Política de privacidad
Last updated: May 1, 2026
LumiMemoX operates this online store and website, including all related information, content, features, tools, products and services (collectively, the “Services”). The Services are powered by Shopify, which enables us to provide our store and handle payments and related functions.
This Privacy Policy explains how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services or otherwise communicate with us. Where there is a conflict between our Terms of Service and this Privacy Policy regarding the processing of your personal information, this Privacy Policy prevails.
By using the Services, you acknowledge that you have read and understood this Privacy Policy.
Data controller
For the purposes of the EU General Data Protection Regulation (“GDPR”) and UK GDPR, LumiMemoX is the data controller of the personal information described in this Privacy Policy (except where expressly stated otherwise).
Our contact details are:
LumiMemoX
Avenida de la Paz
Getafe, M, 28925, ES
Email: info@lumimemox.com
Shopify also processes certain personal information about you as an independent controller when it provides its own services (for example fraud detection, analytics across merchants, or payment processing). In those cases, Shopify is responsible for that processing and for handling your rights requests related to it. For more information, please see the section “Relationship with Shopify” below.
Personal information we collect
“Personal information” means any information that identifies, relates to, or can reasonably be linked to an identified or identifiable person. It includes information you provide directly to us and information that is collected automatically when you use the Services.
Because we provide customized digital restoration and video services, this may include images and videos of people, which can be particularly sensitive and personal. Please only upload photos and videos you are allowed to share with us.
We may collect and process the following categories of personal information, as permitted by applicable law:
Identification and contact details
-
Name and surname
-
Billing address and shipping address (where applicable)
-
Email address and phone number
Account information
-
Account login details (such as username and password, if you create an account)
-
Preferences and settings
Order, payment and transaction information
-
Products and services purchased (e.g. HoloStart, HoloStory, HoloGift, HoloSignature)
-
Order history, invoices and transaction details
-
Payment details (handled via our payment provider / Shopify Payments – we do not store full card numbers ourselves)
Content you provide
-
Photos, images, videos, audio clips and any associated metadata that you upload for restoration, colorization or video creation
-
Text notes, instructions and stories you provide about the people and events in the photos
-
Communications with us (emails, messages, support requests)
Device and usage information
-
IP address, browser type, operating system, device identifiers
-
Log data about your visits (pages viewed, time and date, referring pages, actions taken on the site)
-
Approximate location inferred from your IP address
Marketing and communication information
-
Your communication preferences
-
Records of marketing emails sent to you and your interactions with them (such as opens or clicks)
We may also create inferences from this information, for example which products or services may be most relevant to you.
How we obtain personal information
We collect personal information:
-
Directly from you when you:
-
Place an order
-
Upload photos, videos and notes
-
Create or update an account
-
Contact us by email or through forms on the site
-
Subscribe to our newsletter or marketing communications
-
-
Automatically when you use the Services, via:
-
Cookies and similar technologies
-
Logs and analytics tools that help us understand how our site is used
-
-
From service providers and partners, such as Shopify and payment processors, who help us operate the Services and may share limited information with us (for example payment status or fraud checks).
How and why we use your personal information
We process your personal information for the following purposes and legal bases:
1. To provide and improve our Services
Legal bases: performance of a contract (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f)), and, where applicable, consent (Art. 6(1)(a)).
We use your information to:
-
Process your orders and provide the products and services you request (including restoring and colorizing photos and creating videos with sound).
-
Communicate with you about your order, including confirmations, updates, and delivery of digital files.
-
Manage your account and preferences.
-
Provide customer support.
-
Customize your experience on the site (for example, remembering items in your cart or recommending relevant packages).
-
Improve and develop our services, including understanding how customers use our site and which offerings are most helpful.
2. To create respectful, realistic video memories with sound
Legal bases: performance of a contract, legitimate interests, and, where applicable, your consent.
For packages that include video, we use your uploaded photos, your notes, and (where provided) audio preferences to create short memory clips. Movements are gentle and realistic, and any sound or music is selected to support the memory in a respectful way. We do not use your photos to create exaggerated or misleading representations of the people in them.
3. Marketing and communication
Legal bases: legitimate interests and/or consent (where required by law).
We may use your contact details to:
-
Send you news about our services, new packages, or offers you might be interested in.
-
Ask for feedback or invite you to share your experience.
You can opt out of marketing emails at any time by using the “unsubscribe” link in our messages. We will still send you non‑marketing emails where necessary (for example, order confirmations and service updates).
4. Security, fraud prevention and legal compliance
Legal bases: legitimate interests and legal obligations (Art. 6(1)(c) and 6(1)(f) GDPR).
We may use your information to:
-
Keep our website and systems secure.
-
Detect, investigate and prevent fraud or abuse.
-
Comply with legal obligations, respond to lawful requests and protect our rights.
