Privacy policy

 

This Privacy Policy describes how Eastern Lux Trading Ltd, operating TalkAboutLUX.com (the “Site”, “Talk About Lux”, “we”, “us”, or “our”), collects, uses, discloses, stores, and otherwise processes your Personal Information when you visit or use the Site, make a purchase, create an account, contact us, interact with our advertising, or otherwise use our services.

For the purposes of the General Data Protection Regulation (“GDPR”) and applicable data protection laws, Eastern Lux Trading Ltd is the data controller of the Personal Information described in this Privacy Policy, except where another party acts as an independent controller as described below.

By using the Site, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will request it separately.

1. WHO WE ARE

Company: Eastern Lux Trading Ltd
Registered address: 7 Orehovski Dol Str., 1000 Sofia, Bulgaria
VAT Number: BG207230162
Company Registration Number: 207230162
Email: sales@talkaboutlux.com
Telephone: +359 894 200 121; +359 890 200 131

If you have questions about this Privacy Policy, our privacy practices, your Personal Information, or would like to exercise your privacy rights, please contact us using the details above.

2. PERSONAL INFORMATION WE COLLECT

The Personal Information we collect depends on how you interact with the Site and our services.

Device and Usage Information

When you visit the Site, certain information may be collected automatically, including:

• IP address;

• browser type and version;

• device type and operating system;

• time zone and approximate location derived from your IP address;

• cookie identifiers and similar technologies;

• pages and products viewed;

• search terms;

• referring and exit pages;

• interactions with the Site;

• information about how you navigate and use our services.

This information may be collected through cookies, pixels, tags, log files, software development kits and similar technologies.

Order and Transaction Information

When you make or attempt to make a purchase, we may collect:

• first and last name;

• billing address;

• shipping address;

• email address;

• telephone number;

• products ordered;

• order and transaction details;

• payment-related information;

• shipping and delivery information;

• returns, refunds and claims information.

Payment information is processed through our payment service providers. We generally do not directly store complete payment card details.

Customer Account Information

If you create or use a customer account, we may process information including:

• name;

• email address;

• telephone number;

• saved addresses;

• order history;

• account preferences;

• authentication and account-related information.

Customer Support and Communications

When you contact us regarding an order, return, complaint, product, warranty request or another matter, we may collect:

• your name and contact details;

• order number;

• correspondence with us;

• photographs, documents or other files you voluntarily provide;

• any other information necessary to respond to your request.

Marketing and Advertising Information

Where permitted by applicable law, we may collect information relating to:

• marketing preferences;

• newsletter subscriptions;

• interaction with marketing emails;

• interaction with our advertisements;

• products viewed or purchased;

• advertising identifiers;

• cookie and tracking preferences.

3. HOW AND WHY WE USE YOUR PERSONAL INFORMATION

We may use Personal Information to:

• provide and operate the Site and our services;

• process and fulfil orders;

• process payments and refunds;

• arrange shipping and delivery;

• provide invoices and order confirmations;

• manage customer accounts;

• communicate with customers regarding orders and services;

• process returns, refunds, complaints and warranty requests;

• provide customer support;

• detect, investigate and prevent fraud, misuse and security incidents;

• maintain the security and integrity of the Site;

• comply with accounting, tax, regulatory and other legal obligations;

• improve the Site, products, services and customer experience;

• perform analytics and understand how customers use the Site;

• measure the performance of our advertising;

• personalize content, advertising and customer experiences where permitted;

• send marketing communications where permitted by law;

• establish, exercise or defend legal claims;

• protect our rights, customers, business and property.

4. LEGAL BASES FOR PROCESSING

Where the GDPR or similar legislation applies, we process Personal Information only where we have an appropriate legal basis.

Performance of a Contract

We process information where necessary to enter into or perform our contract with you, including:

• processing orders;

• processing payments;

• arranging delivery;

• managing returns and refunds;

• communicating about your order;

• providing customer support relating to purchases.

Compliance with Legal Obligations

We process information where necessary to comply with applicable laws, including accounting, taxation, consumer protection, fraud prevention and regulatory requirements.

