Privacy policy
Privacy policy: Lumea Blooms
1. Key information (first layer)
Controller | Lumea Blooms |
Purpose | Order management, floral product delivery, and commercial communications. |
Legal basis | Contract performance (purchase) and data subject consent. |
Recipients | Hosting providers, carriers, and payment services. |
Rights | Access, rectification, erasure, and other rights detailed in section 9. |
Contact |
2. Who is the data controller?
Lumea Blooms, with business address at Calle de Ibiza 8, Local 8, 28009 Madrid, Spain, is responsible for processing your personal data. For any privacy query, contact info@lumeablooms.com.
3. Personal data we collect
We collect only what is necessary to provide our services:
Identity data: First and last name.
Contact data: Delivery address, billing address, email, and phone number.
Payment information: Card data is processed encrypted through certified payment gateways (PCI-DSS). We do not store full card details.
Browsing data: IP address, cookies, and technical device data to ensure the shop works correctly and securely.
4. How we obtain your data
Directly from you: When you place an order, register, or contact us via our forms.
Automatically: Through cookies and similar technologies while you browse our website.
5. Purpose of processing
Your data is used exclusively to:
Manage orders: Process purchases, deliveries, and possible returns.
Customer service: Answer questions, complaints, or information requests.
Marketing: Send Lumea Blooms promotions or news where you have given prior consent.
Security: Detect and prevent fraud or misuse of the website.
6. Sharing data with third parties
We do not sell your data. We share only what is strictly necessary with:
Technology providers: Hosting and technical maintenance.
Logistics providers: Carriers for physical delivery.
Payment gateways: Banks and payment processors for secure transactions.
7. International transfers
If any provider (e.g. email marketing or cloud storage) is outside the European Economic Area, we ensure appropriate safeguards such as EU Standard Contractual Clauses.
8. Security and retention
We keep personal data only as long as needed for the purpose collected and to meet legal obligations (tax and accounting). We apply technical and organisational security measures against loss, theft, or unauthorised access.
9. Your rights
You control your data and may exercise:
Access: See what data we hold about you.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion when no longer necessary.
Objection or restriction: Ask us to stop certain uses.
Portability: Receive your data in a common digital format to transfer elsewhere.
To exercise any right, email info@lumeablooms.com. You may also complain to the Spanish Data Protection Agency (AEPD) if you believe your rights have not been respected.
10. Contact
For questions about this policy or your data:
Address: Calle de Ibiza 8, Local 8, Madrid, 28009, Spain.
Email: info@lumeablooms.com
