> Lumit is a Swedish online ordering system that restaurants embed on their own website. Order data, the iframe, Google Fonts and GDPR rules. > > Canonical: https://www.flowconsent.com/en/services/ecommerce/lumit E-commerce # Lumit Marketing · [Official website](https://lumit.com/se/) Lumit is a Swedish online ordering system for restaurants, developed by Lumit AB in Halmstad since 2019. Restaurants embed its menu and checkout on their own website so customers can order food for pickup or delivery under the restaurant's brand. The ordering iframe processes customer contact and order details to fulfil the order, which does not require cookie consent, but it also loads Google Fonts. [Block Lumit until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [E-commerce](https://www.flowconsent.com/en/services/ecommerce) - Consent Marketing - Prior consent Not required - Documented cookies 0 - Third-party domains 5 - Servers Sweden (ordering application served from Amazon Web Services, eu-north-1 Stockholm region, via a CDN) Overview ## What does Lumit do? ## **What is Lumit?** Lumit is an online ordering service for restaurants published by Lumit AB, a company based in Halmstad, Sweden. It was created in 2019 by Daniel Lindau with a focus on pizzerias, and the first version went live in January 2020. Today it is used by hundreds of restaurants of different types in Sweden, and Lumit also markets the service in the United States. The offer includes the ordering system, an order terminal for the kitchen, a restaurant website and a domain, paid by commission on orders rather than fixed fees. ## **How Lumit appears on a website** The restaurant's menu and checkout are embedded in its website as an iframe loaded from embed.lumit.se, sometimes inserted by a small JavaScript helper named injectLumit. Technology scanners detect Lumit through this iframe address or the injectLumit function. Inside the iframe, the ordering application calls the Lumit API at api.lumit.app and loads fonts from Google Fonts. The application files are delivered from Amazon Web Services in the Stockholm region. ## **Cookies and personal data** No specific Lumit cookie is publicly documented, and the embed may rely on the browser's storage to keep the basket during the order. To complete an order, the customer provides contact details such as name and phone number, a delivery address when relevant, the items ordered, comments and payment information handled by the payment provider. The restaurant uses these data to prepare and deliver the order, and Lumit processes them on its behalf. Google receives the visitor's IP address when the iframe loads Google Fonts. ## **GDPR and consent** Placing an order is a service explicitly requested by the customer, so processing order data relies on the performance of a contract, and storage strictly necessary to run the basket does not require consent. Consent becomes necessary if analytics or marketing trackers are added to the ordering flow. Loading Google Fonts from Google servers transfers the IP address to a US company, which some European regulators consider problematic without consent. ## **Practical steps** - Mention Lumit as a processor in your privacy notice, with the data collected for orders and their retention period. - Sign or review the data processing agreement with Lumit AB. - Ask Lumit whether fonts can be self-hosted to avoid sending IP addresses to Google. - Keep any marketing or analytics tags in the ordering page behind your consent banner. Compliance ## Lumit and the GDPR - Legal basis Performance of a contract (Art. 6(1)(b) GDPR) for placing and fulfilling the order; storage strictly necessary for the ordering service requested by the customer is exempt from consent (Art. 5(3) ePrivacy Directive) - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, Swedish Electronic Communications Act (LEK) ### Impact assessment (DPIA) A DPIA is not normally required for online food ordering. Check the processing agreement with Lumit AB, the retention of customer and order data, the handling of payment data by the payment provider and the transfer of IP addresses to Google through Google Fonts. ### Sample text for your banner > Online orders are handled by Lumit, our ordering provider in Sweden. The data you enter are used only to prepare and deliver your order; no consent is needed for this service. Cookies and trackers ## What Lumit sets and contacts - Tracking method Online ordering menu embedded on the restaurant's website as an iframe from embed.lumit.se (often with the injectLumit JavaScript helper); the iframe calls the Lumit API at api.lumit.app to build and submit orders. - Server location Sweden (ordering application served from Amazon Web Services, eu-north-1 Stockholm region, via a CDN) - Data transferred outside the EU The ordering iframe loads Google Fonts from fonts.googleapis.com and fonts.gstatic.com, so Google LLC (United States) receives the visitor's IP address. The order data itself is handled by Lumit AB in Sweden. ### Third-party domains contacted (5) - `embed.lumit.se` - `api.lumit.app` - `lumit.pizza` - `fonts.googleapis.com` - `fonts.gstatic.com` Questions ## Frequently asked questions about Lumit Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What is Lumit? Lumit is an online ordering system for restaurants from Lumit AB in Halmstad, Sweden. Restaurants embed it on their own website so customers order directly instead of through a delivery marketplace. ### How is Lumit detected on a website? It appears as an iframe loaded from embed.lumit.se, sometimes inserted by a JavaScript function called injectLumit. The iframe then talks to the Lumit API at api.lumit.app. ### Does Lumit require cookie consent? Not for the ordering function itself, because it is a service the customer requests and the storage used for the basket is strictly necessary. Analytics or advertising tags added to the ordering flow would need consent. ### Does Lumit send data outside the EU? Order data are handled by Lumit AB in Sweden and the application is served from the AWS Stockholm region. The iframe does load Google Fonts, so Google in the United States receives the visitor's IP address. ### Who is responsible for customer data in Lumit orders? The restaurant is the controller of its customers' order data and Lumit acts as its service provider. The restaurant should describe this in its privacy notice and have a processing agreement with Lumit. Same category ## More services: E-commerce [See the whole category](https://www.flowconsent.com/en/services/ecommerce) ### [Blippa](https://www.flowconsent.com/en/services/ecommerce/blippa) [Blippa is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Blippa integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Blippa helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/blippa) [Preferences](https://www.flowconsent.com/en/services/ecommerce/blippa) · ### [YM Cart](https://www.flowconsent.com/en/services/ecommerce/ym-cart) [YM Cart is a reliable shopping cart solution that enables e-commerce businesses to provide a seamless checkout experience for their customers. It supports multiple payment methods, coupon codes, tax calculations, and shipping options, ensuring a frictionless purchasing process. YM Cart integrates with popular e-commerce platforms and payment gateways, offering customizable cart designs and abandoned cart recovery features to help merchants maximize revenue and reduce cart abandonment rates.](https://www.flowconsent.com/en/services/ecommerce/ym-cart) [Preferences](https://www.flowconsent.com/en/services/ecommerce/ym-cart) · ### [RomanCart](https://www.flowconsent.com/en/services/ecommerce/romancart) [RomanCart is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. RomanCart supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, RomanCart ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/romancart) [Preferences](https://www.flowconsent.com/en/services/ecommerce/romancart) · ### [EveryAction](https://www.flowconsent.com/en/services/ecommerce/everyaction) [EveryAction is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. EveryAction supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, EveryAction ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/everyaction) [Preferences](https://www.flowconsent.com/en/services/ecommerce/everyaction) · ### [SeedGrow](https://www.flowconsent.com/en/services/ecommerce/seedgrow) [SeedGrow is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. SeedGrow provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, SeedGrow helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/ecommerce/seedgrow) [Marketing](https://www.flowconsent.com/en/services/ecommerce/seedgrow) · ### [Boost Commerce](https://www.flowconsent.com/en/services/ecommerce/boost-commerce) [Boost Commerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Boost Commerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.](https://www.flowconsent.com/en/services/ecommerce/boost-commerce) [Analytics](https://www.flowconsent.com/en/services/ecommerce/boost-commerce) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)