Privacy policy

Last Updated: July 2, 2026

This Privacy Policy describes how Lume Hearth Inc collects, uses, discloses, and protects personal information when you visit our website, place an order, create an account, contact us, or otherwise use our online store.

Throughout this Privacy Policy, “Lume Hearth,” “we,” “us,” and “our” refer to Lume Hearth Inc.

Our website is operated by Lume Hearth Inc and powered by Shopify, which helps us provide our online store, checkout, payment processing, order management, and related services.

Please read this Privacy Policy carefully. By using our website or purchasing from us, you understand how we collect, use, and disclose your personal information as described below.

Personal Information We Collect

When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be linked to you.

Depending on how you interact with our website, we may collect the following types of personal information:

• Contact information, such as your name, email address, billing address, shipping address, and phone number if provided
• Order and transaction information, such as products purchased, order history, payment status, returns, exchanges, cancellations, and customer service records
• Payment-related information, such as payment method, billing details, transaction details, and payment confirmation information
• Account information, such as username, password, saved preferences, and account settings if you create an account
• Customer support information, including messages, emails, photos or videos of damaged, defective, incorrect, or missing items, order issues, return requests, warranty claims, and other information you provide when contacting us.
• Device and usage information, such as IP address, browser type, device type, operating system, referral source, pages viewed, and website interaction data
• Marketing and advertising information, such as your communication preferences, browsing activity, cart activity, and interaction with advertisements or promotional emails

We do not intentionally collect sensitive personal information unless it is required to complete a transaction, provide customer support, comply with legal obligations, or protect against fraud.

How We Collect Personal Information

We may collect personal information from the following sources:

• Directly from you, when you place an order, create an account, contact us, submit a form, request a return, or communicate with customer support
• Automatically through our website, using cookies, pixels, analytics tools, log files, and similar technologies
• From service providers, including Shopify, payment processors, shipping carriers, fraud prevention providers, analytics providers, email service providers, and customer support tools
• From advertising and marketing partners, when permitted by applicable law and platform settings
• From other third parties, where necessary to provide our services, process orders, protect our business, or comply with legal requirements

How We Use Personal Information

We use personal information for the following purposes:

To Provide Our Products and Services

We use your personal information to:

• Process and fulfill orders
• Confirm payments
• Arrange shipping and delivery
• Provide order updates and tracking information
• Process returns, exchanges, refunds, and warranty requests
• Create and manage customer accounts
• Respond to customer service inquiries
• Maintain accurate order records
• Provide a more convenient shopping experience

To Improve Our Website and Customer Experience

We may use personal information to:

• Improve website performance and functionality
• Understand customer preferences
• Analyze shopping behavior and product interest
• Personalize product recommendations
• Troubleshoot website errors
• Improve our products, services, policies, and customer support

For Marketing and Advertising

Where permitted by law, we may use personal information to:

• Send promotional emails
• Show relevant advertisements
• Remind customers about items left in their cart
• Measure advertising performance
• Personalize marketing content based on website activity or purchase history

You may unsubscribe from promotional emails at any time by clicking the unsubscribe link in the email. Even if you opt out of marketing emails, we may still send non-promotional messages related to your orders, account, customer service requests, or legal notices.

For Security and Fraud Prevention

We may use personal information to:

• Verify customer identity
• Detect and prevent fraud
• Protect payment transactions
• Monitor suspicious or unauthorized activity
• Secure our website and business operations
• Enforce our Terms of Service and other policies

For Legal and Compliance Purposes

We may use personal information to:

• Comply with applicable laws and regulations
• Respond to legal requests or valid legal process
• Maintain required business records
• Resolve disputes
• Protect our rights, property, customers, and business

How We Disclose Personal Information

We may disclose personal information to third parties when necessary to operate our business, provide services, comply with legal obligations, or protect our rights.

We may disclose personal information to:

• Shopify, which hosts and powers our online store
• Payment processors, to securely process transactions
• Shipping and fulfillment providers, to deliver orders and process returns
• Customer support providers, to help respond to inquiries
• Analytics providers, to understand website performance and customer behavior
• Marketing and advertising partners, to provide relevant advertising and measure campaign performance
• Fraud prevention and security providers, to protect customers and our business
• Professional advisors, such as legal, accounting, tax, or compliance service providers
• Government authorities or legal parties, where required by law or valid legal process
• Business transfer parties, if we are involved in a merger, acquisition, restructuring, sale of assets, bankruptcy, or similar business transaction

We do not sell personal information for money. However, certain privacy laws may define some advertising, analytics, or marketing activities as a “sale,” “sharing,” or “targeted advertising.” Depending on where you live, you may have the right to opt out of these activities.

