Privacy Policy

This Privacy Policy applies to FreshVault (the "Service") provided by FreshVault ("We", "Us", or "Our"), operating under the domain lumoset.top. It explains how We collect, use, and share information about You when You use Our Service. By using the Service, You agree to the collection and use of information as described in this policy.

1. Information We Collect

We collect several types of information to provide and improve our Service:

Personal Information: We may collect information that can identify You, such as Your name, email address, and other contact details, when You voluntarily provide it (e.g., when You register an account, subscribe to our newsletter, contact us, or otherwise interact with the Service).

Usage Information: We automatically collect information about Your interaction with Our Service, such as IP address, browser type, device information, pages visited, time spent on pages, referring URLs, and access times. This information is collected through server logs and analytics tools.

Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to help Our Service function, remember Your preferences, understand usage patterns, and deliver relevant content. You can control cookies through Your browser settings. See Section 5 (Cookies & Tracking Technologies) for more details.

Information from Third Parties: We may receive information about You from third-party platforms, such as social media platforms, if You use their services to interact with our Service.

2. How We Use Your Information

We use Your information to:

• Provide, maintain, and improve Our Service, including personalizing content and features based on Your preferences.
• Communicate with You, including responding to Your inquiries and sending service-related updates, newsletters, and notifications.
• Personalize Your experience and the advertising You see (where applicable and permitted by law).
• Analyze usage trends and gather demographic information to improve functionality and user experience.
• Ensure security, prevent fraud, detect and mitigate potentially illegal or prohibited activities.
• Comply with legal obligations, including responding to lawful requests from public authorities.
• Process transactions and deliver services You have requested.

Where We rely on Your personal information to perform a contract with You, or where processing is necessary for us to provide our services, we will process that information in accordance with this Privacy Policy. In other cases, We will ask for Your consent before processing Your information.

3. Data Processing Details

This section provides specific details about how We process Your personal data, in compliance with applicable data protection laws:

Legal Basis for Processing (GDPR)

Under the EU General Data Protection Regulation (GDPR), we process Your personal data based on the following lawful bases:

• Consent: You have given us consent to process Your personal data for specific purposes (e.g., newsletter subscription, personalized advertising).
• Contractual Necessity: Processing is necessary for the performance of a contract with You or to take steps at Your request before entering into a contract.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Processing is necessary for our legitimate interests, such as improving the Service, ensuring security, and preventing fraud, where such interests are not overridden by Your rights.

Categories of Data Processed

• Identification data (name, email address, username)
• Contact data (phone number, mailing address, if provided)
• Technical data (IP address, browser type, device information, operating system)
• Usage data (pages visited, time spent, clicks, scroll depth, navigation paths)
• Preference data (language, display preferences, saved items)
• Communication data (messages You send to us, responses from us)

Data Sharing & Transfers

We may share Your personal data with trusted third-party service providers who assist us in operating the Service, such as hosting providers, analytics platforms, email service providers, and payment processors. These parties are contractually obligated to protect Your data and to process it only for the purposes for which it was shared.

Where personal data is transferred outside the European Economic Area (EEA) or other jurisdictions with adequate data protection, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we rely on your explicit consent for such transfer.

Automated Decision-Making

We do not use automated decision-making, including profiling, to make decisions about You that have a significant effect on You, unless such processing is necessary to perform a contract with You, or we have obtained Your explicit consent.

4. How We Share Your Information

We may share Your information:

• With service providers and partners who help us operate Our Service (e.g., hosting, analytics, email delivery, customer support), under contractual obligations of confidentiality.
• If required by law, court order, or government regulation, or to protect Our legal rights, safety, or property, or those of others.
• In connection with a business transfer (e.g., merger, acquisition, sale of assets), in which case we will notify You before Your information is transferred and becomes subject to a different privacy policy.
• With Your consent or at Your direction, including when You use social media sharing features.

We do not sell Your personal information to third parties. We do not share Your information with third parties for their own independent advertising purposes without Your consent.

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies (web beacons, pixels, tags) to operate, maintain, and improve the Service. Cookies are small data files placed on Your device that help us:

• Essential Cookies: Required for the Service to function properly (e.g., session management, security).
• Preference Cookies: Remember Your settings and preferences (e.g., language, display options).
• Analytics Cookies: Help us understand how visitors interact with the Service so we can improve it.
• Advertising Cookies: Used to display relevant ads and measure the effectiveness of advertising campaigns.

