LureLab Privacy Policy

Effective Date: December 5, 2025

ReefTrove (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how we collect, use, store, disclose, and protect the personal data you provide when accessing or using our website (www.reeftrove.com), purchasing our products, or engaging with our services (collectively, the “Services”). By accessing or using the Services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy, including our data practices and your rights as a user. This Policy complies with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Collection of Personal Information

We collect personal information that you voluntarily provide to us, as well as information generated through your use of the Services. Personal information is defined as any data that can identify an individual or be linked to an identifiable person.

1.1 Information You Provide Voluntarily

  • Account Registration: When creating an account, we may collect your full name, email address, phone number, shipping address, billing address, and password.
  • Purchases and Transactions: To process orders, we collect payment information (e.g., credit card details, PayPal account information), order history, and delivery preferences. Payment information is processed by third-party payment processors, and we do not store full credit card details.
  • Communications: When you contact our customer support (via email, phone, or chat), we collect the content of your communications, your contact details, and any additional information you provide to resolve inquiries.
  • Newsletter and Marketing Opt-In: If you subscribe to our newsletter or marketing communications, we collect your email address and preferences regarding the type of content you wish to receive.

1.2 Automatically Collected Information

When you use the Services, we may automatically collect certain technical and usage data through cookies, web beacons, and server logs. This information includes:

  • Device information (e.g., device type, operating system, browser version, IP address);
  • Usage data (e.g., pages visited, time spent on the website, links clicked, search queries);
  • Location data (approximate geographic location based on IP address, if permitted by your device settings);
  • Cookie and tracking technology data (see Section 7 for details on cookie usage).

2. Use of Personal Information

We use your personal information for legitimate business purposes that are consistent with your expectations and applicable laws. The primary uses of your information include:

  • Process and Fulfill Orders: Verify your identity, process payments, ship products, send order confirmations, and provide post-purchase support.
  • Provide and Improve Services: Maintain and update your account, respond to customer inquiries, troubleshoot issues, and enhance the functionality and user experience of the website.
  • Personalize Content and Marketing: Deliver tailored product recommendations, customize website content, and send marketing communications (e.g., newsletters, promotional offers) that align with your preferences, provided you have opted in to receive such communications.
  • Ensure Security and Fraud Prevention: Monitor and detect unauthorized access, fraudulent transactions, and potential security threats to protect you and our business.
  • Comply with Legal Obligations: Fulfill tax, accounting, and reporting requirements, respond to legal requests (e.g., subpoenas, court orders), and enforce our Terms of Service.
  • Conduct Internal Analysis: Analyze usage trends, measure the effectiveness of marketing campaigns, and develop new products or services based on user needs.

3. Storage and Protection of Personal Information

We implement industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

3.1 Data Storage

Your personal information is stored on secure servers located in the United States and the European Union, depending on your geographic location. We only retain your information for as long as necessary to fulfill the purposes outlined in this Policy, or as required by law. For example, we retain order information for 7 years to comply with tax regulations, and account information until you request its deletion (provided no legal obligation requires us to keep it).

3.2 Security Measures

Our security measures include:

  • Encryption of data in transit (using TLS 1.2+) and at rest (using AES-256 encryption);
  • Multi-factor authentication for employee access to sensitive data;
  • Regular security audits and vulnerability assessments;
  • Restricted access to personal information, limited only to employees and third-party service providers who need it to perform their duties;
  • Employee training on data protection and privacy best practices.

While we take reasonable steps to protect your information, no data transmission over the internet or storage system is completely secure. We cannot guarantee absolute security, but we continuously update our security measures to mitigate risks.

4. Sharing and Disclosure of Personal Information

We do not sell your personal information to third parties for commercial purposes. We may share your information in the following limited circumstances:

4.1 Third-Party Service Providers

We engage trusted third-party service providers to assist with business operations, such as payment processing (e.g., Stripe, PayPal), shipping and delivery (e.g., FedEx, UPS), email marketing (e.g., Mailchimp), and website analytics (e.g., Google Analytics). These providers are only given access to the personal information necessary to perform their services, and they are contractually obligated to protect the information and use it solely for the purposes we specify.

4.2 Legal and Regulatory Requirements

We may disclose your personal information if required by law, such as in response to a subpoena, court order, or government request, or to protect our legal rights, property, or the safety of our users, employees, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the business transaction. We will notify you via email or prominent notice on our website prior to such a transfer, and ensure the acquiring entity adheres to the terms of this Privacy Policy.

5. User Rights Regarding Personal Information

Under applicable privacy laws, you have the following rights regarding your personal information. To exercise these rights, please contact us at Kiouthut@gmail.com with the subject line “Privacy Rights Request” and include your full name, email address, and details of your request.

  • Right to Access: Request a copy of the personal information we hold about you, including details of how it is collected, used, and shared.
  • Right to Correction: Request correction of inaccurate or incomplete personal information.
  • Right to Erasure (“Right to Be Forgotten”): Request deletion of your personal information, provided we are not required by law to retain it.
  • Right to Restrict Processing: Request that we limit the processing of your personal information (e.g., if you dispute the accuracy of the data).
  • Right to Data Portability: Request a copy of your personal information in a structured, machine-readable format, or request that we transfer it to another data controller.
  • Right to Object: Object to the processing of your personal information for direct marketing purposes or based on legitimate interests, unless we can demonstrate compelling legitimate grounds for the processing.
  • Right to Withdraw Consent: If you have provided consent for a specific processing activity (e.g., marketing communications), you may withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

We will respond to your request within 30 days of receipt. If we require additional time to process your request, we will notify you and provide a reason for the delay. We may verify your identity to ensure the security of your information before fulfilling your request.

6. Minors’ Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from minors under 16. If we become aware that we have collected personal information from a minor under 16 without parental consent, we will immediately delete such information. Parents or guardians who believe their child has provided personal information to us may contact us at Kiouthut@gmail.com to request deletion.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (e.g., web beacons, pixel tags) to enhance your user experience, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device by your browser.

7.1 Types of Cookies We Use

  • Essential Cookies: Necessary for the operation of the Services, such as cookies that enable you to log in to your account or complete purchases. These cookies cannot be disabled.
  • Performance Cookies: Collect data on how you use the website (e.g., pages visited, errors encountered) to improve functionality and performance. These cookies do not identify you personally.
  • Functional Cookies: Remember your preferences (e.g., language, shipping address) to provide a personalized experience.
  • Marketing Cookies: Used to deliver relevant promotional content based on your interests. These cookies may be set by third-party marketing partners.

7.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, but disabling essential cookies may prevent you from accessing certain features of the Services. For more information on how to manage cookies, visit the help section of your browser (e.g., Chrome, Firefox, Safari).

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by posting the updated Policy on our website with a new effective date, and sending a notification to your registered email address (if you have an account). We encourage you to review this Policy regularly to stay informed about how we protect your information.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact our Privacy Officer at:

Email: Kiouthut@gmail.com