Legal & Privacy

Privacy Policy

LumiScrubs is operated by {{LEGAL_ENTITY}}, a {{LEGAL_STATE}}-registered company. This policy explains what personal data we collect, how we use it, with whom we share it, and what choices you have. We do not sell personal data.

Effective date: May 17, 2026. Last updated: May 17, 2026.

1. What we collect

We collect personal data you actively provide and limited technical data your browser sends. We do not collect special categories of personal data such as health, biometric, or government-issued identifiers.

• You give us: name, shipping address, email, phone number when you place an order, request a team quote, contact support, or sign up for marketing emails.
• You give us for team orders: staff roster (names, sizes, embroidery preferences), clinic name, billing address, contact role.
• Browser/device sends automatically: IP address, user agent, language, referring URL, cookies and similar identifiers.
• Payment data: processed directly by {{PAYMENT_PROCESSOR}} (WooPayments / Stripe). LumiScrubs receives a transaction confirmation, the last four digits of the card, and the billing address — never the full card number, CVV, or expiry.
• Email marketing: if you subscribe to our list, your email address is processed by {{ESP_NAME}} (our email service provider). We track open and click events on our own emails so we can improve them.

2. How we use it

We use your personal data only for the purposes below.

• Fulfill and ship orders (production handoff, courier label, tracking, customs).
• Respond to support emails — replies arrive within 12 hours Mon–Sat from founder Saive directly.
• Process refunds, returns, exchanges, and quality-guarantee claims under our Shipping & Returns and 365-Day Quality Guarantee policies.
• Run team-order workflows (sample kits, roster collection, embroidery proof, reorders).
• Send transactional emails (order confirmation, shipping notifications, delivery confirmation).
• Send marketing emails only if you opted in.
• Detect and prevent fraud, abuse, and policy violations.
• Comply with legal obligations (tax filings, accounting records, lawful requests).

3. With whom we share it

We share limited data only as needed to operate the business. We do not sell personal data and we do not allow our service providers to use your data for their own marketing.

• Production / fulfillment: overseas production partner (for order line items and shipping label only), SF Express International (for tracked transit).
• Payment processing: {{PAYMENT_PROCESSOR}}.
• Email service: {{ESP_NAME}}.
• Web hosting: {{HOSTING_PROVIDER}}.
• Analytics: minimal first-party page-view counts via our hosting platform. No third-party advertising trackers.
• Legal: if compelled by valid court order or to protect rights, safety, and property.

4. Your rights

You can request the following at any time by emailing support@lumiscrubs.com:

• Confirmation of what personal data we hold about you.
• A copy of that data.
• Correction of inaccurate data.
• Deletion of your account and associated data (subject to legal retention requirements for tax and accounting).
• Unsubscribe from marketing emails (link in every marketing email; subscription stops within 24 hours).
• Refusal of cookies via your browser settings (see our Cookies Policy).

If you are a California resident, you also have rights under the CCPA / CPRA. If you are in the EU/UK, you have rights under the GDPR. Email us and reference the applicable law; we respond within 30 days.

5. Data retention

We keep order and customer records for as long as needed to provide warranty service (up to 365 days from purchase) and as required by tax law (typically 7 years). Marketing email subscriber data is kept until you unsubscribe, then deleted within 30 days.

6. International transfers

Orders ship from our overseas production. To fulfill an order placed by a US customer, we transfer order data (your name, shipping address, line items) to the production location for label generation. We do not transfer payment data, marketing preferences, or any data beyond what is needed for fulfillment.

7. Children

LumiScrubs is intended for working professionals and clinic teams. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided data to us, email us immediately and we will delete it.

8. Changes to this policy

If we change this policy materially we will post the new version here and update the "Last updated" date above. If you are an active customer, we will email you when changes affect your account.

9. Contact

Email support@lumiscrubs.com with any privacy questions. Replies arrive within 12 hours Mon–Sat from Saive directly. Postal address: {{LEGAL_ADDRESS}}.