--- Your privacy matters. We want you to know exactly what happens to your personal information when you visit our website, create an account, or place an order with us—and we want to be straightforward about it, not just legally compliant. This Privacy Policy is written in plain language for a simple reason: we believe you deserve to understand what we do with your data without needing a law degree to parse it. That said, this is a legally binding document. When you use our website at www.luckht.shop (hereinafter "the website," "our site," or "we"), you are agreeing to the practices described in this Privacy Policy. Please read it carefully and in full. If anything in this policy is unclear, or if you have a question about how we handle your personal information, please contact us before using the site. Your use of the website following any change to this policy constitutes your acceptance of the updated version. We have tried to keep this document as human-readable as possible while covering everything required by law. Here is a quick summary of the most important things this policy covers. The full details are in the sections below: **What we collect:** Your name, email address, shipping address, billing address, payment information, phone number, device information, browsing behavior, and any other information you voluntarily provide to us. **Why we collect it:** To process and fulfill your orders, communicate with you about your orders, respond to your inquiries, send you marketing communications if you opt in, improve our website and services, detect and prevent fraud, and comply with our legal obligations. **Who we share it with:** Our payment processors, shipping carriers, email service providers, analytics tools, and other service providers who help us operate our business. We do not sell your personal information to third parties. We may also share your information if required by law. **Your rights:** You have the right to access, correct, delete, or restrict our use of your personal information. Depending on where you live, you may have additional rights under your state's privacy laws. California residents have specific rights under the California Consumer Privacy Act (CCPA), which are described in Section 13 of this policy. --- ## 1. Who We Are and How to Contact Us We are luckht. We operate a retail e-commerce business through our website at www.luckht.shop. We sell products directly to consumers in the United States. **Company:** Luckht **Website:** www.luckht.shop **Email:** mieshakellyshilah@gmail.com **Business Hours:** Monday through Friday, 10:00 AM to 6:00 PM Eastern Standard Time (EST), excluding federal holidays observed in the United States **Mailing & Administrative Address:** luckht 22 West 19th Street, New York, NY 10011 United States If you have a question or concern about this Privacy Policy, your personal information, or our data practices, please contact us at **mieshakellyshilah@gmail.com**. We aim to respond to all privacy-related inquiries within **3 Business Days**. If you are a California resident and wish to exercise your rights under the CCPA, please use the same email address and include "California Privacy Rights" in the subject line. --- ## 2. What Information We Collect We collect information about you in several ways. Some of it you give us directly, some of it is collected automatically when you use our website, and some of it comes from third parties. Here is a breakdown of the categories of information we collect. **2.1 Information You Provide to Us Directly** - **Account Registration Information:** When you create an account on our website, you provide us with your name, email address, and a password of your choosing. - **Order and Shipping Information:** When you place an order, you provide us with your shipping address, billing address, and phone number (if requested). Your shipping address is used to deliver your order. Your billing address is used to verify your payment method. - **Payment Information:** When you make a purchase, you provide your credit card number, debit card number, expiration date, security code (CVV), and billing address associated with your payment card. We do not store your full payment card number on our servers. Payment processing is handled by our third-party payment processor, which collects and processes this information on our behalf. - **Communications and Correspondence:** When you send us an email, submit a support request, respond to a survey, or otherwise contact us, we collect the information you provide in your message, including your name, email address, and the content of your communication. - **Product Reviews and User Content:** If you choose to submit a product review, comment, photograph, or other content on our website, we collect the information you submit as part of that content. - **Newsletter and Marketing Subscriptions:** If you opt in to receive our newsletter, promotional emails, or other marketing communications, we collect your email address and your stated preferences about what types of communications you want to receive. - **Contest and Promotion Entries:** If you enter a contest, giveaway, or promotion that we run, we collect the information you provide as part of your entry, which may include your name, email address, mailing address, and date of birth. **2.2 Information Collected Automatically** When you visit our website, certain information is collected automatically through cookies, server logs, and similar tracking technologies. This information is collected whether or not you are logged into an account or have placed an order. - **Device and Browser Information:** The type of device you are using (desktop, mobile, tablet), your operating