Relationship with Shopify

Our website is powered by Shopify. Shopify provides the platform that allows us to operate our online store, process orders, manage checkout, support payments, and provide related services.

Information you provide through our website may be transmitted to and processed by Shopify and its service providers. Shopify may also collect and process information about your interaction with our store to provide and improve its services.

For more information about how Shopify processes personal information, please review Shopify’s privacy notices.

Cookies and Similar Technologies

We use cookies, pixels, tags, log files, and similar technologies to operate our website and improve the shopping experience.

These technologies may help us:

• Keep items in your cart
• Remember your preferences
• Enable checkout and account features
• Analyze website traffic and performance
• Detect and prevent fraud
• Personalize content and advertising
• Measure marketing effectiveness

You can control cookies through your browser settings. Please note that disabling certain cookies may affect website functionality, checkout, or your shopping experience.

Depending on where you live, you may also have rights to opt out of certain targeted advertising or data sharing activities.

Targeted Advertising and Privacy Choices

We may work with advertising and marketing partners to show ads that may be relevant to you based on your website activity, shopping behavior, or interactions with our store.

Depending on your location, you may have the right to opt out of:

• Sale of personal information
• Sharing of personal information
• Targeted advertising
• Certain types of profiling or personalized marketing

Where required by applicable law, we will honor valid privacy preference signals, such as Global Privacy Control, when technically feasible and legally required.

You may also contact us at support@lumehearth.com to submit a privacy request.

Third-Party Websites and Links

Our website may contain links to third-party websites, platforms, payment services, social media pages, or other online services.

We are not responsible for the privacy practices, security, content, or policies of third-party websites that we do not control. We encourage you to review the privacy policies and terms of any third-party website before providing personal information.

Data Security

We take reasonable administrative, technical, and physical measures to help protect personal information.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we work to use reasonable safeguards to protect personal information from unauthorized access, loss, misuse, disclosure, alteration, or destruction.

Please do not send sensitive payment information, passwords, or confidential personal information through unsecured communication channels.

Data Retention

We retain personal information for as long as reasonably necessary to provide our services, complete transactions, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and support legitimate business purposes.

The length of retention may depend on the type of information, the reason it was collected, legal requirements, tax or accounting obligations, and whether the information is needed for customer service, warranty, returns, or dispute resolution.

When personal information is no longer needed, we may delete, de-identify, or securely retain it as permitted by law.

Photos or videos of damaged, defective, incorrect, or missing products submitted by customers for customer support are used solely for order verification, return review, warranty review, refund processing, replacement processing, or dispute resolution. These files will not be used for marketing purposes without the customer’s separate consent and will be securely deleted or de-identified once the related claim, refund, replacement, or dispute has been resolved, unless longer retention is required by law, fraud prevention, payment dispute handling, tax, accounting, or other legitimate business recordkeeping requirements.

Children’s Privacy

Our website is not intended for children. We do not knowingly collect personal information from children under the age of majority in their jurisdiction.

If you believe a child has provided personal information to us, please contact us at support@lumehearth.com so we can review and take appropriate action.

We do not knowingly sell or share personal information of individuals under 16 years of age.

Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information. These rights may include:

• The right to access personal information we hold about you
• The right to request correction of inaccurate personal information
• The right to request deletion of personal information
• The right to request a copy of your personal information
• The right to opt out of sale, sharing, or targeted advertising where applicable
• The right to limit certain uses of sensitive personal information where applicable
• The right to appeal a decision regarding your privacy request where required by law
• The right not to be discriminated against for exercising privacy rights

These rights are not absolute and may apply only in certain circumstances. We may need to verify your identity before processing your request.

To exercise your privacy rights, please contact us at:

support@lumehearth.com

Please include enough information for us to identify your account or order, such as your name, email address, or order number if applicable.

