Privacy Policy

Lustrella
Effective Date: August 27, 2026
Last Updated: August 27, 2026


Welcome to Lustrella. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make purchases from our online store.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our site. This policy applies to all information collected through our website, as well as any related services, sales, marketing, or events.

We sell skincare and facial beauty tools to customers in the United States and internationally. By using our website or placing an order, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

Business Name: Lustrella
Website: https://www.lustrellashop.com/
Email: organicbeauty.organichealth@gmail.com

If you have any questions or concerns about this policy or our privacy practices, please contact us at the information above.


3. Information We Collect

We collect information you provide directly to us, information collected automatically when you use our site, and information from third-party sources.

3.1 Information You Provide Directly

When you create an account, place an order, subscribe to our newsletter, contact us, or interact with our store, we may collect:

- **Personal identifiers:** Full name, email address, phone number, billing address, and shipping address
- **Payment information:** Credit or debit card details, PayPal account information, Apple Pay credentials, or Google Pay credentials (note: we do not store your full payment card numbers — all payment processing is handled by secure third-party processors)
- **Order information:** Products purchased, order history, and transaction records
- **Communications:** Messages, inquiries, reviews, or feedback you send to us
- **Account credentials:** Username and password if you create an account

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

- **Device information:** IP address, browser type and version, operating system, device identifiers
- **Usage data:** Pages visited, links clicked, products viewed, time spent on pages, referring URLs, and browsing behavior within our site
- **Location data:** General geographic location based on your IP address (country and city level — not precise GPS location unless you grant permission)
- **Cookies and tracking data:** Information gathered through cookies, web beacons, and similar technologies (see Section 7)

 

 3.3 Information from Third Parties

We may receive limited information about you from third-party sources, including:

- Payment processors (to verify transactions and prevent fraud)
- Social media platforms (if you interact with our ads or content and choose to connect your account)
- Analytics providers (aggregated behavioral data to improve our website)

---

4. How We Use Your Information

We use the information we collect for the following purposes:

**To fulfill your orders and provide our services:**
- Process and complete your purchases
- Send order confirmations, shipping notifications, and delivery updates
- Coordinate order fulfillment with our suppliers and shipping partners
- Handle returns, exchanges, refunds, and customer service requests

To communicate with you:
- Respond to your questions, comments, and support requests
- Send transactional emails related to your account or purchases
- Send promotional emails and marketing communications (only with your consent, and you may opt out at any time)
- Notify you of changes to our store, policies, or products

To operate and improve our business:
- Analyze website traffic, customer behavior, and purchasing trends
- Monitor and improve the performance, security, and functionality of our website
- Develop new products, features, and services
- Conduct internal audits and reporting

To protect our business and customers:
- Detect, investigate, and prevent fraudulent transactions and other illegal activity
- Enforce our Terms of Service and other agreements
- Comply with applicable legal obligations and respond to lawful requests from authorities

For marketing purposes:
- Personalize your shopping experience based on your browsing and purchase history
- Retarget ads to you on third-party platforms such as Meta (Instagram, Facebook) and TikTok (only in accordance with their respective privacy policies and your platform settings)
- Analyze the performance of our marketing campaigns

We will never sell your personal information to third parties for their own marketing purposes.

---

5. Payment Processing

We accept the following payment methods:

- **Credit and Debit Cards** (Visa, Mastercard, American Express, Discover)
- **PayPal**
- **Apple Pay**
- **Google Pay**

All payment transactions are encrypted and processed through secure, PCI-DSS-compliant third-party payment processors. **We do not store, transmit, or have access to your full credit card numbers.** Your payment details are handled directly by our payment processors, which include:

- Wix Payments / Stripe — for credit and debit card transactions
- PayPal, Inc. — for PayPal transactions
- Apple Inc.— for Apple Pay transactions
- Google LLC— for Google Pay transactions

Each of these processors has its own privacy policy governing how they handle your financial data. We encourage you to review their policies:

- Stripe: https://stripe.com/privacy
- PayPal: https://www.paypal.com/us/legalhub/privacy-full
- Apple Pay: https://www.apple.com/legal/privacy/
- Google Pay: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice

---
6. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

6.1 Service Providers and Business Partners

We share information with third-party companies and individuals who assist us in operating our store and fulfilling orders, including:

- **Wix.com** — our e-commerce platform and website host
- **Modalyst / Suppliers** — our dropshipping platform and product suppliers, who receive your name and shipping address solely to fulfill and ship your order
- **Shipping Carriers** — such as USPS, UPS, FedEx, and DHL, who receive your shipping address to deliver your order
- **Email Marketing Platforms** — to send you newsletters and promotions (only if you have opted in)
- **Analytics Providers** — such as Google Analytics or Wix Analytics, to help us understand how visitors use our site (data is aggregated and anonymized where possible)

All service providers are contractually required to use your information only to provide services to us and are prohibited from using it for their own purposes.

6.2 Legal Requirements

We may disclose your information if we are required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to:

- Comply with a legal obligation or regulatory requirement
- Protect and defend our rights or property
- Prevent or investigate possible wrongdoing in connection with our services
- Protect the personal safety of our customers or the public
- Protect against legal liability

6.3 Business Transfers

If we are involved in a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your information becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

---

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website.
What are cookies?

Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences, keep you logged in, and understand how you use the site.

Types of cookies we use.
- **Essential cookies:** Required for the website to function properly (e.g., keeping items in your cart, processing payments). These cannot be disabled.
- **Analytics cookies:** Help us understand how visitors interact with our site (e.g., which pages are most visited). Data is aggregated and does not personally identify you.
- **Marketing cookies:** Used to show you relevant advertisements on other platforms and measure the effectiveness of our ads.
- **Preference cookies:** Remember your settings and preferences (e.g., language, currency) to personalize your experience.

Managing cookies:

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when cookies are sent. Please note that disabling certain cookies may affect the functionality of our website.

You can also opt out of targeted advertising by visiting:
- **Digital Advertising Alliance (US):** https://optout.aboutads.info
- **Network Advertising Initiative:** https://optout.networkadvertising.org
- **Your Online Choices (EU):** https://www.youronlinechoices.com

---

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

- **Order records:** Retained for a minimum of 7 years for accounting, tax, and legal compliance purposes
- **Account information:** Retained for as long as your account is active, plus a reasonable period thereafter
- **Marketing data:** Retained until you opt out or request deletion
- **Customer communications:** Retained for up to 3 years for support and quality purposes

When your information is no longer needed, we securely delete or anonymize it.

---

9. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it, including:

- SSL/TLS encryption for all data transmitted between your browser and our website
- Secure, PCI-DSS-compliant payment processing — we never store payment card numbers
- Access controls limiting employee access to personal data on a need-to-know basis
- Regular security monitoring of our systems and third-party service providers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

---

10. Your Privacy Rights

​

10.1 United States — California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

- **Right to Know:** You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the third parties with whom we share it.
- **Right to Delete:** You may request that we delete personal information we have collected from you, subject to certain exceptions.
- **Right to Correct:** You may request that we correct inaccurate personal information we hold about you.
- **Right to Opt-Out of Sale or Sharing:** We do not sell your personal information. However, if we share your data with advertising partners for targeted advertising, you have the right to opt out.
- **Right to Non-Discrimination:** We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at [your@email.com] with the subject line "California Privacy Request."

10.2 European Union, United Kingdom & EEA Residents (GDPR)

If you are located in the EU, UK, or EEA, you have the following rights under the General Data Protection Regulation (GDPR):

- **Right of Access:** Request a copy of the personal data we hold about you.
- **Right to Rectification:** Request correction of inaccurate or incomplete data.
- **Right to Erasure ("Right to be Forgotten"):** Request deletion of your personal data under certain conditions.
- **Right to Restriction of Processing:** Request that we limit how we use your data in certain circumstances.
- **Right to Data Portability:** Request a copy of your data in a structured, machine-readable format.
- **Right to Object:** Object to our processing of your personal data for direct marketing or based on legitimate interests.
- **Rights Related to Automated Decision-Making:** Request human review of decisions made solely by automated means.

**Legal Basis for Processing:** We process your personal data on the following legal grounds: contract performance (to fulfill your orders), legal obligation (for tax and regulatory compliance), legitimate interests (for fraud prevention and business operations), and consent (for marketing communications).

**International Transfers:** If you are located outside the United States, your information may be transferred to and processed in the United States. We take steps to ensure that such transfers comply with applicable data protection laws, including using Standard Contractual Clauses where required.

To exercise your GDPR rights, contact us at [your@email.com]. You also have the right to lodge a complaint with your local data protection authority.

10.3 All Customers — General Rights

Regardless of your location, you may:

- **Opt out of marketing emails** at any time by clicking "Unsubscribe" in any email we send or by contacting us directly
- **Request access to or correction** of your personal information by contacting us
- **Request deletion** of your account and associated data by contacting us

We will respond to all requests within 30 days (or within the timeframe required by applicable law).

---

11. Children's Privacy

Our store is not intended for children under the age of 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at  organicbeauty.organichealth@gmail.com and we will take steps to delete that information from our systems.

---

12. Third-Party Links

Our website may contain links to third-party websites, including social media platforms, partner sites, and payment processors. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of any third-party sites and encourage you to review their privacy policies before providing any personal information.

---

13. International Customers

Our store ships and sells products globally. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and business operations are primarily located. Data protection laws in the United States may differ from those in your country.

By using our website and providing your information, you consent to this transfer and processing. Where required by law (such as under GDPR), we rely on appropriate safeguards to protect your data during international transfers.

---

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will:

- Update the "Last Updated" date at the top of this policy
- Post a prominent notice on our website
- Send an email notification to registered customers (where required by law)

Your continued use of our website after any changes become effective constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

---

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Lustrella
📧 Email: organicbeauty.organichealth@gmail.com
🌐 Website: https://www.lustrellashop.com/

We are committed to resolving any privacy concerns you may have and will respond to all inquiries within 30 days.

---

*This Privacy Policy was last reviewed and updated on August 27, 2026.*

---

​