Privacy policy

Privacy Policy

Last updated: August 4, 2026

Lumin & Co ("we," "us," "our") is based in Norway and operates this website to sell baby and new-parent essentials to customers across Norway, the EEA, and the EU. This policy explains what personal data we collect, why, and what rights you have over it, in line with the Norwegian Personal Data Act and, for EU/EEA customers, the General Data Protection Regulation (GDPR).

Who We Are Lumin & Co is the data controller for the personal data described in this policy. You can reach us at:

  • Email: luminandco@pm.me
  • Phone: +47 40 19 12 24
  • Address: Nordåsbrotet 117, 5235 Rådal, Norway

What We Collect

  • Order and contact information — name, shipping/billing address, email, phone number, and order history
  • Payment information — processed directly by our payment provider; we do not store your full card details ourselves
  • Marketing preferences — your email address if you sign up for our newsletter or first-order discount, and whether you've opted in or out
  • Communications — anything you send us via email or customer support
  • Device and usage data — collected automatically through cookies and similar technologies (browser type, pages viewed, general location from IP address)

Why We Collect It

  • To process and fulfil your orders, including passing your shipping details to our fulfillment partners
  • To respond to your questions and provide customer support
  • To send marketing emails, but only if you've opted in — you can unsubscribe at any time
  • To detect and prevent fraud and keep our store secure
  • To meet our legal obligations, including tax and consumer protection record-keeping

Legal Basis for Processing We process your data because it's necessary to fulfil our contract with you (your order), because you've given consent (marketing emails), because we have a legitimate business interest (fraud prevention, service improvement), or because we're required to by law.

Who We Share It With

  • Shopify, which hosts our store and processes data on our behalf
  • Our fulfillment partners (including suppliers accessed through our dropshipping platform), who receive your shipping details to deliver your order. Some of these partners are located outside the EEA
  • Our payment processor, to complete your transaction
  • We do not sell your personal data to third parties

International Data Transfers Because some of our fulfillment partners operate outside the EEA, your order and shipping information may be transferred internationally to enable delivery. Where this happens, we rely on Standard Contractual Clauses or equivalent safeguards recognized under EU/EEA law to protect your data.

Cookies We use cookies to keep your cart working, remember your preferences, and understand how customers use our site. You can control cookies through your browser settings; blocking some cookies may affect site functionality.

Data Retention We keep your order information for as long as needed to fulfil your order, meet accounting and tax obligations, and handle any returns or disputes. If you've subscribed to marketing emails, we keep your email address until you unsubscribe.

Children Our products are made for babies and young children, but our Services are intended for use by adults. We do not knowingly collect personal data directly from children. If you believe a child has provided us with personal data, contact us and we'll delete it.

Your Rights Under GDPR and Norwegian law, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Receive a copy of your data in a portable format
  • Withdraw consent at any time (for marketing communications)

To exercise any of these rights, email luminandco@pm.me. You also have the right to lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority), or with your own country's data protection authority if you're located elsewhere in the EEA.

Security We take reasonable steps to protect your personal data, but no online system is completely secure. Please avoid sending sensitive information through unsecured channels.

Changes to This Policy We may update this policy from time to time. Changes will be posted here with an updated "Last updated" date.

Contact Questions about this policy or your data? Email luminandco@pm.me or write to us at Lumin & Co, Nordåsbrotet 117, 5235 Rådal, Norway.