Notice to California Residents

Notice to California Residents (CCPA/CPRA)

This section applies to California residents and supplements the information provided in this Privacy Policy. For purposes of this section, “personal information,” “sale,” “sharing,” and “sensitive personal information” have the meanings given under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Categories of Personal Information Collected

In the past 12 months, we may have collected the following categories of personal information:

• Identifiers, such as name, email address, billing address, shipping address, phone number, IP address, account username, and similar identifiers
• Customer records information, such as order details, billing information, shipping information, payment confirmation information, return records, refund records, warranty records, and customer service records
• Commercial information, such as products purchased, viewed, returned, exchanged, or added to cart, order history, transaction history, and product preferences
• Internet or other electronic network activity information, such as browsing activity, pages viewed, device information, browser type, referral source, cart activity, interaction with advertisements, and website usage data
• Geolocation information, such as approximate location inferred from your IP address or shipping destination
• Audio, electronic, visual, or similar information, such as photos or videos you submit to customer support for order verification, damage review, return review, warranty review, refund processing, or dispute resolution
• Inferences, such as preferences or shopping interests based on your website activity, order history, or interaction with our store
• Sensitive personal information, only where necessary for payment processing, fraud prevention, account security, legal compliance, or customer support

Sources of Personal Information

We may collect personal information directly from you, automatically through our website, from Shopify and other service providers, from payment processors, from shipping and fulfillment providers, from analytics providers, from marketing and advertising partners, and from fraud prevention or security providers.

Business or Commercial Purposes for Collection

We collect and use personal information to process orders, confirm payments, arrange shipping, provide customer support, process returns and refunds, review warranty claims, prevent fraud, improve our website, personalize customer experience, conduct marketing where permitted by law, comply with legal obligations, and protect our business.

Categories of Personal Information Disclosed

In the past 12 months, we may have disclosed the categories of personal information listed above to service providers, contractors, payment processors, Shopify, shipping and fulfillment providers, customer support providers, analytics providers, marketing and advertising partners, fraud prevention providers, professional advisors, government authorities, legal parties, or business transfer parties where necessary for the purposes described in this Privacy Policy.

Sale or Sharing of Personal Information

We do not sell personal information for money. However, some analytics, advertising, retargeting, or marketing activities may be considered a “sale” or “sharing” of personal information under California law.

California residents have the right to opt out of the sale or sharing of personal information.

To exercise this right, please visit:

Do Not Sell or Share My Personal Information

You may also contact us at support@lumehearth.com.

Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes that would require a right to limit use or disclosure under California law, unless otherwise required by applicable law.

Your California Privacy Rights

California residents may have the right to:

• Know what personal information we collect, use, disclose, sell, or share
• Request access to personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of personal information, subject to legal exceptions
• Request a copy of your personal information
• Opt out of the sale or sharing of personal information
• Limit certain uses or disclosures of sensitive personal information, where applicable
• Not be discriminated against for exercising privacy rights

To submit a California privacy request, please contact us at support@lumehearth.com. We may need to verify your identity before processing your request. You may also use an authorized agent where permitted by law.

Do-not-sell-or-share-my-personal-information

Notice to Virginia Residents (VCDPA)

Virginia residents may have certain rights under the Virginia Consumer Data Protection Act, including the right to access, correct, delete, obtain a copy of personal data, and opt out of targeted advertising, sale of personal data, or certain profiling activities.

To exercise these rights, please contact us at support@lumehearth.com.

If we deny your privacy request, you may appeal our decision by contacting us again at support@lumehearth.com with the subject line “Privacy Appeal.” We will review your appeal and respond as required by applicable law.

Authorized Agents

Where permitted by applicable law, you may designate an authorized agent to submit a privacy request on your behalf.

Before accepting a request from an authorized agent, we may require proof that the agent has permission to act for you. We may also ask you to verify your identity directly with us.

Managing Communication Preferences

You may opt out of promotional emails at any time by using the unsubscribe link included in our marketing emails.

If you opt out of marketing communications, we may still send you important non-promotional messages, including order confirmations, shipping updates, customer service messages, account notices, policy updates, or legally required communications.

International Transfers

We are based in the United States, and your personal information may be processed or stored in the United States or other countries where our service providers operate.

If personal information is transferred across borders, we will use appropriate safeguards where required by applicable law.