Introduction

Lumex Shift ("we," "our," "us," or "Company") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with our website, services, and interactions with you.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our services. We encourage you to review this policy regularly, as we may update it from time to time.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, mailing address, and country when you contact us, register for services, or subscribe to our newsletter.
• Account Information: Username, password, and profile details when creating an account on our platform.
• Communication Information: Contents of messages, emails, or inquiries you send us, including feedback, questions, and support requests.
• Transactional Information: Payment details, billing address, order history, and receipts when you purchase our services or products.
• Preference Information: Your interests, preferences, dietary restrictions, accessibility needs, and other details you share to help us personalize your experience.
• Sensitive Information: With your explicit consent, we may collect information about health conditions, meditation experience, or personal circumstances relevant to customizing your service.

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain information through cookies, pixels, and similar technologies:

• Device Information: Device type, operating system, browser type, IP address, and unique device identifiers.
• Usage Information: Pages visited, links clicked, time spent on pages, referral source, and navigation patterns.
• Location Information: Approximate location based on IP address (not precise GPS location).
• Behavioral Information: Interaction patterns with our content, video viewing duration, and feature engagement.

1.3 Information from Third Parties

We may receive information about you from third parties, including:

• Payment processors and financial institutions for transaction verification
• Analytics providers to understand website usage patterns
• Marketing partners for targeted communication with your consent
• Other users who refer you to our services

2. How We Use Your Information

We use the information we collect for legitimate business purposes and with your consent where required:

• Service Delivery: To provide, maintain, and improve our services, process transactions, and fulfill your requests.
• Communication: To send transactional emails, respond to inquiries, provide customer support, and send administrative notices.
• Personalization: To tailor your experience, recommend relevant content, and customize communications based on your preferences.
• Marketing: To send promotional materials, newsletters, and updates about our services (only with your consent).
• Research and Analytics: To analyze usage patterns, understand user preferences, and improve website functionality and service offerings.
• Legal Compliance: To comply with legal obligations, respond to lawful requests from authorities, and prevent fraud or misuse.
• Safety and Security: To protect our platform, prevent unauthorized access, and maintain data security and integrity.
• Dispute Resolution: To address complaints, resolve disputes, and enforce our agreements.

3. Information Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With vendors, contractors, and service providers who assist in our operations (e.g., payment processors, hosting providers, analytics services). These parties are bound by confidentiality agreements.
• Business Partners: With affiliated organizations and instructors involved in delivering our services, under strict confidentiality terms.
• Legal Requirements: When required by law, court order, or government request, we may disclose information to comply with legal obligations.
• Business Transfer: In the event of merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: When you explicitly authorize us to share your information for specific purposes.
• Safety and Protection: To protect our rights, privacy, safety, or property, and that of our users and the public.

We require all third-party recipients to maintain the confidentiality and security of your personal information and use it only for the purposes we specify.

4. Data Retention

We retain your personal information for as long as necessary to provide our services, fulfill the purposes outlined in this policy, and comply with legal obligations. Retention periods vary depending on the type of information and the purpose:

• Account Information: Retained while your account is active and for a reasonable period afterward for business purposes.
• Transactional Information: Retained for the duration of your service relationship plus required record-keeping periods (typically 7 years).
• Marketing Communications: Retained until you unsubscribe or request deletion.
• Website Analytics: Typically retained for 12-24 months unless extended for legitimate business reasons.

After the retention period, we securely delete or anonymize your information. However, we may retain certain information longer when necessary to comply with legal obligations or resolve disputes.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and gather usage information. Types of cookies we use include:

• Essential Cookies: Required for website functionality, security, and basic services.
• Analytics Cookies: Help us understand how visitors use our website to improve performance.
• Marketing Cookies: Enable personalized advertising and track campaign effectiveness.
• Preference Cookies: Remember your settings and preferences for future visits.

You can control cookie preferences through our cookie banner or browser settings. Disabling cookies may limit certain website functionality. For detailed information, see our Cookie Policy.

6. Your Privacy Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You have the right to access and receive a copy of your personal information.
• Correction: You may request correction of inaccurate or incomplete information.
• Deletion: You have the right to request deletion of your personal information, subject to certain legal exceptions.
• Portability: You may request your information in a portable format.
• Opt-Out: You can opt out of marketing communications and certain data processing activities.
• Objection: You may object to specific types of data processing.

To exercise these rights, contact us using the information in the "Contact Us" section. We will respond to your request within 30 days or as required by applicable law.

7. Data Security

We implement comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Secure password authentication and access controls
• Regular security audits and vulnerability assessments
• Firewalls and intrusion detection systems
• Employee training on data protection and privacy practices
• Contractual obligations with service providers to maintain security

While we strive to protect your information using industry-standard security practices, no security system is completely foolproof. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials.

8. Third-Party Links and Services

Our website may contain links to third-party websites and services that are not operated by Lumex Shift. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party services before providing your information. Your use of third-party services is governed by their terms and privacy policies.

9. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided information to us should contact us immediately.

For users between 13 and 18 years old, we provide additional privacy protections and limit data collection and usage.

10. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have different data protection laws than your home country. By using our services, you consent to the transfer of your information to countries outside your country of residence, which may include countries that do not have the same data protection laws. We take measures to ensure adequate safeguards are in place, including standard contractual clauses and privacy shield mechanisms.

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it is used
• Right to delete personal information collected from you
• Right to opt-out of the sale or sharing of personal information
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, submit a verifiable consumer request by contacting us at the information provided below. We will verify your identity before responding.

12. European Privacy Rights (GDPR)

If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

• Right to access, rectification, and erasure of your personal data
• Right to restrict processing and data portability
• Right to object to processing on legitimate interest grounds
• Right to lodge a complaint with your local data protection authority

Our legal basis for processing your information includes: performance of our contract with you, compliance with legal obligations, pursuit of our legitimate interests, and your explicit consent. You may withdraw consent at any time.

13. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Effective Date" at the top of this policy. Your continued use of our services following notification of changes constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy, requests to exercise your privacy rights, or concerns about our privacy practices, please contact us:

• Phone: +81 3-3207-8139
• Email: info@lumexshift.com
• Address: 2-3-1 Asakusa, Taito City, Tokyo 111-0032, Japan

We will respond to your inquiry within 30 days. For GDPR or CCPA-related requests, please indicate this in your communication, and we will provide priority attention.