Effective Date: May 26, 2026

This Privacy Policy describes how ILLUMINNE ("we", "us", or "our"), operating at illuminne.com, collects, uses, and protects the personal information you provide when using our website and purchasing our products. This policy applies to customers in the United States, the United Kingdom, and the European Union.

By accessing illuminne.com, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect the following categories of personal data:

1.1 Information You Provide Directly

• Full name

• Email address

• Shipping and billing address

• Phone number (optional)

• Payment information (credit/debit card data, processed securely via third-party processors — we do not store full card numbers)

1.2 Information Collected Automatically

• IP address and approximate location

• Browser type and operating system

• Pages visited and time spent on the website

• Referring URLs

• Device identifiers

• Cookie data and tracking pixels (see Section 5)

2. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfill your orders

• To communicate order confirmations, shipping updates, and customer support

• To send promotional emails and marketing communications (with your consent or where permitted by law)

• To improve our website, products, and customer experience

• To detect and prevent fraud and unauthorized transactions

• To comply with applicable legal obligations

• To run targeted advertising campaigns via Meta (Facebook/Instagram) and Google Ads

3. Legal Basis for Processing (GDPR — EU/UK Customers)

For customers in the European Union and the United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR) and the UK GDPR:

• Contract performance: Processing necessary to fulfill your purchase order

• Legitimate interests: Fraud prevention, website security, and business analytics

• Consent: Marketing communications and non-essential cookies (you may withdraw consent at any time)

• Legal obligation: Compliance with applicable tax, accounting, and regulatory requirements

4. How We Share Your Information

We do not sell your personal data to third parties. We may share your information with:

• Shipping and logistics providers, to deliver your orders

• Payment processors (e.g., Stripe, PayPal), to handle transactions securely

• Dropshipping suppliers, solely to fulfill your order

• Marketing platforms (Meta, Google), to serve relevant advertisements — subject to their respective privacy policies

• Analytics providers, to understand website usage

• Legal authorities, if required by law or to protect our rights

All third-party service providers are contractually required to protect your data and use it solely for the purpose of providing services to us.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies, including:

5.1 Types of Cookies We Use

• Essential cookies: Required for the website to function (e.g., shopping cart, session management)

• Analytics cookies: Google Analytics — to understand how visitors interact with our site

• Marketing cookies: Meta Pixel and Google Ads tags — to measure ad performance and deliver personalized advertising

5.2 Your Cookie Choices

When you first visit illuminne.com, you will be presented with a cookie consent banner. You may:

• Accept all cookies

• Reject non-essential cookies

• Manage your cookie preferences at any time via the cookie settings link in our website footer

You may also control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

6. Data Retention

We retain your personal data only for as long as necessary:

• Order and transaction records: 7 years (for tax and legal compliance)

• Customer account information: As long as your account remains active, plus 2 years

• Marketing contact lists: Until you unsubscribe or withdraw consent

• Website usage logs: Up to 26 months (Google Analytics default)

7. Your Rights

7.1 Rights Under GDPR (EU and UK Customers)

If you are located in the EU or UK, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you

• Right to rectification: Request correction of inaccurate data

• Right to erasure: Request deletion of your personal data ("right to be forgotten")

• Right to restriction: Request that we limit how we use your data

• Right to data portability: Receive your data in a structured, machine-readable format

• Right to object: Object to processing based on legitimate interests or for direct marketing

• Right to withdraw consent: At any time, for consent-based processing

To exercise these rights, contact us at: privacy@illuminne.com

You also have the right to lodge a complaint with your local data protection authority.

7.2 Rights Under CCPA (California, USA Customers)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and share

• Request deletion of your personal information

• Opt out of the sale of personal information (we do not sell personal data)

• Non-discrimination for exercising your privacy rights

To submit a CCPA request, contact us at: privacy@illuminne.com

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include SSL/TLS encryption for data in transit, access controls, and secure third-party payment processing.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Data Transfers

ILLUMINNE is operated from Brazil. Your personal data may be transferred to and processed in countries outside your country of residence, including the United States and Brazil.

For EU/UK customers, such transfers are carried out in accordance with applicable data protection law, using mechanisms such as Standard Contractual Clauses (SCCs) where required.

10. Children's Privacy

Our website is not directed at children under the age of 13 (or 16 in the EU, where applicable). We do not knowingly collect personal data from minors. If you believe we have collected information from a child, please contact us immediately at privacy@illuminne.com and we will delete it promptly.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the effective date at the top of this page. For material changes, we will notify you by email or by a prominent notice on our website.

13. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us:

ILLUMINNE

Website: illuminne.com

Email: privacy@illuminne.com

We will respond to all legitimate requests within 30 days (or within the timeframe required by applicable law).