Privacy Policy

LUMI Lighting. respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy describes how we collect, use, and safeguard your data when using our storefront and services in Kenya.

1. Information We Collect

We collect information to process your orders and provide a personalized experience:

• Authentication Data: Provided securely when signing up or logging in through Clerk (name, email address).
• Order and Shipping Information: Shipping address (e.g. country, city, physical address), contact number, and cart choices.
• Payment Records: Transaction codes and payment confirmation metadata (e.g., M-Pesa Transaction ID). We do not store raw card numbers on our servers.
• Usage Information: Cookies and tracking technologies used to manage cart persistence (such as _medusa_cart_id).

2. How We Use Your Information

We process your personal information for the following purposes:

• To fulfill and manage orders, checkout, and payments.
• To persist and retrieve your active shopping cart across page reloads.
• To send order status updates, delivery alerts, and showroom notifications.
• To verify your identity and manage account access securely.

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We only share information with third-party service providers who assist us in operating our business:

• Clerk: Auth provider handling identity management.
• Medusa Backend: Core database engine managing carts, customers, and order storage.
• Payment Processors: Processing transaction requests securely.
• Fulfillment Partners: Delivery couriers managing physical package delivery.

4. Data Retention and Security

We use standard encryption protocols (HTTPS/SSL) to protect all data during transmission. Your cart sessions are persisted using secure, HTTP-only cookies. We store customer profile and order data in our secure Medusa database.

5. Your Rights and Access

You have the right to request access to the personal data we hold about you, request corrections to out-of-date information, or request the deletion of your account. You can manage your profile settings directly through the authenticated dashboard.

6. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our operational procedures or compliance regulations. We will notify you of any major changes by updating the date at the top of this page.

7. Contact Support

For privacy-related questions or data deletion requests, please contact our support team: