Privacy Policy

1. Overview

This policy explains how Luxuries Directory Inc. ("Lux," "we," "us") collects, uses, shares, and protects personal information when you visit websitebylux.com, buy or use our Services, or make a purchase under our other trade name, LUXORDERS, which is a brand of the same legal entity. We do not sell personal information.

2. Information We Collect

We do not knowingly collect sensitive data (such as government IDs, health, or biometric data). Please do not upload it unless necessary.

3. How and Why We Use Information

• Provide the Services: build, host, maintain, and support websites; create accounts; deliver what you order (contract).
• Process payments: charge cards, issue refunds, handle disputes, and keep transaction records for all our trade names (contract, legal obligation).
• Security and fraud prevention: verify identity, detect abuse, and protect systems (legitimate interests, legal obligation).
• Communicate: service notices, receipts, support, and, with consent where required, marketing and SMS (consent, legitimate interests).
• Improve and analyze: measure performance, troubleshoot, and develop features, including our AI-assisted tools (legitimate interests).
• Legal compliance: tax, accounting, and responding to lawful requests (legal obligation).

For users in the EU, UK, and similar regions, the parenthetical shows the legal basis we rely on.

4. Artificial Intelligence

We use AI systems to help design and build websites and to power features such as chatbots. Content you submit may be processed by AI service providers for those purposes under agreements that restrict their use. Do not submit confidential or sensitive information you would not want processed this way. AI-generated output is reviewed by us but may be imperfect.

5. Payment Processing

Payments are processed by Stripe, which acts as an independent controller for some data (such as fraud prevention and compliance) under its own privacy policy at stripe.com/privacy. Purchases under our LUXORDERS trade name are processed by Lux through Stripe in the same way. We receive the payer's name, contact details, billing information, order details, and payment status, and use them to fulfill the purchase. We keep payment records for legal and accounting purposes.

6. How We Share Information

We share information only with:

• Service providers that process data for us: payment processors (Stripe), hosting and infrastructure, AI, email and SMS delivery, analytics, security, and customer support tools, bound by confidentiality and data-protection terms.
• Legal and safety recipients when required by law or to protect rights, safety, and to prevent fraud.
• Successors in a merger, acquisition, financing, or sale of assets, with notice where required.
• Others with your direction or consent.

We do not sell personal information or share it for cross-context behavioral advertising. Mobile numbers and SMS opt-in consent are never shared with third parties or affiliates for their marketing.

7. Cookies and Tracking

We use essential cookies (login, security, checkout), preference cookies, and analytics cookies. You can manage cookies through your browser and, where required, our cookie banner. We honor the Global Privacy Control (GPC) signal as a request to opt out of sale or sharing, though we do not sell or share. We do not respond to "Do Not Track" signals, as no standard exists.

8. Retention

We keep personal information only as long as needed for the purposes above: account data while your account is active plus up to 30 days after closure; transaction and tax records for at least 7 years; support records for up to 3 years; SMS consent records for at least 5 years; and security logs for up to 12 months. We then delete or de-identify it, unless law requires longer retention.

9. Security

We use encryption in transit, access controls, hashed passwords, monitoring, and least-privilege practices consistent with the New York SHIELD Act. No system is perfectly secure. If a breach affects your information, we will notify you and authorities as required by law.

10. Your Rights

All users: You may access, correct, or ask us to delete your information, and opt out of marketing at any time using unsubscribe links, or by replying STOP to texts.

California (CCPA/CPRA): You have the right to know what we collect, use, disclose, and share; to delete; to correct; to limit use of sensitive personal information (we do not use it beyond providing the Services); to opt out of sale or sharing (we do neither); and not to be discriminated against for exercising these rights. In the past 12 months we collected the categories listed in Section 2 and disclosed them for business purposes to the recipients in Section 6.

EU/UK/EEA (GDPR): You have the right to access, rectify, erase, restrict, or object to processing, to data portability, to withdraw consent at any time, and to lodge a complaint with your local data protection authority.

Other U.S. states (such as Virginia, Colorado, Connecticut, and Texas) provide similar rights and a right to appeal a denial.

To exercise rights: email support@luxvrs.com with the subject "Privacy Request." We may verify your identity and will respond within 30 to 45 days, or the period required by law. Authorized agents may submit requests with proof of authority.

11. International Transfers

We are based in the United States, and your information will be processed there and in other countries where our providers operate. Where required, we use safeguards such as Standard Contractual Clauses for transfers from the EU, UK, or Switzerland.

12. Children

Our Services are for people 18 and older. We do not knowingly collect information from children under 13 (or under 16 where required). If you believe a child has given us information, contact us and we will delete it.

13. Your Website's Visitors

If your site collects information from your own customers, you decide why and how it is used. You are the controller (business) and Lux is your processor (service provider). You are responsible for your own privacy notice and consents. Contact us to put a data processing addendum in place.

14. Third-Party Links

Our sites may link to other sites. We are not responsible for their privacy practices.

15. Changes

We may update this policy. We will post the revised version with a new date and, for material changes, notify you by email or on the site.

16. Contact

Luxuries Directory Inc. · 329 Miller Place, Mount Vernon, New York · support@luxvrs.com