Privacy Policy
Last updated: October 12, 2026
Lustre Theory LLC ("Lustre Theory," "we," "us," or "our") explains in this Privacy Policy how we collect, use, and share personal information when you visit lustretheory.com or shop.lustretheory.com, purchase our products, inquire about our event design or creative services, subscribe to our marketing, or otherwise interact with us.
Personal information means information that identifies you or can reasonably be linked to you. This policy describes our privacy practices and the choices and rights available to you. Your use of our websites does not, by itself, constitute consent to optional tracking or other processing that requires consent.
Who is responsible for your information
Lustre Theory LLC is based in Virginia, United States. For personal information we use to run our business, we act as the data controller where that term applies. You can contact us about this policy or a privacy request at info@lustretheory.com.
Mailing address: 1024 Jamestown Cres, Norfolk VA 23508
This policy covers our customer, prospective customer, and website visitor information. It does not replace any separate employment privacy notice or the privacy notices of Shopify, social networks, or other independent platforms you use to interact with us.
Information we collect
Information you provide
We collect contact details such as your name, email address, telephone number, and billing or shipping address when you place an order, contact us, or request services. We also receive order details, selected products, delivery instructions, customer service messages, and any account information you choose to provide.
For design and production services, we may receive project details, event dates and locations, billing information, and other information you share to help us prepare proposals and provide the requested services. Please share personal information about other people only when you are authorized to do so.
If you subscribe to our marketing, we collect your contact details, subscription preferences, and records of your consent where applicable. If you submit a review, photograph, or other content, we receive that content and the information accompanying it. Please avoid sending sensitive personal information unless it is needed for a specific agreed purpose.
Payment information
Payment providers process the payment credentials you enter at checkout. We receive transaction records and may receive limited payment details, such as payment status, card type, or the last digits of a payment card. The information available to us depends on your payment method and the provider.
Information collected automatically
When you visit our websites, Shopify and other website tools may collect your IP address, approximate location inferred from that address, browser and device information, cookie identifiers, referring pages, and information about your activity, such as pages visited, products viewed, cart activity, and purchases. Optional tracking is subject to your choices and applicable consent requirements.
Our marketing tools may collect information about email delivery, opens, and link clicks. Email opens may be estimated by the email software you use. Cookie identifiers, IP addresses, and similar online identifiers may be personal information even when they do not include your name.
Information from other sources
We receive information from Shopify, payment and shipping providers, marketing and analytics providers, and other services supporting our business. This may include order and delivery updates, fraud prevention information, and advertising attribution. If you communicate with us through a social network or marketplace, we receive the information that platform makes available in connection with that interaction.
How we use your information
We use personal information to fulfill orders, arrange shipping, process payments and exchanges, provide project proposals and design services, and communicate about your purchases or requests. We also use it to maintain customer records, respond to inquiries, and manage any account you use.
We use relevant information to protect our websites and customers, detect fraud, resolve disputes, maintain business and tax records, and comply with legal obligations. We may analyze website activity to improve our products and shopping experience, subject to applicable tracking requirements.
Where permitted, we use information to send marketing emails, recommend products, measure campaign performance, and deliver or measure advertising. Marketing and advertising uses are subject to applicable law and the choices described below. We do not treat agreeing to this policy or purchasing a product as blanket permission for all marketing uses.
Legal bases for UK and EEA information
Where UK or European Economic Area (EEA) data protection law applies, we rely on the legal basis appropriate to each purpose. Contractual necessity supports processing needed to fulfill your order or provide requested services. Legal obligations support required tax, accounting, and other compliance records.
We rely on legitimate interests for activities such as responding to general inquiries, protecting our business from fraud, and administering our customer relationships, where those interests are not overridden by your rights. We rely on consent for advertising cookies and other optional tracking where required, and for marketing communications where consent is required. An exemption from cookie consent does not remove any separate requirement for a lawful basis to process personal information.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. If we need information to fulfill an order or comply with law, failing to provide it may prevent us from completing the requested transaction.
Cookies and similar technologies
Cookies are small files stored on your device. Pixels and similar technologies can record website activity or interaction with messages. We and our providers use these technologies for the purposes described in this policy.
Essential technologies support functions such as cart management, checkout, security, and recording privacy choices. Other technologies may remember preferences, measure website performance, or support personalized advertising. Whether consent is required depends on the purpose and applicable law, rather than the name assigned to a cookie.
Where consent is required, we ask before using technologies for non-exempt purposes. You can accept optional uses, reject them, or manage your choices through our cookie banner. You can reopen Cookie Preferences through the link on our website to change or withdraw your choices. Essential technologies may remain active when optional uses are declined.
For questions about the cookies and tracking technologies used on our websites, please contact us at info@lustretheory.com.
You can also control cookies through your browser settings. Blocking essential cookies may affect checkout or other website features. Browser settings and third-party advertising controls supplement the choices available on our websites. Rejecting advertising tracking does not necessarily stop all advertising; ads may simply be less personalized.
Who receives your information
We share information with providers as needed for website hosting, payment processing, shipping, customer support, email delivery, analytics, security, and other business operations. Examples include Shopify for our online shop and Omnisend for our email marketing. The information each provider receives depends on the services it supplies.
Advertising and analytics providers may receive device identifiers, browsing activity, purchase events, or other information used to measure advertising and show relevant ads, subject to consent and opt-out requirements. Depending on applicable law and how the service operates, this disclosure may be considered a sale, sharing of personal information, or targeted advertising, even without a cash payment.
