Privacy Policy

Last updated: 4 July 2026

This policy explains how LUMLA GLASSES ("we", "us") collects and processes your personal data when you use this website, in accordance with the EU General Data Protection Regulation (GDPR).

Data we collect

• Order data — name, email, shipping address and the items you purchase.
• Payment data — handled entirely by Stripe; we never see or store your card details.
• Contact data — messages you send us via the contact form or email.
• Newsletter data — your email address, if you subscribe.

Why we process it

• To fulfil and deliver your order (contract performance, Art. 6(1)(b) GDPR).
• To respond to your enquiries (legitimate interest, Art. 6(1)(f)).
• To send marketing emails only with your consent (Art. 6(1)(a)) — you can unsubscribe at any time.

Sharing

We share data only with the service providers needed to run the store: Stripe (payments), our shipping carriers (delivery) and our email provider (order notifications). We never sell your data.

Retention

Order records are kept as long as required by tax and accounting law. Contact messages are deleted once your enquiry is resolved. Newsletter data is kept until you unsubscribe.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or port your personal data, and to object to processing. To exercise any of these rights, email lumlaglassesmt@gmail.com. You also have the right to lodge a complaint with your local supervisory authority.

Contact

Data controller: LUMLA GLASSES, Plaza, Sliema, Malta — lumlaglassesmt@gmail.com.