Legitimate Interests

We may process Personal Information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests may include:

• securing our Site and services;

• preventing fraud and abuse;

• improving our services;

• managing our business operations;

• responding to customer enquiries;

• establishing or defending legal claims.

Consent

Where required, we rely on your consent for activities such as:

• non-essential analytics cookies;

• advertising and tracking cookies;

• certain personalized advertising;

• certain direct marketing communications.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

5. HOW WE SHARE PERSONAL INFORMATION

We may disclose Personal Information to trusted third parties where necessary to operate our business and provide our services.

These may include:

Shopify

Our online store is hosted by Shopify. Shopify processes Personal Information when you visit and interact with our store, make purchases or use Shopify-powered services.

Shopify may process information to provide and improve its services and, where Shopify Network Intelligence and Enhanced Services are enabled, may use information from interactions with our store, Shopify and other merchants to provide enhanced functionality, personalization, analytics, fraud prevention and advertising services.

You can learn more about Shopify's processing of consumer information in the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/consumers

Payment Providers

We share information necessary to process transactions, prevent fraud, issue refunds and provide payment services with payment providers, including Stripe, and other payment providers made available at checkout.

Payment providers may process certain information as independent controllers in accordance with their own privacy policies and legal obligations.

Shipping and Logistics Providers

We may share the information necessary to deliver, track, return or otherwise manage shipments with logistics providers such as:

DHL Express, FedEx, UPS, DPD, Speedy, Econt, Sameday, ACS and other delivery providers used for a particular destination.

Only information reasonably necessary to provide the relevant delivery or logistics service is shared.

Professional and Technical Service Providers

We may share Personal Information with providers that assist us with:

• website hosting and infrastructure;

• IT and security;

• customer service;

• accounting and legal services;

• fraud prevention;

• analytics;

• advertising and marketing;

• consent management;

• email and communications;

• artificial intelligence and content creation tools.

Authorities and Legal Requirements

We may disclose Personal Information where required to comply with applicable laws, regulations, court orders or lawful requests from public authorities, or where reasonably necessary to protect our legal rights, customers, employees, property or services.

6. SHOPIFY NETWORK INTELLIGENCE AND SHOPIFY AUDIENCES

We may use Shopify Network Intelligence and related Enhanced Services, including Shopify Audiences, where enabled and available for our store.

When Shopify Network Intelligence is enabled, Shopify may securely use information from customer interactions with our store together with information from interactions with Shopify and other participating merchants to provide Enhanced Services.

These services may help us and Shopify:

• provide more personalized customer experiences;

• understand how customers interact with our store and advertisements;

• improve products and services;

• prevent fraud;

• identify potentially relevant audiences;

• deliver and measure more relevant advertising.

Where Shopify Audiences is available and used, certain information may be used to create privacy-protected audiences that are transmitted to supported advertising platforms. Other Shopify merchants do not receive direct access to our customer data.

Depending on your location, this processing may require consent or may constitute targeted advertising, sharing or similar processing under applicable privacy laws.

Where required, your choices regarding non-essential cookies and advertising technologies are respected through our consent management mechanisms.

You may also have rights to object to or opt out of certain uses of your Personal Information for personalized or targeted advertising.

For further information about Shopify's processing and privacy choices, please see:

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers

Shopify Privacy Portal:
https://privacy.shopify.com/

7. ANALYTICS AND ADVERTISING

We use analytics and advertising technologies to understand how our Site is used, measure advertising effectiveness and, where permitted, provide more relevant advertising.

These services may include:

Google

We may use services including Google Analytics, Google Ads and Google Tag Manager.

Google Analytics helps us understand how visitors interact with the Site. Google Ads may help us measure advertising performance and provide personalized advertising where consent has been given or otherwise permitted by law.

Google Tag Manager helps us manage analytics and marketing technologies. The tags and services deployed through it may process Personal Information.

For more information, see Google's Privacy Policy:

https://policies.google.com/privacy

You can also learn about Google Analytics opt-out options through the Google Analytics Opt-out Browser Add-on:

https://tools.google.com/dlpage/gaoptout

Meta

We may use Meta Pixel and other Meta advertising technologies to measure advertising effectiveness, understand interactions with our Site and provide advertising on Facebook, Instagram and other Meta services.