You can manage or disable cookies through Your browser settings. However, disabling certain cookies may affect the functionality of the Service. Most web browsers allow you to accept or decline cookies, and you can also configure your browser to notify you when a cookie is being set.

For more information about how to manage cookies in your browser, visit: www.aboutcookies.org or www.allaboutcookies.org.

6. Personalized Advertising & Opt-Out

We may use third-party advertising partners, such as Google and others, to serve ads on our behalf across the internet. These partners may use cookies and similar technologies to collect information about Your browsing activities on our Service and on other websites, in order to display advertisements that are tailored to Your interests and measure the effectiveness of advertising campaigns.

Third-party advertising vendors and ad networks may use cookies to serve ads based on Your prior visits to this and other websites or apps. The use of cookies by such vendors enables them and their partners to serve ads to You based on Your activity on our Service and on third-party sites.

You can opt out of personalized advertising from participating advertising networks and providers by using the following links:

• Google My Ad Center (Opt out of ad personalization):
  https://myadcenter.google.com/personalizationoff
• Google Privacy & Terms – How Google uses information from sites or apps that use our services (Partner Sites):
  https://policies.google.com/technologies/partner-sites
• Digital Advertising Alliance (DAA) Opt-Out:
  https://optout.aboutads.info
• Network Advertising Initiative (NAI) Opt-Out:
  https://optout.networkadvertising.org

Opting out of personalized advertising does not mean You will stop seeing ads. It means that the ads You see will no longer be based on Your interests or browsing behavior. You may continue to receive contextual or non-personalized advertising.

Please note that if You opt out and later delete or clear Your cookies, You will need to opt out again. Also, different browsers and devices may have separate cookie settings, so You may need to manage preferences on each device You use.

7. Data Security

We take reasonable administrative, technical, and physical measures to protect Your information from unauthorized access, use, alteration, or disclosure. These measures include encryption, access controls, network firewalls, secure server infrastructure, and regular security reviews.

However, no internet transmission or electronic storage method is completely secure. While We strive to protect Your information, We cannot guarantee absolute security, and You acknowledge that You provide information at Your own risk.

In the event of a data breach that poses a risk to Your rights and freedoms, we will notify You and the relevant supervisory authority without undue delay, in accordance with applicable data protection laws (e.g., within 72 hours under GDPR).

8. Your Choices & Rights

Depending on Your location, You may have certain rights regarding Your personal information:

• Right of Access: Request a copy of the personal information We hold about You.
• Right to Rectification: Request that We correct inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request that We delete Your personal information, subject to legal exceptions.
• Right to Restrict Processing: Request that We limit how We use Your data under certain conditions.
• Right to Data Portability: Request that We provide Your data in a structured, machine-readable format or transfer it to another provider.
• Right to Object: Object to Our processing of Your personal data for direct marketing or based on legitimate interests.
• Right to Withdraw Consent: If processing is based on consent, You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to Opt Out of "Sale" or "Sharing" of Personal Information: As defined under CCPA/CPRA, You have the right to opt out of the "sale" or "sharing" of Your personal information. We do not sell Your personal information.
• Right to Non-Discrimination: We will not discriminate against You for exercising any of Your privacy rights.

To exercise any of these rights, please contact Us at [email protected]. We will respond to Your request within the timeframe required by applicable law (e.g., 30 days under GDPR, 45 days under CCPA).

You can often manage cookie preferences through Your browser settings, as described in Section 5. For personalized advertising opt-out options, see Section 6.

9. Applicable Privacy Regulations

We are committed to complying with applicable data protection and privacy laws worldwide. The following regulations may apply to Your use of the Service, depending on Your jurisdiction:

EU/EEA — General Data Protection Regulation (GDPR)

Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), applies to the processing of personal data of individuals located within the European Economic Area (EEA). Under the GDPR, the legal basis for our processing activities includes consent, contractual necessity, legal obligation, and legitimate interests, as detailed in Section 3. Data subjects have rights including access, rectification, erasure, restriction, portability, and objection, as described in Section 8. The competent supervisory authority for data protection matters is the Irish Data Protection Commission (DPC), given that our Service is available to EEA users.

