Privacy Policy

Who we are

LudeHQ, based in Larnaca, Cyprus, operates the Lukies Candles store and is the controller of your personal data. You can contact us at contact@ludehq.com.

What we collect

When you place an order, we collect the details you enter at checkout. These are your name, delivery address, phone number, email address, and any optional order notes.

You do not need an account to browse the shop or blog. Your cart is stored only in your browser. Our hosting systems may process basic request data, such as your IP address and request time, to protect the site and keep it reliable.

Why we use your data

We use your order details to prepare, deliver, and confirm your order. The legal basis for this processing is the performance of a contract. We keep order and accounting records where the law requires us to do so. The legal basis for that processing is a legal obligation. We process basic request data for site security based on our legitimate interests in protecting the store and its customers.

Who processes data for us

We use the following service providers:

• Neon hosts our order database in the European Union.
• Vercel hosts the site and stores product images.
• Resend sends order confirmation emails.

These providers process data only to provide their services to us. We do not sell personal data and do not use it for advertising.

International transfers

Some providers may process personal data outside the European Economic Area, including in the United States. Where this happens, the transfer is protected by appropriate safeguards, such as the European Commission Standard Contractual Clauses.

How long we keep your data

We keep order records for as long as accounting and consumer law require. We delete them when those periods end. Basic request data used for security is kept only for as long as needed to protect and operate the site.

Your rights

Depending on the circumstances, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Ask us to erase your personal data.
• Ask us to restrict how we use your personal data.
• Object to processing based on legitimate interests.
• Receive personal data you provided in a portable format.
• Withdraw consent where processing is based on consent.

To exercise a right, email us at contact@ludehq.com. You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus.

Cookies and browser storage

The site uses one essential admin session cookie. This cookie is used only when an administrator signs in. The shopping cart uses browser storage on your device. We do not use analytics or advertising cookies, so no cookie banner is shown.

Security

We use reasonable technical and organisational measures to protect personal data. These include encrypted connections and restricted access to order records.

Children

This store is not directed at children under 16. Children under 16 should not provide personal data through the checkout.

Changes to this policy

We may update this policy when our practices or legal obligations change. We will publish the updated policy on this page and change the date shown above.

Contact

For privacy questions, contact LudeHQ in Larnaca, Cyprus, at contact@ludehq.com.