Privacy policy

LumePorch ("we", "us") respects your privacy. This policy explains what personal information we collect through lumeporch.com, how we use it, and the choices you have. We handle personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles.

What we collect

Order information: name, email address, phone number, shipping and billing address, and order details, collected when you make a purchase.
Payment information: processed securely by our payment providers; we never see or store your full card details.
Device information: browser, IP address, pages viewed and interactions, collected through cookies and similar technologies to keep the Site working and improve it.
Communications: messages you send us (e.g. to info@lumeporch.com) so we can support you.

How we use it

To process and deliver your orders, send order updates and provide customer support.
To operate, protect and improve the Site.
To send marketing emails only if you opt in. You can unsubscribe at any time via the link in each email.
To comply with legal obligations and prevent fraud.

Who we share it with

We share personal information only with service providers who help us run the store: Shopify (our e-commerce platform), payment processors, shipping and fulfilment partners, Klaviyo (email marketing), wetracked.io (advertising conversion tracking), and the analytics and advertising services listed below (Google, Meta and Microsoft). These providers may process data outside Australia; we share only what is needed for them to perform their service.

Cookies

We use cookies and similar technologies for three purposes: to keep the Site working (cart, checkout, preferences), to measure how the Site is used, and to measure the performance of advertising. You can control cookies through your browser settings; disabling them may affect parts of the Site.

Analytics and advertising tools

We use the following third-party tools on the Site. They set cookies or similar identifiers and receive information about pages viewed and actions taken, such as viewing a product or adding an item to the cart. We never send them payment details. When an order is placed, Google Ads and Meta may also receive the email address, phone number and shipping address of that order in hashed form (converted into an irreversible code before it leaves the Site), used only to measure whether an advertisement led to a purchase.

Google Analytics 4 (Google): measures visits, traffic sources and how pages are used. You can opt out with the Google Analytics Opt-out Browser Add-on, and read the Google Privacy Policy.
Google Ads conversion tracking, remarketing and enhanced conversions (Google): measures which Google ads lead to a visit or a purchase and shows our ads again to people who visited the Site. Enhanced conversions use the hashed order details described above. You can manage the ads you see in My Ad Center, and read how Google uses information from sites that use its services.
Meta Pixel and Conversions API (Meta Platforms): measures the results of our advertising on Facebook and Instagram. You can manage this in your Facebook ad settings, and read the Meta Privacy Policy.
Microsoft Clarity (Microsoft): records how visitors use the Site, such as clicks, scrolling and mouse movement, to create heatmaps and anonymised session replays that help us improve page layout. Text typed into forms and payment details are masked and not recorded. Read the Microsoft Privacy Statement.
Klaviyo: our email marketing platform. It stores the mailing list, powers the sign-up form and sends automated emails such as the welcome series and reminders about an unfinished checkout. Klaviyo receives the name and email address provided at sign-up, together with order and on-site activity (such as products viewed or left in the checkout) needed to send and personalise these emails. Unsubscribing is available in every email. See the Klaviyo Privacy Notice.
wetracked.io: a conversion tracking service that connects to our store. It receives order details and on-site activity (such as pages viewed, items added to the cart and the advertising click that led to the visit), and combines device and session information to match a purchase to the advertisement that led to it. It then sends that result to the advertising platforms we use, such as Google Ads; personal details sent to those platforms are hashed first. We never send it payment details. See the wetracked.io Privacy Policy.

Most browsers also offer a Do Not Track or tracking protection setting you can turn on.

Retention

We keep order records for as long as required for tax, accounting and legal purposes, and delete or de-identify personal information when it is no longer needed.

Your rights

You may request access to, correction of, or deletion of your personal information at any time by emailing info@lumeporch.com. We respond within a reasonable period. If you have a privacy concern, contact us first. You may also contact the Office of the Australian Information Commissioner (OAIC).