Privacy Policy

Last Updated: July 2025

LumenLetters ("we," "us," or "our") respects your privacy. This policy explains how we collect, use, and protect your personal information when you use our website or services.

1. Information We Collect

A. Data You Provide

  • Contact Details: Name, email, phone number (for orders/deliveries).
  • Order Information: Recipient's name, address, occasion details, and uploaded files (photos/videos).
  • Payment Data: Credit card details (processed via Stripe/PayPal; we don't store full payment info).

B. Automated Collection

  • Cookies: Session cookies for login, analytics (Google Analytics), and preferences.
  • Device Data: IP address, browser type, and OS (for security and analytics).

2. How We Use Your Data

PurposeExamples
Fulfill OrdersDeliver stories/gifts, contact recipients.
Improve ServicesAnalyze trends, optimize the website.
MarketingSend promotions (opt-out anytime).
Legal ComplianceFraud prevention, tax obligations.

3. Data Sharing & Disclosure

We never sell your data. Limited sharing occurs with:

  • Service Providers: Payment processors (Stripe), delivery partners (USPS/FedEx).
  • Legal Requirements: If required by law (e.g., court orders).

4. User Rights

You may:

  • Access/Delete your data (email contact@lumenletter.com).
  • Opt-Out of marketing emails (unsubscribe link in emails).
  • Disable Cookies via browser settings.

5. Data Security

  • Encryption: SSL/TLS for all data transfers.
  • Storage: Secure servers with access controls.
  • Payment Security: PCI-compliant processors (Stripe/PayPal).

6. Third-Party Links

Our site may link to other websites (e.g., florists). We're not responsible for their privacy practices.

7. Children's Privacy

We do not knowingly collect data from children under 13. Parents may request deletion of accidental submissions.

8. Policy Updates

We'll notify users of material changes via email or website notices.

9. Contact Us

For questions or data requests:

Email: contact@lumenletter.com

🔗 Additional Disclosures

  • GDPR Compliance: EU users may lodge complaints with supervisory authorities.
  • CCPA: California residents can request data disclosure/deletion.