Privacy Policy

Last updated: February 2026

1. Information We Collect

When you place an order or create an account with LuminArt Glass, we collect the following information:

  • Contact details — name, email address, phone number
  • Shipping address — street, city, region, postal code, country
  • Uploaded photos — images you provide as reference for your custom glass painting
  • Order details — product selections, customisation notes, order history

2. Payment Processing

All payments are processed securely through Stripe. We never store, access, or have visibility over your full credit card number, CVC, or other sensitive payment details. Stripe is PCI DSS Level 1 certified — the highest level of payment security.

For more information, see Stripe's Privacy Policy.

3. Cookies & Analytics

We use Firebase Analytics (powered by Google) to understand how visitors interact with our website. This helps us improve user experience and measure marketing effectiveness.

Firebase may set cookies or use similar technologies to collect:

  • Pages visited and time spent
  • Device type, browser, and operating system
  • Approximate geographic location (country / city level)
  • Referral source

We also use essential cookies for session management and authentication (NextAuth.js session tokens).

4. How We Use Your Information

  • To fulfil and deliver your custom glass painting order
  • To communicate order status updates and shipping notifications
  • To process payments and prevent fraud
  • To improve our website, products, and services
  • To respond to your enquiries and support requests

5. Data Sharing

We do not sell your personal information. We share data only with trusted third-party services necessary to operate our business:

  • Stripe — payment processing
  • Firebase / Google Cloud — analytics and file storage
  • SF Express — shipping and delivery

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, including order records for accounting and legal compliance. Uploaded photos are retained for up to 90 days after order completion to handle any quality-related enquiries, then permanently deleted.

7. Your Rights (GDPR & PDPO)

Under the EU General Data Protection Regulation (GDPR) and the Hong Kong Personal Data (Privacy) Ordinance (PDPO), you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your personal data
  • Object to or restrict certain processing activities
  • Request data portability

To exercise any of these rights, contact us at contact@luminglass.art.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

9. Contact

If you have any questions about this Privacy Policy, please contact us at contact@luminglass.art.