This Privacy Policy applies to all visitors and customers of Lumina Research Labs. All products are for research use only.
1. Information We Collect
When you use our website or place an order, we may collect:
- Account information: Name, email address, and hashed password when you create an account
- Order information: Name, email, shipping address, items ordered, and payment reference ID
- Contact form submissions: Your name, email, and message
- Cart sessions: Items you add to your cart, tied to an anonymous session ID and optionally to your email if entered at checkout
We do not collect or store raw payment card data. Payments are made via peer-to-peer transfer services; we only retain a payment reference ID for order records.
2. How We Use Your Information
We use your information to:
- Process and fulfill your orders
- Send order confirmation and shipping update emails
- Send cart reminder emails if you leave items in your cart (you may opt out by not providing your email at checkout)
- Respond to contact form inquiries
- Maintain your account and order history
- Prevent fraud and comply with legal obligations
We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
3. Data Storage
Your data is stored in a secure database on our server located in the United States. Passwords are hashed using bcrypt and are never stored in plain text. We implement reasonable technical and organizational measures to protect your personal information. See Section 8 for full security details.
4. Email Communications
By placing an order, you agree to receive transactional emails related to your order (confirmation, shipping updates). These are required for order fulfillment and cannot be opted out of.
Cart reminder emails are sent only if you provide your email address during the checkout process before completing your order. These are one-time reminders, not marketing newsletters.
5. Cookies and Local Storage
We use your browser's local storage to maintain your shopping cart, session state, and age verification preference. We do not use advertising cookies or track you across third-party websites.
6. Third-Party Services
We use the following third-party services that may process your personal information:
- Resend (resend.com): Our email delivery provider. Your email address and name are transmitted to Resend solely for the purpose of sending transactional and order-related emails. Subject to Resend's privacy policy.
- Shippo (goshippo.com): Our shipping label provider. Your name, shipping address, and email are transmitted to Shippo to generate shipping labels and tracking. Subject to Shippo's privacy policy.
- Google Fonts: Fonts are loaded from Google's CDN. Subject to Google's privacy policy.
- Fontshare (fontshare.com): Additional typefaces are loaded from Fontshare's CDN. No personal data beyond standard request headers (IP address) is transmitted. Subject to Fontshare's privacy policy.
We do not use advertising networks, tracking pixels, or analytics services that collect personal data.
7. Data Retention
Order records are retained for a minimum of seven (7) years for legal and tax compliance purposes. Account information is retained as long as your account is active. You may request deletion of your account by contacting us; however, we may retain order records as required by applicable law.
8. Data Security
Your data is stored in a secure database on our server. Passwords are hashed using bcrypt and are never stored in plain text. We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the breach, to the extent practicable.
No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. Your Rights (General)
Regardless of your location, you may contact us to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to certain processing
To exercise these rights, email us at privacy@luminaresearchlabs.com or write to us at:
Lumina Research Labs LLC, 81 W 300 S Apt 322, Logan, UT 84321
10. California Privacy Rights (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., information needed to complete a transaction, comply with a legal obligation, or detect security incidents).
- Right to Opt-Out of Sale: We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. You therefore have nothing to opt out of, but we confirm this right is honored.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality because you exercised your privacy rights.
- Right to Correct: You may request that we correct inaccurate personal information we hold about you.
Categories of personal information we collect: Identifiers (name, email, IP address); commercial information (order history, products purchased); internet or other electronic network activity (cart sessions, login events); and geolocation data (shipping address).
How to submit a CCPA request: Email privacy@luminaresearchlabs.com with the subject line "CCPA Request" and describe your request. We will respond within 45 days. We may need to verify your identity before processing your request.
11. Children's Privacy (COPPA)
Our website is not directed to individuals under 21 years of age. We do not knowingly collect, use, or disclose personal information from anyone under the age of 21. All visitors are required to confirm they are 21 or older before accessing the site. If you believe we have inadvertently collected information from a minor under 13, please contact us immediately at privacy@luminaresearchlabs.com and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The date of the most recent revision appears at the top of this page. We will notify registered users of material changes by email. Continued use of the website after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Email: privacy@luminaresearchlabs.com
Mail: Lumina Research Labs LLC, 81 W 300 S Apt 322, Logan, UT 84321