Brazil — Lei Geral de Proteção de Dados (LGPD)

Lei nº 13.709/2018, the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados, or "LGPD"), applies to the processing of personal data of individuals located in Brazil. Under the LGPD, the legal bases for processing include consent, compliance with legal or regulatory obligations, execution of a contract, legitimate interests, protection of credit, and others as provided in Article 7. Brazilian data subjects have rights including confirmation of processing, access, correction, anonymization, deletion, portability, and information about sharing, as described in Section 8. The competent authority is the Autoridade Nacional de Proteção de Dados (ANPD). For questions related to the LGPD, You may contact Us or, if You believe Your rights have been violated, file a complaint with the ANPD.

United States — California Consumer Privacy Act (CCPA/CPRA)

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to residents of California. California residents have the right to know what personal information is collected, request deletion, opt out of the sale or sharing of personal information, and not be discriminated against for exercising these rights. We do not sell personal information. To exercise Your rights under CCPA/CPRA, please contact Us as described in Section 8.

Other Jurisdictions

We also comply with other applicable privacy and data protection laws, which may include but are not limited to:

• UK GDPR & Data Protection Act 2018 (United Kingdom): For users in the UK, Your personal data is processed in accordance with the UK GDPR and the Data Protection Act 2018. The competent authority is the Information Commissioner's Office (ICO).
• Personal Information Protection Law (PIPL, China): For users in the People's Republic of China, processing of personal information is conducted in accordance with the PIPL, including the requirement for separate consent for sensitive personal information and cross-border transfers.
• Personal Data Protection Act (PDPA, Singapore): For users in Singapore, processing is conducted in accordance with the PDPA, including consent and purpose limitation requirements.
• Personal Information Protection Act (APPI, Japan): For users in Japan, we process personal information in accordance with the APPI and the regulations thereunder.
• Other state privacy laws (United States): We comply with state-level privacy laws as they take effect, including but not limited to Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other emerging state laws.

If Your jurisdiction has specific data protection laws that are not listed here, We will process Your personal data in accordance with those laws. For any questions about Your rights under a specific regulation, please contact Us at [email protected].

10. Children's Privacy

Our Service is not intended for children under 13 (or the minimum age required for digital consent in Your jurisdiction, such as 16 in certain EU member states). We do not knowingly collect personal information from children under this age without parental consent.

If You are a parent or guardian and believe Your child has provided us with personal information without consent, please contact Us at [email protected], and We will take steps to delete such information in accordance with applicable law (e.g., COPPA in the United States, GDPR Article 8 in the EEA, LGPD provisions in Brazil).

11. Third-Party Links

Our Service may link to third-party sites or services that are not owned or controlled by Us. We are not responsible for their privacy practices or the content of their sites. We strongly encourage You to review the privacy policies of any third-party sites You visit. This Privacy Policy does not apply to third-party sites or services.

12. Data Retention

We retain Your personal information for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, unless a longer retention period is required by law or for the establishment, exercise, or defense of legal claims.

Specific retention practices:

• Account data is retained for the duration of Your account and deleted or anonymized within a reasonable period after account closure or deletion request.
• Usage data and analytics logs are retained for up to 26 months, after which they are aggregated or anonymized.
• Communication records (e.g., customer support inquiries) are retained for up to 3 years for quality assurance and legal compliance purposes.
• Information required for legal compliance, dispute resolution, or fraud prevention may be retained for the duration of the applicable statutory limitation period.

When data is no longer needed, We will either delete it or anonymize it so that it can no longer be used to identify You.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of our Service. We will post changes on this page and update the "Last Updated" date above.

If We make material changes, We will notify You through the Service or, where appropriate, via the email associated with Your account, before the changes take effect. Your continued use of the Service after changes are posted means You accept the new policy.

We encourage You to review this page periodically for the latest information on our privacy practices.

14. Contact Us

If you have questions about this Privacy Policy, or wish to exercise any of Your rights, please contact Us:

FreshVault
Email: [email protected]
Website: lumoset.top

If You are located in the EEA or UK, You may also contact the relevant supervisory authority (e.g., the Irish Data Protection Commission or the UK Information Commissioner's Office). If You are located in Brazil, You may contact the Autoridade Nacional de Proteção de Dados (ANPD). If You are a California resident, You may contact the California Attorney General's Office.