HEATLUME PRIVACY NOTICE

Effective Date: August 15, 2026

This Privacy Notice explains how Heatlume (“Heatlume,” “we,” “our,” or “us”) handles personal information when you browse our website, place an order, contact customer service, or otherwise interact with our online store.

Our storefront is operated using Shopify’s ecommerce platform. Shopify and other companies that support our store may process certain information as necessary to provide website, payment, security, fulfillment, analytics, and advertising services.

This Privacy Notice applies only to information processed through Heatlume’s store and related customer interactions. It does not govern the independent privacy practices of third-party websites or services.

1. INFORMATION YOU PROVIDE TO US

We collect information that you voluntarily submit when using our store. Depending on your interaction with Heatlume, this may include:

Order and delivery details

When you place or attempt to place an order, we may receive your:

• Name;
• Email address;
• Telephone number;
• Billing address;
• Shipping address;
• Products ordered;
• Order value;
• Shipping selection; and
• Transaction and fulfillment information.

Account details

If customer accounts are available and you create one, we may process your login credentials, saved addresses, account preferences, order history, and other information associated with the account.

Payment-related information

Payments are processed through Shopify and the applicable payment providers. These providers may collect payment card or financial-account information directly.

Heatlume may receive limited payment-related details, such as the payment method, transaction status, billing details, payment confirmation, and fraud-screening results. We do not generally receive or store complete payment card numbers when payments are handled by an independent payment processor.

Customer service communications

If you contact us regarding an order, return, refund, delivery, complaint, or other inquiry, we collect the information contained in your message and any documents, photographs, videos, or other materials you choose to provide.

Please avoid sending sensitive information that is not necessary for us to handle your request.

Reviews and other submissions

If our store allows product reviews, surveys, promotions, or other voluntary submissions, we may collect the information you provide through those features.

Content submitted to a public area of the website may be visible to other visitors. Please do not include confidential information in publicly accessible content.

2. INFORMATION COLLECTED WHEN YOU USE OUR STORE

When you access or interact with the website, certain technical and activity information may be collected automatically by Heatlume, Shopify, or our service providers.

This information may include:

• Internet Protocol address;
• Browser and device type;
• Operating system;
• General location derived from an IP address;
• Device or online identifiers;
• Referring and exit pages;
• Pages and products viewed;
• Search activity;
• Shopping-cart activity;
• Date, time, and duration of visits;
• Interactions with website features; and
• Cookie, pixel, tag, and similar-technology information.

We may combine this information with order or account information where permitted by applicable law.

3. COOKIES AND SIMILAR TECHNOLOGIES

Our store uses cookies and comparable technologies to operate essential website functions, remember preferences, maintain shopping carts, measure website performance, prevent fraud, and understand how customers interact with the store.

Some cookies are necessary for the website to function. Other cookies may support analytics, personalization, or advertising, depending on the services enabled on our store and your location.

Where required by law, non-essential cookies will be used according to the consent choices presented to you. You may also manage cookies through your browser settings. Blocking certain cookies may affect the availability or performance of some website features.

Some browsers and devices support privacy preference signals, including Global Privacy Control. Where legally required and technically supported, qualifying signals may be treated as a request to opt out of certain data sharing or targeted advertising for that browser or device.

4. WHY WE PROCESS PERSONAL INFORMATION

Heatlume may process personal information for the following business and commercial purposes:

Completing orders

We use customer and order information to:

• Confirm and process purchases;
• Verify payments;
• Arrange shipping and delivery;
• Provide order and tracking updates;
• Handle returns, replacements, and refunds; and
• Maintain transaction records.

Operating and improving our store

We may use information to administer the website, maintain customer accounts, understand store performance, troubleshoot technical problems, improve website navigation, and develop a more useful shopping experience.

Customer support

We process communications and order information to answer questions, investigate delivery or product concerns, resolve complaints, and provide requested assistance.

Security and fraud control

Information may be used to authenticate transactions, identify suspicious activity, reduce payment fraud, protect customer accounts, enforce store policies, and maintain the security of our website and business.