These technologies may process information such as browser and device information, IP address, Site interactions, products viewed, purchases and advertising identifiers, subject to your consent where required.

For more information, see Meta's Privacy Policy:

https://www.facebook.com/privacy/policy/

GLAMI and Other Advertising Partners

We may use GLAMI and other advertising, comparison-shopping or marketing partners to measure referrals, conversions and advertising performance and to promote our products.

The exact technologies used may change over time. Where required by law, non-essential advertising and tracking technologies are activated only after you provide consent.

8. COOKIES AND CONSENT MANAGEMENT

Cookies are small files or pieces of information stored on or accessed from your device when you visit a website.

We use cookies and similar technologies for purposes including:

• operating essential Site functionality;

• maintaining shopping carts and checkout sessions;

• remembering preferences;

• authentication and security;

• analytics and performance;

• advertising and conversion measurement;

• personalization.

Cookie Consent

We use Pandectes GDPR Compliance to help manage cookie consent and privacy preferences.

When required by applicable law, non-essential cookies and similar tracking technologies, including analytics and advertising technologies, will not be activated until you provide the required consent.

You can accept or reject categories of non-essential cookies through our cookie banner and change or withdraw your choices at any time through the Cookie Settings link available on the Site.

Withdrawal of consent does not affect processing that lawfully occurred before withdrawal.

Detailed and up-to-date information about cookies and tracking technologies currently used on the Site is available through our Cookie Settings and consent interface.

You may also manage cookies through your browser. Blocking necessary cookies, however, may prevent certain parts of the Site, shopping cart or checkout from functioning correctly.

9. MARKETING COMMUNICATIONS

Where permitted by law, we may send you information about products, services, promotions or offers.

Where consent is required, we will send such communications only after obtaining your consent.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the communication or by contacting us.

Unsubscribing from marketing communications does not prevent us from sending transactional or service-related communications necessary to manage your orders, account, returns or other contractual relationship with us.

10. ARTIFICIAL INTELLIGENCE AND CONTENT CREATION TOOLS

We may use artificial intelligence (“AI”) and AI-assisted technologies as part of our business operations, including tools that assist with:

• creating or editing product presentation imagery;

• generating or modifying backgrounds and visual elements;

• creating virtual models or editorial imagery;

• image enhancement and retouching;

• preparing marketing or creative content;

• translation, drafting and other content-related tasks.

Where information submitted to an AI or AI-assisted service contains Personal Information, we take reasonable steps to limit the information shared to what is necessary for the relevant purpose and process such information in accordance with applicable data protection laws.

AI-assisted presentation or marketing content does not change the official characteristics, specifications or authenticity of the products offered for sale.

Where applicable law requires AI-generated or AI-manipulated content to be identified or labelled, we will provide the required transparency.

We do not use AI systems to make solely automated decisions about customers that produce legal or similarly significant effects, except where expressly disclosed and permitted by applicable law.

11. INTERNATIONAL DATA TRANSFERS

Because we use international service providers and operate an international online store, Personal Information may be processed in countries outside your country of residence, including countries outside the European Economic Area (“EEA”).

Where Personal Information protected by the GDPR is transferred outside the EEA, we use or rely on lawful transfer mechanisms as applicable, which may include:

• European Commission adequacy decisions;

• the EU-U.S. Data Privacy Framework, where applicable;

• Standard Contractual Clauses approved by the European Commission;

• other legally recognized safeguards or transfer mechanisms.

Our service providers may also implement additional technical, contractual or organizational safeguards where appropriate.

Information processed by Shopify and other international providers may be transferred to or processed in countries including Canada and the United States, subject to applicable legal safeguards.

12. DATA RETENTION

We retain Personal Information only for as long as reasonably necessary for the purposes for which it was collected and to comply with our legal, accounting, tax, contractual and regulatory obligations.

Retention periods vary depending on the type of information and the reason for processing.

For example:

• order and transaction information may be retained for the period required by applicable accounting, tax and commercial laws;

• customer service and complaint records may be retained for as long as necessary to resolve the matter and establish or defend legal claims;

• account information may be retained while your account remains active and for an appropriate period afterwards;

• marketing information may be retained until you withdraw consent, opt out, or the information is no longer necessary for the relevant marketing purpose;

• cookie and consent records may be retained for periods necessary to demonstrate and manage your privacy choices.

