Privacy policy.

Last updated: 9 September 2026

1. About this policy

Gemlumo is an Australian online retailer of finished art and related products. This policy applies when you visit gemlumo.com, create an account, place an order, join our mailing list, use live support, post a comment or otherwise contact us.

2. Information we collect

Depending on how you use Gemlumo, we may collect:

• your name, email address, telephone number and billing or delivery address;
• account login details, saved addresses, wishlist and account preferences;
• order, product, delivery, return, refund and customer-support information;
• gift-card recipient details and the message supplied by the purchaser;
• messages, comments, reviews, live-chat transcripts and other content you submit;
• marketing preferences and newsletter subscription records;
• device, browser, IP address, approximate location, referral source and website activity; and
• fraud-prevention, security and transaction identifiers supplied by payment or service providers.

Please do not send sensitive information unless it is reasonably necessary for us to help you.

3. How we collect information

We collect information directly from you through checkout, account, contact, comment, newsletter and live-chat features. We may also collect technical information automatically through cookies, server logs and similar technologies, and receive information from payment providers, delivery partners and other providers involved in completing your request.

4. Why we use information

We use personal information to operate the store; process payments, orders, gift cards, deliveries, returns and refunds; maintain accounts and wishlists; provide support; prevent fraud and secure the website; improve products and website performance; meet record-keeping and legal obligations; and send marketing where you have consented or where otherwise permitted by law.

If required information is not provided, we may be unable to complete an order, deliver a product, create an account or respond to a request.

5. Payments

Payments are processed by the payment option selected at checkout, such as Stripe or PayPal. Gemlumo does not receive or store your complete payment-card number. Payment providers process information under their own privacy policies and security practices.

6. Cookies and similar technologies

We use essential technologies for functions such as security, sessions, carts, checkout and account access. We may also use measurement or performance technologies to understand how the website is used. Browser settings can block or delete cookies, but disabling essential cookies may prevent parts of the store from working.

7. When we share information

We may disclose only the information reasonably required to providers that help us operate, including website and database hosting, content management, payment processing, fraud prevention, email delivery, newsletters, live chat, analytics, professional advisers, warehouses, postal and courier services. We may also disclose information where required or authorised by law, to protect customers or the store, or as part of a genuine business sale or restructure subject to appropriate safeguards.

We do not sell personal information or publish your email address with a blog comment.

8. Overseas disclosures

Some providers may store or process information outside Australia, including in the United States and in countries where their infrastructure, support teams or delivery networks operate. The countries involved can change when providers or delivery destinations change. Where required, we take reasonable steps when selecting and working with providers that handle personal information.

9. Marketing communications

We send promotional email only where we have the required consent or another lawful basis. You can unsubscribe using the link in a marketing email or by contacting us. We will action an electronic unsubscribe request within 5 business days. Service messages about an order, account, security or support request are not marketing messages.

10. Security and retention

We use reasonable administrative, technical and physical safeguards appropriate to the information we hold. No internet transmission or storage system can be guaranteed completely secure. We retain information only for as long as reasonably needed for the purposes described above, including legal, tax, accounting, fraud-prevention and dispute-resolution requirements, then delete or de-identify it where appropriate.

11. Access and correction

You may ask to access or correct personal information we hold about you. You may also ask us to delete information where applicable, object to or restrict certain processing, or withdraw marketing consent. Contact us using the details below. We may need to verify your identity and may retain information where the law requires or permits it.

12. Privacy complaints

Send a privacy complaint with enough detail for us to investigate. We will acknowledge it and aim to provide a response within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

13. Children

Gemlumo is not directed to children under 16 and we do not knowingly collect their personal information without appropriate parent or guardian involvement.

14. Third-party services and links

Our website may link to third-party services. Their handling of information is governed by their own terms and privacy policies, which we encourage you to review.

15. Changes to this policy

We may update this policy when our practices, providers or legal obligations change. The current version and last-updated date will remain available on this page.

16. Contact Gemlumo

For privacy enquiries, access or correction requests, complaints, or a copy of this policy in another reasonably available format, email hello@gemlumo.com.au or use our contact form.