General Data Protection Regulation (GDPR) Compliance Statement

Lumexa Decor (“Company”, “we”, “us”, or “our”) is committed to protecting personal data and ensuring compliance with the General Data Protection Regulation (GDPR), effective from May 25, 2018.

1. Purpose of Data Collection

We collect personal data solely for legitimate purposes related to providing and improving our products and services. This includes:

• Processing transactions and orders

• Providing customer support

• Sending communications related to products, promotions, or services

• Improving the functionality and user experience of our website

2. Lawful Basis for Processing

We process personal data in accordance with the lawful bases set out in the GDPR. This includes:

• Obtaining explicit consent from individuals before collecting and using personal data

• Processing data necessary to fulfill a contract or take steps in connection with a contract

3. Data Minimization

We follow the principle of data minimization, ensuring that only personal data necessary for the purpose it was collected is processed.

4. Rights of Individuals

Under GDPR, individuals have the following rights:

• Access their personal data

• Correct any inaccurate or incomplete data

• Request deletion or restriction of processing

• Object to the processing of their data

• Exercise the right to data portability

We ensure that these rights are respected and fulfilled.

5. Data Security

We implement appropriate technical and organizational measures to safeguard personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

6. International Data Transfers

If personal data is transferred to countries outside the European Economic Area (EEA) or to international organizations, we ensure that such transfers comply with GDPR requirements and include necessary safeguards.

7. Data Breaches

In the event of a personal data breach, we will notify the competent supervisory authority within 72 hours of becoming aware, unless the breach is unlikely to result in a risk to individuals’ rights and freedoms.

8. Data Protection Officer

Our Data Protection Officer (DPO) oversees GDPR compliance, manages inquiries from supervisory authorities and data subjects, and monitors our data protection practices.

9. Contact Information

For any questions regarding GDPR compliance or data protection, please contact us at:

Lumexa Decor

Email: support@lumexadecor.com

This GDPR Compliance Statement is governed by the laws of the United States of America.