Marketing and advertising

Where permitted by law, we may use contact information and shopping activity to send promotional communications, measure advertising effectiveness, understand customer interests, or display more relevant advertisements.

You may unsubscribe from promotional emails by using the unsubscribe link included in the message. Opting out of marketing will not prevent us from sending necessary communications about your orders, account, security, or customer-service requests.

Legal and administrative purposes

We may process information when reasonably necessary to:

• Comply with tax, accounting, recordkeeping, and other legal obligations;
• Respond to lawful requests from courts, regulators, or government authorities;
• Establish, exercise, or defend legal claims;
• Enforce our terms and store policies; and
• Protect the rights, safety, and property of Heatlume, our customers, and others.

5. LEGAL GROUNDS FOR PROCESSING

Where applicable law requires a legal basis, we may process personal information on one or more of the following grounds:

• Contractual necessity: Processing is required to accept, fulfill, or manage your order or another agreement with you.
• Legal obligation: Processing is required to comply with applicable laws and regulatory requirements.
• Legitimate interests: Processing supports the reasonable operation, security, improvement, or protection of our business, provided those interests are not overridden by your rights.
• Consent: You have given permission for a particular use, such as certain marketing or non-essential cookies.
• Legal claims and protection: Processing is necessary to establish, exercise, or defend legal rights or protect individuals from fraud or harm.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect processing that lawfully occurred before consent was withdrawn.

6. WHEN INFORMATION MAY BE SHARED

Heatlume does not disclose personal information indiscriminately. We may provide relevant information to the following recipients when reasonably necessary for the purposes described in this notice:

Shopify

Shopify hosts our storefront and provides technology used to operate the store. Information submitted through our website may be processed by Shopify in accordance with its own privacy practices.

You can review the Shopify Consumer Privacy Policy for additional information.

Payment providers

Payment processors, banks, card networks, and fraud-prevention providers may process transaction and payment information to authorize purchases, prevent fraud, handle disputes, and issue refunds.

Fulfillment and delivery providers

Relevant contact, order, and address information may be provided to suppliers, warehouses, fulfillment partners, customs intermediaries, and shipping carriers so they can prepare, transport, track, and deliver orders.

Technology and professional service providers

We may use companies that provide website hosting, cloud storage, technical support, data analysis, email delivery, customer support, auditing, accounting, legal, or security services.

These providers receive only the information reasonably required to perform their services and are expected to handle it in accordance with applicable obligations.

Advertising and analytics partners

Depending on the tools enabled on our store, limited identifiers and online activity information may be shared with analytics or advertising providers to measure store traffic, assess campaigns, or deliver advertising.

Under certain privacy laws, some advertising-related disclosures may be defined as a “sale,” “sharing,” or use for “targeted advertising,” even when no money is exchanged for the information.

Where applicable, you may submit an opt-out request through our Data Sharing Opt-Out Page.

Legal and protective disclosures

We may disclose information if we reasonably believe it is necessary to comply with law, respond to valid legal process, investigate fraud, protect individuals from harm, enforce our agreements, or defend our legal rights.

Business changes

If Heatlume is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction, relevant information may be disclosed to advisers, prospective parties, or a successor organization, subject to appropriate legal safeguards.

Disclosures requested by you

We may share information when you ask us to do so, authorize a connection with another service, or otherwise provide valid consent.

7. SHOPIFY’S ROLE

Because Heatlume uses Shopify, information about your use of our store may be transmitted to Shopify and processed on infrastructure located in countries other than your own.

Shopify may process some information on our behalf as a service provider and may process other information for its own platform purposes. Heatlume does not control processing activities for which Shopify acts independently.

Requests concerning information controlled directly by Shopify may be submitted through the Shopify Privacy Portal.

8. INTERNATIONAL DATA HANDLING

Heatlume serves customers in different countries. As a result, personal information may be transferred to or processed in a country other than the country where it was originally collected.

