Lumi Privacy Policy
Effective date: 7 September 2026. Version 1.1.
Lumi sells fashion goods on the Temu marketplace in the United Arab Emirates. This policy explains what personal data Lumi receives when you buy a Lumi product on Temu, why Lumi uses it, where it is kept, for how long, and what your rights are.
Temu operates the marketplace, the checkout and the payment. Temu's own privacy policy governs what Temu collects from you. This policy covers only what Lumi, as the seller, receives from Temu to fulfil your order.
Who is responsible
Lumi is a trade name of LUMINA CORPORATE SERVICES PROVIDER L.L.C S.O.C, licensed by the Department of Economic Development, Dubai (licence no. 1557029), registered office Office T-36-048, property of Dubai Properties LLC, Al Jaddaf, Dubai, United Arab Emirates. Contact for anything about your data: team@lumi.luxury. Lumi is not required to appoint a data protection officer; the contact above handles every request.
What data Lumi receives
To pack and ship your order, Lumi receives from Temu:
- your name and delivery address,
- your phone number, used only by the carrier for delivery,
- the order details: items, sizes, colours, quantities, prices, order number and status.
Lumi does not receive your payment details. Lumi does not receive your e-mail address unless Temu includes it in the order for delivery purposes.
Lumi's automated connection to Temu, which keeps listings, stock, prices and order status in sync, receives order numbers and item details only. It does not receive or store your name, address or phone number.
Why Lumi uses it, and on what basis
- To fulfil, ship and, where needed, return or refund your order.
- To answer your questions about an order through Temu's messaging.
- To keep the accounting and tax records that UAE law requires.
Lumi processes this data because it is necessary to perform your purchase contract and to meet legal obligations (Article 4 of the UAE Personal Data Protection Law). Lumi does not rely on your consent, so there is nothing to withdraw; your other rights are set out below. Lumi does not use your data for marketing, does not sell it, and makes no automated decisions about you.
Who else handles it
- Aramex, the delivery carrier, receives your name, delivery address and phone number to deliver the parcel.
- DigitalOcean LLC hosts Lumi's application server in Germany.
- Amazon Web Services, Inc. hosts, through Lumi's managed database provider, the database where Lumi's order records are kept, in Germany.
- Microsoft 365 (Lumi's e-mail provider) handles messages you send to team@lumi.luxury.
Where it is kept
Your name, address and phone number stay in Temu's Seller Center and in the carrier booking. Lumi holds its own stock and hands parcels to Aramex; nobody else receives your details. Lumi's own copy of the carrier booking is kept on a Lumi computer in the UAE and deleted once delivery and the return window have closed.
Lumi's order records (order number, items, prices, status; not your name, address or phone) are stored on servers in Frankfurt, Germany. The hosting providers are bound by written data-processing terms requiring protection at least equivalent to UAE law, which is the safeguard the UAE Personal Data Protection Law requires for transfers abroad (Articles 22 and 23). Germany is also subject to the EU General Data Protection Regulation. Data is encrypted in transit and at rest, and access is limited to named Lumi staff and the automated connection described above.
How long it is kept
Order records are kept for seven years after the end of the tax period in which the order was made, because UAE tax law requires businesses to keep their accounting records for that period (Federal Decree-Law No. 47 of 2022 on Corporate Tax, Article 56; Federal Decree-Law No. 28 of 2022 on Tax Procedures, Article 4 and its Executive Regulation). Delivery details held outside the order record, such as the carrier booking, are deleted once the delivery and any return window have closed.
Your rights
You can ask Lumi to show you the personal data it holds about your order, to give you a copy in a common electronic format, to correct it, to restrict its use while a request is examined, or to delete it where the law allows deletion. You can also object to a use you consider unjustified. Write to team@lumi.luxury; Lumi answers within 30 days, or any shorter period the law sets. If you are not satisfied with Lumi's answer, you may complain to the UAE Data Office. Requests about data Temu holds go to Temu.
Security incidents
If a security incident affects your data, Lumi notifies Temu and, where the law requires it, the UAE Data Office, and informs affected customers through Temu.
Changes
Lumi updates this policy when its processing changes and publishes the new version at the address linked from Lumi's Temu store, with a new effective date.
Applicable law
This policy is written under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).