When Personal Information is no longer required, we will delete, anonymize or otherwise securely dispose of it, subject to applicable legal requirements.

13. SECURITY

We implement reasonable technical and organizational measures designed to protect Personal Information against unauthorized access, loss, misuse, alteration or disclosure.

However, no transmission over the Internet or electronic storage system can be guaranteed to be completely secure.

You are responsible for keeping your account credentials confidential and should contact us if you believe your account or Personal Information has been compromised.

14. AUTOMATED DECISION-MAKING AND FRAUD PREVENTION

We do not generally engage in solely automated decision-making that produces legal effects or similarly significantly affects you within the meaning of Article 22 GDPR.

Shopify, payment providers, fraud-prevention providers and other service providers may use automated technologies to detect and prevent fraudulent or suspicious activity.

These systems may analyze information such as transaction patterns, IP addresses, payment information, device information and previous activity.

Where automated decision-making that produces legal or similarly significant effects is used and applicable law grants specific rights in relation to that processing, we will respect those rights.

15. YOUR RIGHTS UNDER GDPR

If the GDPR applies to the processing of your Personal Information, you may have the following rights, subject to applicable legal conditions and exceptions:

• Right of access – to obtain confirmation of whether we process your Personal Information and receive a copy of it;

• Right to rectification – to request correction of inaccurate or incomplete Personal Information;

• Right to erasure – to request deletion of your Personal Information in certain circumstances;

• Right to restriction – to request restriction of processing in certain circumstances;

• Right to data portability – to receive certain Personal Information in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another controller;

• Right to object – to object to processing based on legitimate interests and, at any time, to processing for direct marketing;

• Right to withdraw consent – where processing is based on consent, to withdraw that consent at any time;

• Rights relating to automated decision-making – where applicable under Article 22 GDPR;

• Right to lodge a complaint with a competent data protection supervisory authority.

We may need to verify your identity before fulfilling certain requests.

Some rights are subject to legal limitations. For example, we may need to retain certain transaction information to comply with tax, accounting or other legal obligations even after receiving a deletion request.

To exercise your rights, contact us at sales@talkaboutlux.com.

16. UNITED STATES AND CALIFORNIA PRIVACY RIGHTS

Residents of certain U.S. states may have additional rights under applicable state privacy laws.

Depending on the law that applies and subject to applicable thresholds, exemptions and definitions, these rights may include the right to:

• know or access categories and specific pieces of Personal Information collected;

• correct inaccurate Personal Information;

• request deletion of Personal Information;

• obtain a portable copy of certain Personal Information;

• opt out of certain targeted advertising;

• opt out of the sale or sharing of Personal Information where those concepts apply;

• limit certain uses and disclosures of sensitive Personal Information where applicable;

• opt out of certain qualifying automated decision-making or profiling activities where applicable;

• appeal certain decisions relating to privacy requests where provided by applicable law;

• receive equal service and not be unlawfully discriminated against for exercising applicable privacy rights.

California Residents

If the California Consumer Privacy Act, as amended (“CCPA”), applies to our processing of your Personal Information, California residents may have additional rights under California law.

Depending on how you interact with the Site, the categories of Personal Information we may collect can include:

• identifiers, such as your name, email address, telephone number, IP address, billing address and shipping address;

• customer records and payment-related information necessary to complete transactions;

• commercial information, including products purchased, viewed or added to your cart and order history;

• internet or other electronic network activity, including browser, device, Site interaction and cookie information;

• approximate geolocation information derived from your IP address;

• information relating to your interactions with our advertising and marketing;

• inferences regarding preferences or interests that may be generated for personalization or advertising purposes;

• other information you voluntarily provide to us.

We use these categories of Personal Information for the purposes described throughout this Privacy Policy, including providing our services, processing and delivering orders, customer support, security and fraud prevention, analytics, improving our services, complying with legal obligations, and advertising and marketing.

Sale, Sharing and Targeted Advertising

We do not sell Personal Information for monetary consideration.