system, browser type and version, and unique device identifiers such as your IP address. - **Usage and Browsing Information:** The pages and content you visit on our website, the links you click, the search terms you use, the referring URL (how you arrived at our site), the date and time of your visit, and how long you spend on each page. - **Purchase and Cart Behavior:** Items you have added to your shopping cart, products you have viewed, and your order history on our website. - **Error and Crash Reports:** Information about any errors or technical issues you encounter while using our website, including error messages and the circumstances surrounding the error. **2.3 Information from Third Parties** - **Payment Processors:** When you make a payment, our third-party payment processor may share certain information with us, including whether the payment was successful and any decline codes, for the purpose of processing your transaction. - **Shipping Carriers:** When a shipping carrier delivers your order, they may share delivery status updates with us that we relay to you. - **Analytics Providers:** Our analytics providers may share aggregate or de-identified information about website traffic and usage patterns with us. - **Advertising Platforms:** If you interact with one of our advertisements on a third-party platform (such as Google or Facebook), that platform may share certain performance data with us about the ad campaign. We do not knowingly collect personal information about individuals from sources other than the individual directly, unless we have a lawful basis to do so. --- ## 3. How We Use Your Information We use the information we collect for the following purposes, and for no other purpose unless we disclose otherwise at the time of collection. **3.1 Processing and Fulfilling Orders** The primary reason we collect personal information is to fulfill your orders. This includes: verifying and processing your payment; preparing and packaging your order; generating shipping labels; handing your package to the carrier; sending you order confirmations, shipping updates, and delivery notifications; and resolving any order-related issues, including returns, refunds, and replacements. Your shipping address is shared with the carrier to deliver your package. Your email address is used to send you transactional emails about your order, including order confirmation, shipment tracking, and delivery confirmation. Your phone number, if collected, may be shared with the carrier in the event that the carrier needs to contact you regarding delivery. **3.2 Customer Service and Support** We use your information to respond to your questions, process your requests, investigate concerns, and provide support. When you contact us by email, we use your email address to reply to you and your order information to look up your account and assist you with your inquiry. **3.3 Account Management** If you create an account with us, we use your account information to manage your account, allow you to view your order history, save your preferences, and provide a personalized experience when you return to our website. **3.4 Marketing Communications** If you opt in to receive marketing communications from us, we use your email address to send you newsletters, promotional offers, product updates, and other marketing messages. We will only send you marketing communications if you have given us your express consent to do so. You can unsubscribe from marketing emails at any time by clicking the unsubscribe link at the bottom of any marketing email we send you, or by contacting us directly at **mieshakellyshilah@gmail.com**. Please note that even if you opt out of marketing emails, we may still send you transactional emails related to your orders, such as order confirmations, shipping notifications, and responses to your inquiries. Transactional emails are not marketing communications and are not subject to your marketing opt-out preference. **3.5 Website Improvement and Analytics** We use automatically collected information—device data, browsing behavior, usage patterns—to understand how visitors use our website, identify which pages are most and least popular, diagnose technical issues, and make improvements to our website's functionality, design, and user experience. We use third-party analytics tools (such as Google Analytics) to help us analyze this data. These tools may collect information about your use of our website and share it with us in aggregate form. The information collected by these tools is generally de-identified or anonymized to the extent possible, but it may include your IP address and browsing behavior on our site. **3.6 Fraud Detection and Prevention** We use your information—including your device information, IP address, browsing behavior, payment information, and order data—to detect, investigate, and prevent fraudulent transactions and other unauthorized or illegal activity on our website. This includes monitoring for patterns of suspicious behavior, such as multiple failed payment attempts, orders from IP addresses associated with fraudulent activity, or orders that exceed typical order values. If we suspect that a transaction is fraudulent or unauthorized, we may place a temporary hold on the order, request additional verification from you, or cancel the order entirely. We may also share certain information with our payment processor or law enforcement authorities if we believe fraud or illegal activity has occurred. **3.7 Legal Compliance** We may use and disclose your information if we are required to do so by law, regulation, court order, subpoena, or other legal process, or if we believe in good faith that such disclosure is necessary to: comply with a legal obligation; protect our rights, property, or safety, or the rights, property, or safety of others; prevent or investigate possible wrongdoing in connection with the website; or respond to an emergency that poses a threat to the safety of any person. **3.8 Other Uses** If we intend to use your information for a purpose that is not described in this Privacy Policy, we will notify you in advance and, where required by law, obtain your consent before using your information for that new purpose. --- ## 4. Cookies and Tracking Technologies Our website uses cookies and similar tracking technologies to collect and store information about your browsing behavior and preferences. Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, remember your preferences, and provide site owners with information about how visitors use their site. **4.1 Types of Cookies We Use** - **Strictly Necessary Cookies:** These cookies are essential for the website to function properly. They enable core functionality such as page navigation, secure areas access, shopping cart operations, and order processing. Without these cookies, certain services you have requested cannot be provided. These cookies do not store any personally identifiable information. They are set by default and cannot be disabled, as disabling them would break the website's basic functionality. - **Performance Cookies:** These cookies collect anonymous information about how visitors use our website—such as which pages are visited most frequently, whether error messages are displayed, and how users navigate through the site. The data collected by these cookies is aggregate and anonymous. We use this information to understand how visitors use our site and to make improvements to the site's functionality. We do not use this information to identify individual users. - **Functionality Cookies:** These cookies allow our website to remember choices you make (such as your preferred language, region, shipping address if saved to your account, or display preferences) and provide enhanced, personalized features. These cookies may also be used to remember changes you have made to text size, fonts, and other customizable parts of the website. The information these cookies collect may be anonymized and they cannot track your browsing activity on other websites. - **Targeting and Advertising Cookies:** We may use third-party advertising platforms (such as Google Ads and Facebook Pixel) to serve advertisements about our products on other websites you visit. These platforms use cookies to track your browsing behavior across multiple websites and over time, building a profile of your interests so that they can show you relevant advertisements. We do not control these cookies. You can opt out of interest-based advertising through the settings of your browser, through the advertising platform's opt-out pages, or through the Digital Advertising Alliance's opt-out portal at www.aboutads.info/choices. **4.2 Managing Your Cookie Preferences** Most web browsers allow you to control cookies through their settings, which are typically found in the "Options," "Settings," or "Preferences" menu of your browser. You can also refer to your browser's help documentation. Please note that if you disable certain cookies, some features of our website may not function properly. **4.3 Do Not Track Signals** Our website does not respond to "Do Not Track" browser signals at this time. Because there is no universal standard for how Do Not Track signals should be interpreted, we treat all browsing data as described in this Privacy Policy regardless of whether a Do Not Track signal is received. --- ## 5. How We Share Your Information We do not sell your personal information to third parties for their own marketing purposes. That is a firm commitment, not a legal technicality. The only times we share your information with third parties are described in this section. **5.1 Service Providers** We share your information with trusted third-party service providers who perform functions on our behalf, including: - **Payment Processing:** Our payment processor handles credit card and debit card transactions on our behalf. They collect, process, and store your payment information according to their own privacy policy. We do not store your full payment card number on our servers. - **Shipping and Fulfillment:** We share your shipping address and contact information with the carrier (such as USPS, UPS, FedEx, or DHL) to enable them to deliver your package and contact you if needed. - **Email Marketing:** We use third-party email service providers to send transactional emails and marketing communications on our behalf. They process your email address and the content of the email according to their own privacy policies. - **Website Hosting and Analytics:** Our website hosting provider and analytics tools have access to server logs and usage data to the extent necessary to provide their services. - **Customer Support Software:** When you contact us, our customer support software may log and store your communication and account information to help us assist you. All of our service providers are contractually obligated to use your information only for the specific purpose of providing the service they provide to us, and to protect your information with appropriate security measures. **5.2 Legal Requirements** We may share your information if required to do so by law, regulation, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to: comply with legal obligations; protect the safety of any person; prevent or investigate fraud or other wrongdoing; or enforce our Terms of Service or other agreements. **5.3 Business Transfers** If luckht is involved in a