Privacy Policy

1. Introduction

Welcome to Lumora. We are committed to protecting and respecting your privacy and ensuring that your personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the Data Protection Act 2018, and other applicable data protection laws.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or make a purchase from our online store.

Contact Details

Business Name: Lumora
Business Address: 5A White Hart Lane, Huntingdon, Cambridgeshire, United Kingdom
Email: lumorgrup@gmail.com
Telephone: +44 7436376875

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us using the details above.

​

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Information You Provide Directly

• Full name

• Billing address

• Shipping address

• Email address

• Telephone number

• Payment information

• Order details and purchase history

• Communications sent to us (including customer service enquiries)

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address

• Browser type and version

• Device information

• Time zone settings

• Website usage information

• Pages visited and browsing behaviour

• Referral URLs

• Cookie identifiers

​

3. How We Use Your Personal Data

We process personal data for the following purposes:

To Perform Our Contract With You

• Process and fulfil orders.

• Arrange shipping and delivery.

• Process payments and refunds.

• Communicate regarding orders and customer support.

Based on Legitimate Interests

• Improve and optimise our website and services.

• Prevent fraud and unauthorised transactions.

• Maintain website security.

• Analyse customer behaviour to improve our products and services.

Based on Your Consent

• Send marketing communications where you have opted in.

• Use non-essential cookies and analytics technologies.

You may withdraw your consent at any time.

To Comply With Legal Obligations

• Maintain financial and tax records.

• Comply with applicable laws, regulations, and legal requests.

​

4. Legal Bases for Processing

Under the GDPR, we rely on the following lawful bases:

• Contract: Processing necessary to fulfil orders and provide services.

• Consent: Marketing communications and certain cookies.

• Legal Obligation: Compliance with legal and regulatory requirements.

• Legitimate Interests: Business administration, fraud prevention, website improvement, and security.

​

5. Payment Processing

We accept payments through:

• PayPal

• Credit and debit card payment providers integrated through the Wix platform.

Payment information is processed securely by our payment processors. We do not store full credit or debit card details on our servers.

Please review the privacy policies of these payment providers for further information.

​

6. Website Platform and Third-Party Service Providers

Our online store is hosted on Wix, which provides the e-commerce platform enabling us to sell our products.

We may share personal data with trusted third parties where necessary, including:

• Website hosting and infrastructure providers (Wix).

• Payment processors (including PayPal and card payment providers).

• Dropshipping suppliers and fulfilment partners.

• Shipping and logistics companies.

• Analytics and marketing service providers.

• Professional advisers such as accountants, auditors, and legal advisers.

• Government authorities or regulators where required by law.

All third-party service providers are required to process personal data in accordance with applicable data protection laws and only for specified purposes.

​

7. Dropshipping Suppliers

As a dropshipping business, we share certain personal information with our suppliers and fulfilment partners to process and deliver orders.

The information shared may include:

• Customer name

• Shipping address

• Contact information

• Order details

Suppliers are contractually required to use this information solely for order fulfilment purposes and to maintain appropriate security measures.

​

8. International Data Transfers

Because we operate using international service providers, including Wix, PayPal, payment processors, analytics providers, and dropshipping suppliers, your personal data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area (EEA).

Where personal data is transferred internationally, we ensure that appropriate safeguards are implemented, including:

• Adequacy decisions approved by the European Commission or UK authorities.

• Standard Contractual Clauses (SCCs).

• Other lawful transfer mechanisms permitted under applicable data protection laws.

​

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including legal, accounting, and reporting obligations.

Typically:

• Order and transaction records are retained for up to 7 years to comply with tax and accounting requirements.

• Customer service communications are retained for as long as reasonably necessary to resolve enquiries.

• Marketing data is retained until consent is withdrawn or the data is no longer required.

When personal data is no longer needed, it will be securely deleted or anonymised.

​

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve user experience, analyse website performance, and provide personalised content.

Cookies may include:

Essential Cookies

Required for website functionality, shopping cart features, and secure checkout.

Analytics Cookies

Used to understand how visitors interact with our website and improve performance.

Marketing Cookies

Used to deliver relevant advertisements and marketing communications.

Where required by law, we will request your consent before placing non-essential cookies on your device.

You can manage or disable cookies through your browser settings or through our cookie consent banner.

​

11. Your GDPR Rights

Under the GDPR, you have the following rights:

• The right to be informed.

• The right of access to your personal data.

• The right to rectification of inaccurate information.

• The right to erasure ("right to be forgotten").

• The right to restrict processing.

• The right to data portability.

• The right to object to processing.

• Rights relating to automated decision-making and profiling.

• The right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the contact details provided above.

We may request proof of identity before responding to your request.

​

12. Marketing Communications

If you opt in to receive marketing communications, we may send you information about products, promotions, and updates.

You may unsubscribe at any time by:

• Clicking the unsubscribe link in marketing emails; or

• Contacting us directly.

​

13. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, disclosure, alteration, or destruction.

However, no method of transmission over the internet can be guaranteed to be completely secure.

​

14. Children's Privacy

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

If we become aware that personal data from a child has been collected, we will take steps to delete it promptly.

​

15. Complaints

If you believe that we have not handled your personal data appropriately, you have the right to lodge a complaint with your local data protection authority.

In the United Kingdom, complaints may be made to the Information Commissioner's Office (ICO).

We encourage you to contact us first so that we can attempt to resolve any concerns.

​

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes.

Any updates will be posted on this page with a revised "Last Updated" date.

Continued use of our website after any changes indicates acceptance of the updated Privacy Policy.