• Email Contact: For direct communication, you can email us at [email protected]. This email is monitored regularly, and we are dedicated to responding promptly.
• Phone Contact: For immediate assistance, you may call our privacy team at (949) 408-3760 Ext. 6. Our team is available from 10 am to 4 pm (Pacific Time Zone), Monday through Friday except major holidays, to address your concerns.
• Online Contact Form: You can also use the contact form available on our website for any privacy-related inquiries.
• By Mail: You can also mail us at 621 Lunar Avenue, Brea, CA 92821.

• Compliance with Law and Legal Requests: We may disclose information to comply with legal requirements and respond to law enforcement requests.
• Business Transfers: During business transitions, such as mergers or acquisitions, your information may be transferred as part of the transaction.
• With Your Consent: Your personal information may be shared with other third parties or used for additional purposes based on your explicit consent.
• AI and Agentic Storefront Partners: If you initiate a purchase or inquiry through a third-party AI assistant or “agentic storefront” (e.g., ChatGPT, Google Gemini, or Microsoft Copilot), we disclose transaction-related data - such as order confirmation, tracking numbers, and fulfillment status - back to that platform. This allows the AI to provide you with real-time updates within your chat interface. Your interactions on those platforms are governed by the AI provider's own privacy terms.

• Right to Know and Access: You have the right to request information about the personal data we have collected, used, disclosed, and sold about you over the past 12 months.
• Right to Deletion: You may request the deletion of your personal information that we have collected, subject to certain exceptions.
• Right to Opt-Out of Sale or Sharing of Personal Information: While we do not sell personal information, should this practice change, you will have the right to opt-out of the sale or sharing of your personal information. We do however share your personal information with third parties as outlined elsewhere in this privacy policy. You have the right to opt out of this form of sharing. To opt out of sharing your personal information, or to obtain more information about your opt out rights, contact us at [email protected].
• Right to Non-Discrimination: Exercising your privacy rights will not result in discriminatory treatment or penalties
• Right to Correct Inaccurate Information: You have the right to request correction of inaccurate personal information held by us.
• Right to Data Portability: Upon request, you have the right to receive a copy of your electronic personal information in a readily usable format.
• How to Exercise Your Rights: To exercise any of these rights, please follow the steps below:

• • • • Submitting Requests: You can submit a request to know, access, or delete your personal information by contacting us at [email protected].
      • Verification Process: We will verify your identity before processing your request to protect your privacy and security.
      • Response Time: We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please email [email protected]. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. If any applicable state law requires a shorter response time, we will honor that timeline.
      • Assistance for Disabilities: If you need assistance due to a disability to access our policy or to exercise your rights, please contact us at [email protected].

Note on Agentic Transactions: When using an AI agent to facilitate a purchase, you may not see our full Privacy Policy at the moment of checkout. By authorizing an AI agent to transact with Luminara, you acknowledge that the data necessary to fulfill your order will be processed according to this Policy. You may exercise your right to access or delete this data at any time by contacting [email protected].

• Advanced Technical Safeguards: Utilization of industry-standard encryption, firewalls, and secure server facilities.
• Organizational Controls: Regular training for our employees on our privacy and security policies.
• Regular Audits and Monitoring: Continuous monitoring of our systems and periodic audits to ensure the effectiveness of our security measures.
• Data Breach Response Plan: In the event of a data breach requiring notification, we have a response plan in place to promptly notify affected individuals and take necessary remedial actions.

• The date of the latest update or revision will be clearly displayed at the top of the Privacy Policy.
• Should there be a need to modify or update our Privacy Policy, we will make these changes in a manner that is consistent with the applicable legal standards.
• In the event of significant changes to our Privacy Policy, we will actively inform our users through various channels. This may include email notifications, alerts on our website, or other communication methods that ensure you are aware of the modifications.

• Data Processing Location: All personal data we collect from Canadian residents is exclusively processed and stored on servers located within the United States. This includes data processed by Luminara directly or through our third-party service providers.
• Purpose of Data Transfer: The transfer of personal information to service providers in the United States is conducted for operational purposes essential to our business. These include order processing by Shopify, shipment information management by Pipe17, customer communication via Klaviyo, social media and advertising engagement through platforms such as Meta and TikTok, and enterprise resource planning with Oracle's NetSuite. Once transferred outside of Canada, Luminara may further use the data for purposes as otherwise outlined herein.
• Privacy Compliance: We undertake to protect your data with the same level of security as would be required under Canadian law and to restrict use of the data to the purposes for which it was collected.
• Right to Information: Canadian users have the right to obtain more detailed information on our policies and practices regarding our use of US-based service providers. To exercise your rights, please refer to Section 7: Consumer Rights and Choices.
• Consent to International Transfer: By using our services and providing us with your personal information, you acknowledge and consent to the transfer of your data to the United States for the purposes described herein.