merger, acquisition, sale of all or substantially all of its assets, bankruptcy proceeding, or similar transaction, your personal information may be transferred as part of that transaction. We will notify you via email and through a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy. **5.4 With Your Consent** We may share your information with third parties in ways not described in this policy if we have your express consent to do so. --- ## 6. Data Retention We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to provide you with our products and services, comply with our legal obligations, resolve disputes, and enforce our agreements. Here are the specific retention periods we apply: - **Order and Transaction Data:** We retain your order history, payment information, and shipping details for a minimum of **5 years** from the date of your last order. This period is based on tax record retention requirements, fraud detection needs, and warranty-related inquiries. - **Account Information:** If you create an account, we retain your account information for as long as your account remains active and for a period of **2 years** after your last login or activity, whichever is later. If you request account deletion, we will delete your account information within **30 days** of the request, subject to the exceptions described below. - **Customer Service Communications:** We retain records of your communications with our customer service team for **3 years** from the date of the last communication. - **Marketing Data:** If you have opted in to receive marketing communications, we retain your email address and marketing preferences until you unsubscribe or withdraw your consent. After you unsubscribe, we retain your email address on a suppression list to ensure we do not send you marketing emails again. - **Automatically Collected Data:** Browsing data, device information, and analytics data collected through cookies and similar technologies is retained for a period of **2 years** from the date of collection. **Exceptions:** We may retain your information for a longer period than stated above if: (a) it is required by law or legal process; (b) we are investigating a potential fraud, security incident, or other misuse of the website; (c) we have an ongoing or anticipated dispute related to your account or an order you placed; or (d) we have another legitimate business purpose that requires extended retention. When your personal information is no longer needed for the purposes described in this section, we will securely delete, anonymize, or aggregate it in a manner that it can no longer be linked back to you. --- ## 7. Data Security We take the security of your personal information seriously. We implement and maintain a variety of administrative, technical, and physical security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. **7.1 Technical Security Measures** - **Encryption in Transit:** All data transmitted between your browser and our website is encrypted using **SSL/TLS** (Secure Sockets Layer / Transport Layer Security). This is indicated by the padlock icon and "https://" prefix in your browser's address bar when you are on a secure page of our website. - **Encryption at Rest:** Sensitive data, including payment information and account credentials, is stored in encrypted form using industry-standard encryption algorithms. - **Access Controls:** Access to personal information on our systems is restricted to authorized personnel only, and is governed by role-based access controls. Each employee or contractor who has access to personal information has been trained on data privacy and security obligations. - **Network Security:** Our systems are protected by firewalls, intrusion detection systems, and other network-level security controls. **7.2 Administrative and Organizational Measures** - We require all employees and contractors who handle personal information to sign confidentiality agreements. - We conduct periodic security awareness training for our team. - We limit the amount of personal information collected to what is strictly necessary for each purpose. - We regularly review and update our security practices to reflect current threats and best practices. **7.3 Limitations of Security** No system is completely secure. While we are committed to protecting your personal information, we cannot guarantee that our security measures will prevent every unauthorized access, data breach, or interception. Any transmission of personal information over the internet is done at your own risk. Once we receive your information, we use commercially reasonable efforts to protect it, but we cannot guarantee the security of information transmitted to or from our website. **7.4 Data Breach Notification** If we become aware of a data breach that has compromised your personal information, we will notify you in accordance with applicable law. We will send an email to the address associated with your account, and we will post a notice on our website, describing the nature of the breach, the types of information that may have been affected, the steps we are taking to address the breach, and what you can do to protect yourself. --- ## 8. Third-Party Links Our website may contain links to third-party websites, services, or applications that are not operated by us—including social media platforms, advertising networks, and other websites. If you click on a link to a third-party website, you will be redirected to that third party's site. We have no control over, and are not responsible for, the privacy practices, content, or security measures of any third-party website. Your use of third-party websites is governed by that third party's own privacy policy and terms of service. We strongly encourage you to review the privacy policy of any third-party website you visit. This Privacy Policy applies only to information collected by luckht on our website. --- ## 9. Children's Privacy Our website is not directed to, and we do not knowingly collect personal information from, individuals under the age of 18. If you are under the age of 18, please do not use our website, create an account, or provide any personal information to us. If we learn that we have collected personal information from an individual under the age of 18 without verifiable parental consent, we will take immediate steps to delete that information as soon as possible. