accepting an agent’s request, we will require evidence that you authorised the agent to act for you and may ask you to confirm your identity directly. We will respond within the period required by applicable law.

If you have a complaint about how we process personal information, contact us using the details below. Depending on where you live, you may have the right to appeal our decision by contacting us or to lodge a complaint with your local data-protection authority.

We may transfer, store and process your personal information outside the country in which you live.

If we transfer personal information outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent agreements issued by the relevant UK authority, unless the information is transferred to a country recognised as providing an adequate level of protection.

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will publish the revised Privacy Policy on this website, update the “Last updated” date and notify you of changes where applicable law requires us to do so.

If you have questions about our privacy practices or this Privacy Policy, or wish to exercise any of your rights, contact us by telephone, email at info@luminexia.pl, or post at our correspondence and registered address: Fabryczna 7, 31-553 Kraków, Poland. This is not the salon address or the place where services are provided; appointments take place at Luminexia, Mogilska 51, 31-545 Kraków. Under applicable data-protection law, we are the controller of your personal information.