However, certain uses of advertising technologies, cookies, pixels, analytics services, Shopify services, Shopify Audiences or similar technologies may be considered a “sale,” “sharing,” “targeted advertising” or “cross-context behavioral advertising” under certain U.S. state privacy laws, even where no money is exchanged.

Where required by applicable law, you may opt out of such processing through the privacy, cookie or data-sharing controls available on our Site.

Where required by applicable law and supported by our Site, we also recognize applicable browser-based opt-out preference signals, such as Global Privacy Control (GPC).

Sensitive Personal Information

We do not intentionally use or disclose sensitive Personal Information for purposes that would require a separate right to limit its use or disclosure under applicable U.S. privacy laws, except where necessary to provide requested products or services, process payments, maintain security, prevent fraud, comply with applicable law or for other legally permitted purposes.

Exercising U.S. Privacy Rights

To exercise a privacy right available to you under applicable U.S. state law, you may contact us at:

sales@talkaboutlux.com

You may also use any privacy request, Cookie Settings or data-sharing opt-out mechanism made available on the Site.

Where necessary, we may take reasonable steps to verify your identity before processing certain requests. Information submitted for verification will be used only as reasonably necessary to verify and process the request.

Where permitted by applicable law, you may designate an authorized agent to submit a request on your behalf. We may request information reasonably necessary to verify the agent's authority.

We will respond to valid requests within the time required by applicable law. Certain requests may be subject to legal exceptions or limitations.

Where applicable law provides a right to appeal a decision concerning your privacy request, you may submit an appeal by contacting sales@talkaboutlux.com and clearly stating that you wish to appeal a previous privacy-rights decision.

We will not unlawfully discriminate against you for exercising your applicable privacy rights.

17. CHILDREN AND MINORS

The Site and our services are not intended for individuals under the age of 18.

We do not knowingly collect Personal Information from children for purposes inconsistent with applicable law, nor do we knowingly sell or share children's Personal Information in circumstances prohibited by applicable law.

If you are a parent or legal guardian and believe that a child has provided us with Personal Information, please contact us at sales@talkaboutlux.com so that we can review the matter and, where appropriate, delete the information.

18. DO NOT TRACK AND GLOBAL PRIVACY CONTROL

Some browsers offer a “Do Not Track” (“DNT”) setting. Because there is no universally accepted standard governing how websites should respond to DNT signals, we do not necessarily respond to DNT signals unless required by applicable law.

This does not affect any rights available to you under the GDPR or other applicable privacy laws.

Where applicable law requires us to recognize qualifying browser-based opt-out preference signals, such as Global Privacy Control (GPC), we will process those signals in accordance with applicable legal requirements and our technical configuration.

You may also manage your privacy preferences directly through the Cookie Settings and other privacy controls available on the Site.

19. THIRD-PARTY WEBSITES AND SERVICES

The Site may contain links to websites, platforms or services operated by third parties.

We are not responsible for the privacy, security or content practices of third-party websites or services that are not under our control.

When you leave our Site or interact directly with a third-party service, we recommend reviewing that party's privacy policy and applicable terms.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our business practices, technologies, services, legal requirements or regulatory obligations.

When we make changes, we will update the “Last updated” date at the beginning of this Privacy Policy.

Where required by applicable law, we may provide additional notice or request renewed consent before material changes take effect.

We encourage you to review this Privacy Policy periodically.

21. COMPLAINTS

If you have a concern or complaint regarding the way we collect, use, disclose or otherwise process your Personal Information, please contact us first at sales@talkaboutlux.com. We will review your complaint and respond in accordance with applicable data protection laws.

If you are located in the European Union or European Economic Area and are not satisfied with our response, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU/EEA Member State of your habitual residence, your place of work or the place of the alleged infringement.

As Eastern Lux Trading Ltd is established in Bulgaria, the competent data protection supervisory authority in Bulgaria is:

Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia
Bulgaria
Website: https://www.cpdp.bg/

Your right to lodge a complaint with a supervisory authority is without prejudice to any other administrative or judicial remedy available to you under applicable law.

Residents of jurisdictions outside the EU/EEA may also have the right to contact their applicable privacy or data protection regulator in accordance with local law.

Last updated: September 8, 2026