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at **mieshakellyshilah@gmail.com**. --- ## 10. International Data Transfers We are a United States–based company and we store and process all personal information on servers located in the United States. Our service providers may also store and process data in the United States and in other countries where they operate. If you are located outside the United States, please be aware that your personal information will be transferred to, stored in, and processed in the United States, which may have different data protection laws than your country of residence. By using our website and providing us with your personal information, you consent to this transfer. --- ## 11. Your Rights and Choices You have the following rights regarding your personal information. To exercise any of these rights, please contact us at **mieshakellyshilah@gmail.com** with your request. We will respond to your request within the timeframe required by applicable law. **11.1 Right to Access** You have the right to request that we disclose what personal information we have collected about you, including: the categories of personal information; the specific pieces of personal information we have collected; the sources of that information; the purposes for which we collected it; and the categories of third parties with whom we have shared it. We will provide this information to you in a portable and, to the extent technically feasible, readily usable format. **11.2 Right to Correct** You have the right to request that we correct inaccurate personal information we hold about you. If you have an account, you can update much of this information yourself by logging into your account. For information you cannot update yourself, please contact us and we will make the correction. **11.3 Right to Delete** You have the right to request that we delete personal information we have collected about you, subject to certain exceptions. For example, we may retain your information if it is needed to complete a transaction you have initiated, to comply with a legal obligation, to resolve a dispute, or to enforce our agreements. We will notify you if we are unable to fulfill a deletion request and explain the reason. **11.4 Right to Opt Out of Marketing Communications** You have the right to opt out of receiving marketing communications from us at any time. To unsubscribe from marketing emails, click the unsubscribe link at the bottom of any marketing email we send you, or send an email to **mieshakellyshilah@gmail.com** with "Unsubscribe" in the subject line. We will process your opt-out request promptly. **11.5 Right to Restrict Processing** You have the right to request that we restrict our use of your personal information in certain circumstances—for example, if you contest the accuracy of the information, or if you have objected to our processing and we are considering whether our legitimate interests override your objection. **11.6 Right to Object** You have the right to object to our processing of your personal information in certain circumstances, including if we are processing your information based on our legitimate business interests. If you make such an objection, we will stop processing your information unless we can demonstrate compelling legitimate grounds for the processing that override your interests, or if we need the information to establish, exercise, or defend a legal claim. **11.7 Non-Discrimination** We will not discriminate against you in any way for exercising any of the rights described in this section. Exercising your privacy rights will not result in: denial of goods or services; charging you different prices or rates; providing a different level of quality of goods or services; or suggesting that you may receive a different price or quality of goods or services. --- ## 12. California Residents: Your CCPA Rights If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information. This section describes those rights and how to exercise them. **12.1 What We Collect (Categories of Personal Information)** In the preceding 12 months, we have collected the following categories of personal information, as defined under the CCPA/CPRA: - **Identifiers:** Name, email address, postal address, phone number, IP address, account username. - **Commercial Information:** Records of products purchased, order history, payment information, shipping information. - **Internet and Electronic Network Activity:** Browsing history, search history, device information, cookie data, and other information about your interaction with our website. - **Geolocation Data:** General geographic location inferred from your IP address (not precise GPS location). - **Professional or Employment-Related Information:** In limited circumstances, such as if you apply for a job with us. - **Inferences:** Profile reflecting your preferences, characteristics, and behavior based on the information collected. **12.2 Sources of Personal Information** We collect personal information from the following sources, as