LUM8 Wellness Privacy Policy

Last updated: July 2026

LUM8 Wellness is committed to protecting your privacy. We take the same considered approach to how we handle your personal information as we do with everything else — keeping only what we need, using it responsibly, and being transparent with you about it.

This policy is written in plain language. It explains what we collect, why, and what your rights are. If anything is unclear, please contact us.

1. Who we are

LUM8 Wellness is operated by Tory Giles Health Pty Ltd (ABN 32 666 293 867), based in Noosa, Queensland, Australia. We sell wellness technology for the home through our website at lum8wellness.com.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Contact us:

• Email: hello@lum8wellness.com
• Website: lum8wellness.com

2. What personal information we collect

We collect only what we need to operate our business and serve you well.

Information you give us directly:

• Your name
• Email address
• Phone number
• Shipping and billing address
• Payment information (processed securely by our payment provider — we do not store your card details)
• Order history
• Communications you send us (enquiries, support requests, product reviews)

Information collected automatically:

When you browse our website, we collect technical information such as your IP address, browser type, pages visited, time on site, and referring URL. This is collected through cookies and analytics tools (see Section 7).

3. How we collect it

We collect your personal information:

• Directly from you — when you place an order, create an account, contact us, subscribe to our newsletter, or leave a product review
• Automatically — through our website using cookies and analytics tools
• From third-party platforms — such as our payment processors and shipping providers, where necessary to fulfil your order

4. Why we collect your information

We use your personal information to:

• Process and fulfil your orders, including sending tracking updates
• Provide customer support
• Send you marketing communications (only if you've opted in — you can unsubscribe at any time)
• Improve our website, products, and customer experience
• Detect and prevent fraud or security issues
• Comply with our legal and tax obligations

We will not use your information for purposes beyond those listed above without telling you first and, where required, obtaining your consent.

5. Who we share your information with

We do not sell, rent, or trade your personal information.

We share your information only with trusted third-party service providers who need it to help us operate. These may include:

• Shopify Inc. — our e-commerce platform (based in Canada)
• Payment processors such as Stripe and Afterpay
• Shipping carriers and freight partners
• Email marketing platforms (such as Klaviyo)
• Customer review platforms (such as Judge.me)
• Analytics tools (such as Google Analytics)

Each provider is bound by their own privacy obligations and contractual commitments to us. They receive only the information they need to perform their specific service.

6. Overseas disclosure

Some of our service providers store or process data outside Australia — including in Canada (Shopify), the United States (Stripe, Klaviyo, Google), and other locations.

Where this occurs, we take reasonable steps to ensure your information is handled in accordance with the Australian Privacy Principles, including by reviewing the privacy practices and contractual commitments of those providers.

By using our website and providing your personal information, you consent to it being transferred and processed overseas in the circumstances described above.

7. Cookies and tracking

Our website uses cookies — small text files stored on your device — to improve your browsing experience, remember your preferences, and help us understand how our site is used.

We use:

• Essential cookies — necessary for the website to function (e.g. your shopping cart)
• Analytics cookies — to understand visitor behaviour (e.g. Google Analytics)
• Marketing cookies — to help us show relevant advertising, only where you've consented

You can disable cookies in your browser settings at any time. Note that some parts of the site may not function as intended if you do.

8. Direct marketing

If you've subscribed to our mailing list or opted in at checkout, we may send you updates about new products, offers, and wellness content we think you'll value.

You can unsubscribe at any time by clicking the unsubscribe link in any email, or by contacting us at hello@lum8wellness.com. We will act on all unsubscribe requests promptly.

We do not share your contact details with third parties for their own marketing purposes.

9. Security

We take reasonable technical and organisational steps to protect your personal information from misuse, loss, and unauthorised access, modification, or disclosure.

Our measures include:

• SSL encryption across all pages of our website
• Payment information handled by PCI-DSS compliant payment processors
• Limited internal access to personal data, on a need-to-know basis

No method of data transmission over the internet is completely secure. If you believe your information has been compromised, please contact us immediately at hello@lum8wellness.com.

10. Data breach notification

In the event of a data breach that is likely to result in serious harm, LUM8 Wellness will comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988. This means we will:

• Notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable
• Notify affected individuals where required and where doing so won't impede law enforcement
• Take immediate steps to contain the breach and prevent further harm

11. How long we keep your information

We keep your personal information for as long as necessary to provide our services and meet our legal obligations:

• Order and transaction records — 7 years (required under Australian tax law)
• Account information — until you close your account or request deletion
• Marketing preferences — until you unsubscribe or request removal

When your information is no longer required, we take reasonable steps to destroy or permanently de-identify it.

12. Your rights

Under the Australian Privacy Act 1988, you have the following rights:

Access your information
You can request a copy of the personal information we hold about you. We'll provide it within 30 days, free of charge, unless an exception applies.

Correct your information
If any information we hold about you is inaccurate, incomplete, or out of date, you can ask us to correct it. We'll update it promptly.

Delete your information
You can ask us to delete your personal information. Where there's no legal obligation requiring us to retain it, we'll comply. Note that deleting your information may affect our ability to process future orders or provide support.

Opt out of marketing
You can opt out of marketing communications at any time — see Section 8.

To exercise any of these rights, contact us at hello@lum8wellness.com. There is no charge for making a request, and we'll respond within a reasonable timeframe.

13. Complaints

If you have a concern about how we've handled your personal information, please contact us first at hello@lum8wellness.com. We take privacy seriously and will work to resolve your concern as quickly as possible.

If you're not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

14. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies before sharing any personal information.

15. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we do, we'll update the date at the top of this page.

For material changes, we'll notify you by email or by displaying a notice on our website.

Contact us

Tory Giles Health Pty Ltd (ABN 32 666 293 867)
Trading as LUM8 Wellness
Noosa, Queensland, Australia
hello@lum8wellness.com
lum8wellness.com

This policy is governed by the laws of Queensland, Australia.