Privacy policy

• Order details: your name, email, shipping address, optional phone number and order notes, and what you ordered.
• Account details: if you create an account, your name, email and a scrambled (hashed) version of your password. If you sign in with Google, we receive your name, email and profile picture from Google.
• Technical details: your IP address and browser information, which we use to keep accounts secure and to limit abusive requests. Our hosting provider also keeps standard server logs.
• Payment: Shopify takes your payment. We never see or store your full card number.

• To process, ship and support your order, and to honor our guarantee.
• To run your account and let you see your orders.
• To send emails about your account and orders, such as confirmations and shipping.
• To protect the site and our customers from fraud and abuse.
• To meet legal, tax and accounting duties.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running a secure business, your consent where we ask for it, and our legal obligations.

We do not sell your personal information or share it for advertising. We share it only with companies that help us run the store, and only as needed:

• Shopify, for checkout and payment.
• Vercel, which hosts this site, and our database hosting provider.
• Resend, which delivers our emails.
• Google, if you choose Google sign-in.
• Google Fonts, which receives your IP address when your browser loads our fonts.
• Shipping carriers, which receive what they need to deliver your order.

We may also disclose information when the law requires it.

We use a small number of cookies that keep you signed in and protect your session. Your browser also stores your cart so it is still there when you come back. We do not use advertising or analytics cookies.

We keep order records for as long as we need them to support your order and meet tax and accounting rules. Account details stay until you ask us to delete your account. Records used to limit abusive requests are kept in scrambled form and removed within days.

You can ask us for a copy of your information, or ask us to correct or delete it. We may need to keep some records where the law requires it. Depending on where you live, you may also have the right to object to or restrict how we use your information, to move it elsewhere, to withdraw consent, and to complain to your local data protection authority.

California residents can ask what we have collected and ask us to delete or correct it, and will not be treated differently for doing so. We do not sell or share personal information as California law defines those terms.

To make a request, email support@lumerisderm.com. We may need to confirm your identity first.

We are based in the United States and our service providers may process information in the United States and other countries. Those countries may have different data protection laws from yours.

We use safeguards including encrypted connections, hashed passwords and limited staff access. No system is perfectly secure, so please use a strong, unique password and keep your order links private.

Our products and this site are for adults. We do not knowingly collect information from anyone under 18.

If we change this policy, we will update the date at the top of this page. Questions? Email support@lumerisderm.com. See also our terms.