Privacy Policy

This Policy covers https://lumawell-official.com, its sub-domains and any mobile or web applications (collectively, the "Website") and explains how your personal data is handled when you visit the Website, use our services, make purchases, and contact us. This Policy is integral part of our Terms and Conditions of Sale.

1. WHO WE ARE

The data controller is PARMTRADE - FZCO, registered in the UAE under registration number 17638, IFZA Business Park, DDP, 17638-001, A1 – 3641379065, Dubai, United Arab Emirates ("Lumawell", "we", "us").

2. WHAT WE COLLECT AND WHY

We collect personal data strictly necessary to fulfill orders, operate our business, and manage customer relationships:

*If required data is not provided, we will be unable to fulfill your order or handle your inquiry.

3. ARTIFICIAL INTELLIGENCE (AI) AND AUTOMATED PROCESSING

We may utilize Artificial Intelligence (AI), machine learning, and automated processing systems across our business operations:

• Operational & analytical use: we may employ AI tools for data analytics, marketing personalization, fraud detection, security monitoring, operational improvements, and automated customer support interactions.
• Health & quiz data processing: where you participate in a product quiz or provide health-related information, our AI and automated algorithms process this data to generate personalized insights, custom recommendations, and tailored product suggestions.

4. MARKETING COMMUNICATIONS

We like to keep you posted on what we're up to - we may send you newsletters, updates about our products and services, special offers, and promotions by email or phone. If you have bought from us before, we may also inform you about similar products we think may interest you. We may also tell you about products and services offered by other companies in our group, and we may share your contact details with our group companies so that they can send you their own offers that may interest you.

If you provide your phone number in connection with an order or inquiry, we may call you about your order - for example, to confirm details, check on delivery, or resolve a payment issue. During such a call, we may also tell you about similar products or offers, as permitted by applicable telemarketing rules (including, in the US, the established business relationship rules under the Telemarketing Sales Rule).

If you agree, we send marketing text messages (SMS). Message frequency varies, and message and data rates may apply.

Calls with us may be recorded for quality, training, and record-keeping purposes; where the law requires, you will be informed at the start of the call. Call records are retained in line with Section 5.

You may opt out of marketing communications at any time - use the unsubscribe link included in every marketing email, reply "STOP" to any marketing text, tell us during a call, or email support@lumawell-official.com. Email, phone, and SMS preferences are managed separately, so if you receive more than one type of marketing, please opt out of each channel. Once you opt out, we stop the relevant marketing; as our systems are closely connected, it may take a few days for the change to reach all of them, and you may still receive a message that was already on its way. Opting out never affects service communications about your orders.

5. HOW LONG WE KEEP YOUR DATA

We retain personal data only for as long as necessary to fulfill the specific purposes for which it was collected, perform our contractual duties, resolve legal disputes, and comply with statutory retention obligations (e.g., legal, tax, and accounting rules). When personal data is no longer required under these criteria, it is deleted or irreversibly anonymized.

6. WHO RECEIVES YOUR DATA

Your data is shared strictly on a need-to-know basis with trusted partners:

• Group and affiliate companies. This helps us ensure that you have the most convenient experience and easy integration of our products and services.
• Payment processors and financial institutions.
• Shipping and logistics providers.
• IT, analytics, advertising, marketing and AI technology service providers.
• Professional advisers, auditors, courts, or regulatory authorities.

If you choose a direct payment gateway to complete your purchase, then our payment processor stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

If you choose to pay using Klarna or Paypal express checkout, you will provide certain personal data (such as your contact and payment details) directly to Klarna or Paypal through Klarna's or Paypal's own checkout interface. We do not collect or have access to your full payment credentials. Klarna or Paypal act as an independent data controller for the personal data you provide to them, which they use to offer a pre-filled checkout experience and to process your payment. For more information on how Klarna and Paypal process your personal data, please review //www.klarna.com/international/privacy-policy/:Klarna's Privacy Policy and //www.paypal.com/us/legalhub/paypal/privacy-full:Paypal's Privacy Statement.

Wherever you are located, your personal data may be processed in countries other than your own, including by recipients outside the EU/EEA and the UK. Where we transfer personal data to such countries that do not provide a standard of data protection equivalent to that of the EEA or the UK, we will make sure your personal data remains properly protected - for example, by putting in place a contract that imposes strict data protection obligations on the recipient before your personal data is transferred. If you would like more information, please contact us using the contact details in Section 13.

7. EU/EEA/UK PRIVACY RIGHTS

If you are located in the EU/EEA/UK, you have the following legal rights regarding your personal data:

• Right to access & portability: request confirmation, access, or a portable copy of your personal data.
• Right to rectification: request correction of inaccurate or incomplete personal data.
• Right to erasure & restriction: request deletion or restriction of processing under applicable legal grounds.
• Right to object: object to processing based on legitimate interests or direct marketing.
• Rights around automated decisions: request human review of decisions made solely by automated means.
• Right to withdraw consent: withdraw your consent at any time without affecting prior lawful processing.
• Right to lodge a Complaint: with a competent supervisory authority in the EU/EEA Member State or UK region of your habitual residence, place of work, or place of the alleged infringement.

These rights are not absolute and apply only as, and to the extent, provided by applicable law; we may lawfully refuse or restrict a request where an exception applies.

To exercise your rights, email support@lumawell-official.com. We will verify your identity and respond within statutory timeframes (as a rule, one month, extendable by two months for complex requests).

8. CALIFORNIA STATE PRIVACY RIGHTS (CCPA/CPRA)

If you are a California consumer or resident, the following additional information and rights apply to you under the California Consumer Privacy Act, alongside the rest of this Policy.

• Categories collected & disclosed: identifiers (name, email, IP address, phone number, shipping details), commercial information (order history), internet/electronic activity (browsing history), and sensitive personal information (quiz/health responses, if provided). These are disclosed to service providers as detailed in Section 6.
• Sale / sharing: we do not knowingly sell your personal information, nor share it with external third parties for their own direct marketing purposes. Should that change, we will inform you first, and you will have the right to opt out of any "sale" of your personal information before it occurs.
• Your consumer rights: you have the right to know what personal information we collect, request access, request correction or deletion, limit the use of sensitive personal information, opt out of sale/sharing, and receive non-discriminatory treatment for exercising your privacy rights.
• Submitting requests: email support@lumawell-official.com. We will verify your identity and respond within 45 days (extendable by an additional 45 days with notice). Authorized agents may submit requests on your behalf where permitted by law.

9. CHILDREN

The Website is intended strictly for adults (18+). We do not knowingly collect or process personal data from children. If we become aware that we have collected personal data from a child, we will take immediate steps to delete such information.

10. SECURITY

We implement reasonable technical and organizational safeguards appropriate to the risk - including encryption in transit, strict access controls, confidentiality obligations, and vetted third-party service providers - to secure your personal data. However, no method of internet transmission or electronic storage can be guaranteed 100% secure.

11. COOKIES AND TRACKING TECHNOLOGIES

The Website uses cookies and similar tracking technologies to ensure functionality, analyze performance, and deliver personalized marketing. You can manage your cookie preferences at any time through the cookie banner displayed on the Website or via your web browser settings. Disabling certain cookies may affect your experience or functionality on the Website.

12. CHANGES TO THIS POLICY

We may update this Policy from time to time. The updated version will be effective as soon as it is posted on the Website. The English version of this Policy prevails over any translated version.

13. CONTACT US