described in Section 2 of this Privacy Policy: - Directly from you (account registration, orders, communications) - Automatically through your use of our website (cookies and tracking technologies) - From third-party service providers (payment processors, shipping carriers, analytics providers) **12.3 Business Purposes for Collection** We collect personal information for the business purposes described in Section 3 of this Privacy Policy: order processing, customer service, account management, marketing, website analytics, fraud prevention, and legal compliance. **12.4 Third-Party Sharing** We share personal information with the categories of third parties described in Section 5 of this Privacy Policy: payment processors, shipping carriers, email service providers, analytics providers, and customer support software. We do not sell your personal information to third parties. We have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months. **12.5 CCPA-Specific Rights** In addition to the general rights described in Section 11, California residents have the following specific rights under the CCPA/CPRA: - **Right to Know:** You may request that we disclose: the categories and specific pieces of personal information we have collected about you in the preceding 12 months; the categories of sources of that information; the business purposes for which we collected it; and the categories of third parties with whom we shared it. You may make this request twice per 12-month period. - **Right to Delete:** As described in Section 11.3. - **Right to Correct:** As described in Section 11.2. - **Right to Limit Use of Sensitive Personal Information:** We do not use sensitive personal information (as defined under the CPRA) for purposes that require you to be given this right to limit. - **Right to Know About Automated Decision-Making:** You have the right to know if we use automated decision-making processes that produce significant effects on you. We use automated systems for fraud detection and payment processing, as described in this policy. - **Right of Action:** If we experience a data breach of certain categories of personal information, you may have the right to seek remedies under the California Confidentiality of Medical Information Act. **12.6 How to Submit a CCPA Request** To exercise your CCPA rights, please contact us at **mieshakellyshilah@gmail.com** with: - Your full name and email address - The nature of your request (access, deletion, correction, or other) - A description of the information you are requesting (for access or correction requests) - A statement confirming you are a California resident We will verify your identity before processing your request. We may ask you to provide information we already have on file to verify your identity. If you have an account with us, we will typically verify your identity by logging you in. If you do not have an account, we may ask you to confirm information such as your email address, recent order number, or other details. We will respond to your CCPA request within **45 days** of receiving it. If we need additional time (up to 90 days total), we will notify you and explain the reason for the extension. **12.7 Authorized Agent** You may authorize an agent to submit a CCPA request on your behalf. If you use an authorized agent, we may require you to: (a) provide the authorized agent with written permission to submit the request; and (b) verify your own identity directly with us. We will deny a request from an authorized agent who does not submit proof of authorization. --- ## 13. Nevada Residents If you are a Nevada resident, you have the right to direct us not to make any sale of your personal information to third parties. As stated in this Privacy Policy, we do not sell your personal information. If this changes, we will update this Privacy Policy and provide you with the opportunity to opt out. --- ## 14. Changes to This Privacy Policy We reserve the right to update or modify this Privacy Policy at any time, for any reason, without prior notice to you. Changes take effect immediately upon posting on this page. The "Last Updated" date at the top of this page reflects the date of the most recent revision. If we make material changes to this Privacy Policy—such as changes to what information we collect, how we use it, who we share it with, or your privacy rights—we will make reasonable efforts to notify you, which may include: sending an email to the address associated with your account; posting a prominent notice on our website; or updating the "Last Updated" date with a clear description of the change. Your continued use of our website after any change to this Privacy Policy constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated Privacy Policy, your sole remedy is to stop using our website and, if you have an account, to delete your account. We encourage you to review this Privacy Policy periodically, especially before providing any new personal information. --- ## 15. Questions and Contact If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us before taking any other action. Most issues can be resolved quickly through a direct conversation. **Website:** www.luckht.shop **Email:** mieshakellyshilah@gmail.com **Business Hours:** Monday through Friday, 10:00 AM to 6:00 PM EST (excluding federal holidays) **Mailing & Administrative Address:** luckht 22 West 19th Street, New York, NY 10011 United States If you are a California resident and believe we have not resolved your privacy concern, you may also file a complaint with the **California Privacy Protection Agency (CPPA)** at https://cppa.ca.gov/. --- *By using www.luckht.shop, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein.*
