Last updated: 3 November 2026
This policy explains what personal data LUMA MAISON collects through lumamaison.com, why, and what your rights are.
Who is responsible
The controller of your personal data is LUMA MAISON (Lenka, sole trader). Contact: hello@lumamaison.com.
What I collect and why
- Contact form and emails. Your name, email address, store URL if you give it, the service you're interested in and your message. I use them to reply, prepare a quote and, if we work together, deliver the project. Legal basis: steps you ask for before a contract and the contract itself (Art. 6(1)(b) GDPR).
- Purchases of digital products. Products are sold through a payment platform that acts as the seller of record and handles payment, VAT and invoices. It shares with me your name, email address, the product and the license you bought, so I can support you and send updates. Payment details are never shared with me. Legal basis: contract (Art. 6(1)(b) GDPR) and legal obligations such as accounting (Art. 6(1)(c) GDPR).
- Launch list. If you join a launch list through the contact form, I email you when the product is available. You can ask to be removed at any time. Legal basis: your consent (Art. 6(1)(a) GDPR).
Profit Studio and your shop data
Profit Studio runs entirely in your own browser. The files you load and the costs you enter stay on your computer and are never sent to LUMA MAISON or anyone else. The online demo uses only a fictional sample shop.
If you hire me for a service such as a Health Check, I process the store data and exports you share only for that project and only as you instruct. We agree on this in writing before I receive any data.
Who else handles data
I use a small number of providers to run this website and my business. They process data only on my behalf:
- website hosting and email routing: Cloudflare, Inc.;
- contact form delivery: Formspree, Inc.;
- email: Google LLC (Gmail);
- sale of digital products: the checkout platform named on the payment page, which is a separate controller for payment data under its own privacy policy;
- Google Fonts, which loads the typefaces on this site and receives your IP address when a page loads.
Some of these providers are based outside the EU. Where that's the case, data is transferred under the safeguards the GDPR requires, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long I keep it
- Enquiries that don't lead to a project: up to 12 months.
- Client and purchase records: as long as accounting and tax law requires.
- Launch list: until the launch, or until you unsubscribe.
Cookies
This website doesn't use advertising or analytics cookies. If that changes, this policy will be updated and you'll be asked for consent first.
Your rights
You can ask for access to your data, correction, deletion, restriction or a copy in a portable format. You can object to processing and withdraw consent at any time. Email hello@lumamaison.com. You can also complain to the supervisory authority, in Slovakia the Úrad na ochranu osobných údajov SR (dataprotection.gov.sk), or the authority in your own EU country.