How we share personal information
We do not sell your personal information. We may share it in the following limited circumstances:
-
Service providers and processors
We use trusted third parties to help operate the Services, such as Shopify (store platform), payment processors, hosting providers, email services and analytics tools. These providers process your information on our behalf and only according to our instructions. -
Shopify
Our store is hosted on Shopify. Shopify processes your personal information to provide us with the ecommerce platform and related services, and may also process your data as an independent controller for its own legitimate purposes (for example, improving its services or fraud prevention across merchants). Please see Shopify’s Consumer Privacy Policy and Privacy Portal for more information and to exercise rights directly with Shopify. -
Business partners (limited)
In some cases we may work with partners to help deliver certain aspects of our services (for example specialized printing or shipping partners for HoloGift or HoloSignature). They receive only the information necessary to perform their function. -
Legal and safety reasons
We may disclose personal information when required to do so by law or when we believe in good faith that such action is necessary to comply with legal processes, respond to requests from public authorities, or protect our rights, property, or safety or those of others. -
Business transfers
If we are involved in a merger, acquisition, reorganization or sale of assets, your personal information may be transferred as part of that transaction, subject to appropriate safeguards.
We do not share photos and videos for advertising purposes. We will only use your content for marketing (for example, as a portfolio example) if we have your explicit, written consent.
International transfers
Our store is hosted by Shopify and we may use other service providers that are located outside the European Economic Area (“EEA”) or the UK. This means your personal information may be transferred to countries that may have different data protection rules.
Where we transfer personal information outside the EEA or UK, we will rely on appropriate safeguards, such as:
-
An adequacy decision by the European Commission or UK authorities; or
-
Standard Contractual Clauses approved by the European Commission or equivalent mechanisms under UK law.
You can contact us if you would like more information about international transfers and the safeguards used.
How long we keep your information
We keep personal information only for as long as necessary for the purposes described in this Privacy Policy, including:
-
For as long as you have an account or active relationship with us;
-
For as long as needed to provide the Services and complete your orders;
-
For as long as necessary to comply with legal obligations (such as tax and accounting rules);
-
For as long as needed to resolve disputes and enforce our agreements.
Uploaded photos and videos used for restoration and video creation are generally stored for as long as needed to complete your order and to handle reasonable follow-up (for example, re-download or minor corrections), after which they may be archived or securely deleted in line with our retention practices. If you would like us to delete your content sooner, you can contact us.
Cookies and similar technologies
We use cookies and similar technologies to operate and improve the Services, remember your preferences, and understand how our site is used. Where required by law, we will obtain your consent before setting non‑essential cookies. You can manage your cookie preferences via your browser settings and/or any cookie banner or settings tool we provide.
Your rights under GDPR and UK GDPR
If you are in the European Economic Area or the UK, you have certain rights in relation to your personal information, subject to legal conditions and limitations. These include:
-
Right of access – to obtain confirmation whether we process your personal information and to request a copy.
-
Right to rectification – to have inaccurate or incomplete information corrected.
-
Right to erasure (“right to be forgotten”) – to ask us to delete your information in certain circumstances.
-
Right to restriction of processing – to ask us to limit how we use your information in certain situations.
-
Right to data portability – to receive certain personal information in a structured, commonly used, machine‑readable format and to transmit it to another controller.
-
Right to object – to object, on grounds relating to your particular situation, to processing based on our legitimate interests, including profiling; and to object at any time to processing for direct marketing.
-
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
You can exercise these rights by contacting us at info@lumimemox.com. We may need to verify your identity before responding to your request.
You also have the right to lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available on the website of the European Data Protection Board. If you are in the UK, you can contact the Information Commissioner’s Office (ICO).
Children’s data
Our Services are not intended for children, and we do not knowingly collect personal information from children under the age of 16 (or the relevant age of digital consent in your country). If you believe that a child has provided personal information to us, please contact us and we will take appropriate steps to delete it.
Security
We take reasonable technical and organizational measures to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration or destruction. However, no internet transmission or storage system can be guaranteed to be completely secure.
Please keep your account credentials confidential and contact us immediately if you believe your account has been compromised.
Third‑party websites and services
The Services may contain links to third‑party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy notices of any website you visit.
Relationship with Shopify
Our store is hosted on Shopify. Shopify provides us with the online ecommerce platform that allows us to sell our products and services to you. When you use our store, Shopify collects and processes personal information about you as described in Shopify’s own privacy documentation.
In some cases, Shopify acts as our processor, following our instructions. In other cases, Shopify acts as an independent controller, for example when it uses data across merchants to improve its services or for fraud prevention. To learn more about how Shopify uses your personal information and to exercise your rights directly with Shopify, please visit:
-
Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/app-users
-
Shopify Privacy Portal: https://privacy.shopify.com/
Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example to reflect changes to our practices or for legal, operational or regulatory reasons. When we make changes, we will update the “Last updated” date at the top and, where required by law, provide additional notice.
Contact
If you have any questions about this Privacy Policy, how we process your personal information, or if you wish to exercise your data protection rights, you can contact us at:
Email: info@lumimemox.com
Postal address:
LumiMemoX
Avenida de la Paz
Getafe, M, 28925 , ES