Privacy Policy

Last updated: September 6, 2026

Lumèra operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (the "Services"). Lumèra is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understood how we collect, use, and disclose your information as described here.

Personal Information We Collect or Process

"Personal information" refers to information that identifies or can reasonably be linked to you or another person. It does not include information collected anonymously or that has been de-identified so it can no longer be linked to you. Depending on how you interact with the Services, where you live, and applicable law, we may collect or process:

• Contact details — name, address, billing and shipping address, phone number, email address
• Financial information — credit/debit card and financial account numbers, payment card information, transaction details, form of payment, and payment confirmations
• Account information — username, password, security questions, preferences and settings
• Transaction information — items you view, add to cart or wishlist, purchase, return, exchange, or cancel, and your past transactions
• Communications with us — anything you include when contacting customer support or otherwise messaging us
• Device information — device, browser, network connection, IP address, and other identifiers
• Usage information — how and when you interact with or navigate the Services

Where This Information Comes From

• Directly from you — creating an account, using the Services, communicating with us, or otherwise providing your information
• Automatically — through your device as you use the Services, and via cookies and similar technologies
• From our service providers — when we engage them to enable technology or process information on our behalf
• From our partners or other third parties

How We Use Your Personal Information

• To provide, tailor, and improve the Services — process payments, fulfill orders, manage your account, arrange shipping, handle returns and exchanges, enable reviews, remember your preferences, and personalize your shopping experience (e.g., product recommendations)
• Marketing and advertising — sending promotional communications by email, text, or mail, and showing you relevant ads based on your activity on the Services
• Security and fraud prevention — authenticating your account, securing payments and shopping, and detecting or investigating fraudulent or unsafe activity. You're responsible for keeping your account credentials private
• Communicating with you — customer support and maintaining our relationship with you
• Legal reasons — complying with applicable law, responding to legal process, and enforcing our terms and policies

How We Disclose Personal Information

We may share your information, subject to this policy, with:

• Shopify, vendors, and other service providers who support IT, payments, analytics, customer support, cloud storage, fulfillment, and shipping
• Business and marketing partners for advertising, including Shopify-supported personalized advertising based on your activity across merchants and websites. Depending on where you live, you may have the right to opt out of this kind of targeted advertising
• Third parties you direct us to share with — e.g., shipping partners, or through social media widgets and login integrations
• Our affiliates or corporate group
• Parties involved in a business transaction (such as a merger), to comply with legal obligations, enforce our terms, or protect the Services and our users

Our Relationship with Shopify

The Services are hosted by Shopify, which processes personal information about your use of the Services in order to provide and improve them. Your information may be shared with Shopify and other third parties, including those located outside your country of residence. We also use Shopify's enhanced features, which draw on data from your interactions with our store and other Shopify merchants. For these purposes, Shopify is responsible for processing your data and for responding to related requests. Learn more via the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may link to third-party websites or platforms. We aren't responsible for the privacy or security practices, or content accuracy, of sites we don't control — please review their own policies. Anything you share on public or semi-public platforms (including third-party social networks) may be visible to others outside our control.

Children's Data

The Services aren't intended for use by children, and we don't knowingly collect personal information from children under the age of majority in your jurisdiction. If you're a parent or guardian and believe your child has provided us with personal information, contact us to request its deletion. As of this policy's effective date, we don't have actual knowledge that we "share" or "sell" (as defined under applicable law) the personal information of individuals under 16.

Security and Retention

No security measures are perfect, and information sent to us may not be secure in transit — please avoid sending sensitive information through unsecured channels. How long we retain your information depends on factors like whether we need it to maintain your account, provide the Services, meet legal obligations, or resolve disputes.

Your Rights and Choices

Depending on where you live, you may have rights including:

• Access / Know — request access to the personal information we hold about you
• Delete — request deletion of your personal information
• Correct — request correction of inaccurate information
• Portability — request a copy of your information, or that we transfer it to a third party, in certain circumstances
• Manage communication preferences — unsubscribe from promotional emails at any time (we may still send non-promotional emails about your account or orders)

If you're in the UK or the European Economic Area, you may also have the right to:

• Object to or restrict processing of your personal information for certain purposes
• Withdraw consent where we rely on it, without affecting the lawfulness of prior processing

You can exercise these rights by contacting us at info@lovelumera.com. We may need to verify your identity before processing a request, and you may designate an authorized agent to act on your behalf (subject to proof of authorization). To learn about your rights regarding data processed by Shopify, visit privacy.shopify.com/en. We won't discriminate against you for exercising any of these rights.

Complaints

If you have concerns about how we handle your personal information, contact us at info@lovelumera.com. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority — for the EEA, you can find the relevant authorities here.

International Transfers

We may transfer, store, and process your personal information outside the country you live in. Where we transfer data out of the EEA or UK, we rely on recognized mechanisms such as the European Commission's Standard Contractual Clauses (or UK equivalents), unless the destination country is deemed to provide an adequate level of protection.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Updates will be posted here with a revised "Last updated" date, along with any notice required by law.

Contact Us

If you have questions about our privacy practices or this policy, or want to exercise any of your rights, email us at info@lovelumera.com.

For the purpose of applicable data protection laws, Lumèra is the data controller of your personal information.