Those countries may have privacy laws that differ from the laws in your location. Where required, appropriate safeguards may be used for international transfers, including approved contractual protections, adequacy decisions, or other legally recognized transfer mechanisms.

9. HOW LONG INFORMATION IS KEPT

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as otherwise permitted or required by law.

The applicable retention period may depend on:

• Whether your customer account remains active;
• Whether an order or customer-service matter remains unresolved;
• Tax, accounting, customs, and financial-record requirements;
• Fraud prevention and website security needs;
• Chargeback or payment dispute periods;
• Warranty, complaint, or legal limitation periods; and
• The need to establish, exercise, or defend legal claims.

When information is no longer reasonably required, it may be deleted, anonymized, or retained in a form that no longer identifies you, subject to technical and legal limitations.

10. DATA SECURITY

Heatlume and its service providers use reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, misuse, loss, alteration, or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure. You should use a unique password for your account, protect your login credentials, and avoid sending sensitive information through unsecured communication channels.

If you believe your interaction with Heatlume is no longer secure, please contact us promptly.

11. YOUR PRIVACY OPTIONS AND RIGHTS

Your rights depend on where you live and the laws applicable to your request. Subject to legal conditions and exceptions, you may have the right to:

• Ask whether we process your personal information;
• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of eligible personal information;
• Receive certain information in a portable format;
• Object to or restrict certain processing;
• Withdraw consent when processing is based on consent;
• Opt out of qualifying data sales, sharing, or targeted advertising;
• Appeal a decision we make regarding a privacy request; and
• Complain to an applicable privacy or data-protection authority.

These rights are not unlimited. For example, we may need to keep certain information to complete an order, comply with tax or accounting obligations, prevent fraud, resolve disputes, or establish legal claims.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

12. SUBMITTING A PRIVACY REQUEST

To submit a request regarding your personal information, email us at:

spbgvpwlm@outlook.com

Please clearly describe your request and provide enough information for us to identify the relevant records.

To protect customer information, we may need to verify your identity before completing a request. We will only ask for information reasonably necessary for verification.

Where permitted by law, an authorized agent may submit a request for you. We may require evidence that the agent has permission to act on your behalf and may ask you to confirm your identity directly.

We will respond within the period required by applicable law. If we cannot fulfill all or part of a request, we will provide an explanation when legally required.

13. CHILDREN’S PRIVACY

Heatlume’s store is intended for general adult shopping and is not directed to children below the age at which they can independently consent to the processing of personal information in their jurisdiction.

We do not knowingly request or collect personal information directly from children for the purpose of creating profiles or delivering targeted advertising.

If you are a parent or legal guardian and believe a child has submitted personal information to us without appropriate authorization, contact spbgvpwlm@outlook.com so we can review and, where required, delete the information.

14. EXTERNAL WEBSITES

Our website may contain links to social media platforms, payment services, shipping websites, or other third-party services.

Heatlume does not control the privacy, security, availability, or content practices of independently operated websites. Visiting an external website is subject to that provider’s terms and privacy notice. The appearance of a link on our store does not necessarily mean that Heatlume endorses or controls the linked service.

15. PRIVACY COMPLAINTS

If you have a concern about our handling of your information, please contact us first so we can review the matter.

Depending on your location, you may also have the right to contact your local privacy or data-protection authority or appeal our response through a procedure provided by applicable law.

Residents of the European Economic Area can locate their relevant supervisory authority through the European Data Protection Board.

16. UPDATES TO THIS NOTICE

We may revise this Privacy Notice when our business practices, service providers, website functions, or legal obligations change.

The revised version will be posted on this website with an updated effective date. If required by law, we will provide additional notice or request consent before a material change takes effect.

17. CONTACT HEATLUME

For privacy questions, complaints, or requests concerning your personal information, please contact:

Store: Heatlume
Email: spbgvpwlm@outlook.com
Telephone: +1 408-312-6980
Mailing Address: 1613 Emerson St, Denver, CO 80216, United States

For applicable data-protection purposes, Heatlume is the controller of personal information processed for its own business activities.