We may share relevant information with event or production vendors where needed to perform services you request. We may also disclose information to professional advisers, in response to lawful requests, to protect rights and safety, or in connection with a proposed or completed business transfer. We may share information at your direction or with your consent.
Shopify processing
Our shop is hosted by Shopify. Shopify processes personal information when you browse and make purchases, both to provide services to us and, for certain features, for its own purposes as described in its privacy policy.
Where Shopify Network Intelligence is enabled, Shopify may use information about your interactions with our shop together with information about your interactions with other merchants and Shopify to provide enhanced services, including personalization and advertising. Information may be processed by Shopify and its partners in other countries. Applicable consent and opt-out choices apply to these uses.
Shopify Consumer Privacy Policy
Shopify privacy portal for rights and choices
Marketing and advertising choices
You can unsubscribe from marketing emails using the unsubscribe link in each message or by emailing info@lustretheory.com. We process opt-out requests within the time required by applicable law. You may still receive necessary order, service, security, or legal communications after unsubscribing.
Cookie consent is separate from subscribing to marketing. Accepting advertising cookies does not, by itself, enroll you in our newsletter or authorize marketing text messages. Unsubscribing from emails does not automatically change your website cookie choices.
Where applicable, you may request to opt out of the sale or sharing of your personal information or its use for targeted advertising by emailing us at info@lustretheory.com. For personal information Shopify processes independently, you can manage your choices through the Shopify privacy portal.
Where required by applicable law, we honor recognized opt-out preference signals, such as Global Privacy Control (GPC). GPC is different from the older Do Not Track setting and is not a request to stop all processing necessary to provide our services. The scope of a signal depends on applicable law and whether we can associate it with your account. Browser-based choices may need to be repeated on other browsers or devices.
Your privacy rights
Depending on your location and applicable law, you may have rights to access your personal information, obtain a copy in a portable format, correct inaccuracies, request deletion, or restrict certain processing. You may also have the right to object to processing, withdraw consent, or opt out of sale, sharing, or targeted advertising. These rights are subject to applicable conditions and exceptions.
Where UK or EEA law applies, you may object to processing based on legitimate interests for reasons relating to your particular situation. You may object to processing for direct marketing, including related profiling, at any time.
To submit a request, email info@lustretheory.com with enough information to identify your relationship with us and explain your request. We may need proportionate information to verify your identity or an authorized representative’s authority. Please do not send identity documents or full payment credentials unless we specifically request a secure and appropriate verification method.
We respond within the applicable legal deadline. Under UK and EEA rules, this is generally one month, with extensions permitted in certain circumstances. Other jurisdictions may use different deadlines. If we decline all or part of a request, we explain the basis and any available appeal or complaint rights. We will not discriminate against you for exercising rights protected by applicable law.
You can appeal a denied request where applicable law provides that right by emailing info@lustretheory.com and identifying the decision you want reviewed. You may also complain to the relevant regulator. UK individuals can contact the Information Commissioner’s Office at ico.org.uk. EEA individuals can contact the competent supervisory authority, including in their country of habitual residence, workplace, or the alleged infringement. You do not have to contact us first to exercise a right to complain.
International Processing and Transfers
Lustre Theory LLC is based in the United States. Customer information may be processed in the United States, Canada, or other countries where our service providers operate. These countries may have different data protection laws from your country.
We use Shopify to operate our online shop and Omnisend for email marketing. Their published data-processing agreements address the protection of customer information and international transfers, including approved contractual safeguards where applicable. The protections that apply depend on the provider, the transfer, and applicable law.
For more information, please review the Shopify Data Processing Addendum and Omnisend Data Processing Agreement. You may also contact us at info@lustretheory.com with questions about how we handle your information.
Visiting our website or placing an order does not, by itself, constitute consent to every international transfer. Nothing in this policy limits your rights under applicable data protection laws.
How long we keep information
We retain personal information for the purposes described in this policy and for applicable legal requirements. Retention depends on the type of information, our relationship with you, the relevant purpose, and any tax, accounting, dispute, or other legal requirement.
We keep order and service records as needed to fulfill transactions, address customer issues, and meet applicable recordkeeping obligations. We retain inquiry correspondence while handling the request and for a proportionate period needed for related follow-up or disputes. Account information is retained while the account is in use and as needed for associated legal or business obligations.
Marketing contact information is retained while it is used for permitted marketing. After an opt-out, we may keep limited suppression records so we do not contact you again contrary to your choice. Tracking data and cookies have their own retention periods, described in our cookie information. Information may remain in backups until those backups are replaced or deleted under the relevant retention process. Retained information remains subject to applicable protections.
Security
We use reasonable safeguards appropriate to the information we handle to reduce the risk of unauthorized access, loss, or misuse. No website, electronic transmission, or storage system is completely secure. If a breach occurs, we will provide notifications required by applicable law.
Children and other websites
Our services are intended for adults and are not directed to children under 18. If you believe a child has provided personal information to us, contact info@lustretheory.com so we can investigate and take appropriate action under applicable law.
Our websites may link to independent websites, social networks, payment services, or marketplaces. Their privacy practices are governed by their own notices. This does not remove our responsibility for personal information we disclose to them.
Changes and contact
We may update this policy to reflect changes in our practices or legal requirements. We will update the date above and provide additional notice when required. If a new use requires consent, we will obtain it before that use begins; continued browsing alone is not that consent.
For privacy questions or requests, contact Lustre Theory LLC at info@lustretheory.com or the mailing address stated at the beginning of this policy.