Mon–Fri: 9:00–20:30 | Sat: 9:00–15:00660 374 991
← Back to shop

Privacy policy

Privacy policy: Lumea Blooms

1. Key information (first layer)

Controller

Lumea Blooms

Purpose

Order management, floral product delivery, and commercial communications.

Legal basis

Contract performance (purchase) and data subject consent.

Recipients

Hosting providers, carriers, and payment services.

Rights

Access, rectification, erasure, and other rights detailed in section 9.

Contact

info@lumeablooms.com


2. Who is the data controller?

Lumea Blooms, with business address at Calle de Ibiza 8, Local 8, 28009 Madrid, Spain, is responsible for processing your personal data. For any privacy query, contact info@lumeablooms.com.

3. Personal data we collect

We collect only what is necessary to provide our services:

  • Identity data: First and last name.

  • Contact data: Delivery address, billing address, email, and phone number.

  • Payment information: Card data is processed encrypted through certified payment gateways (PCI-DSS). We do not store full card details.

  • Browsing data: IP address, cookies, and technical device data to ensure the shop works correctly and securely.

4. How we obtain your data

  • Directly from you: When you place an order, register, or contact us via our forms.

  • Automatically: Through cookies and similar technologies while you browse our website.

5. Purpose of processing

Your data is used exclusively to:

  1. Manage orders: Process purchases, deliveries, and possible returns.

  2. Customer service: Answer questions, complaints, or information requests.

  3. Marketing: Send Lumea Blooms promotions or news where you have given prior consent.

  4. Security: Detect and prevent fraud or misuse of the website.

6. Sharing data with third parties

We do not sell your data. We share only what is strictly necessary with:

  • Technology providers: Hosting and technical maintenance.

  • Logistics providers: Carriers for physical delivery.

  • Payment gateways: Banks and payment processors for secure transactions.

7. International transfers

If any provider (e.g. email marketing or cloud storage) is outside the European Economic Area, we ensure appropriate safeguards such as EU Standard Contractual Clauses.

8. Security and retention

We keep personal data only as long as needed for the purpose collected and to meet legal obligations (tax and accounting). We apply technical and organisational security measures against loss, theft, or unauthorised access.

9. Your rights

You control your data and may exercise:

  • Access: See what data we hold about you.

  • Rectification: Correct inaccurate or incomplete data.

  • Erasure: Request deletion when no longer necessary.

  • Objection or restriction: Ask us to stop certain uses.

  • Portability: Receive your data in a common digital format to transfer elsewhere.

To exercise any right, email info@lumeablooms.com. You may also complain to the Spanish Data Protection Agency (AEPD) if you believe your rights have not been respected.

10. Contact

For questions about this policy or your data: