Legal
Privacy policy
This policy explains what personal data we process and why.
Who we are
Lumora (contact: redlightlumora@gmail.com) is the data controller for personal data processed through this website.
What we collect
- Order data: name, delivery address, email, phone and order contents
- Payment data: processed by our payment provider; we never see full card details
- Support data: the content of messages you send us
- Newsletter data: your email address, if you subscribe
- Analytics data: only with your consent, via the cookie banner
Why we process it
To fulfil your order (contract), to meet accounting and consumer-law obligations (legal obligation), to answer support requests and improve the store (legitimate interest), and to send marketing email or run analytics (consent).
Retention
Order and invoice records are kept for the period required by tax law. Newsletter data is kept until you unsubscribe. Analytics data is kept for a maximum of 14 months.
Your rights
You may request access, correction, erasure, restriction or portability of your data, and object to processing based on legitimate interest. Contact redlightlumora@gmail.com. You may also complain to your national data protection authority.
Sharing
We share data only with the processors needed to run the store: our e-commerce platform, payment provider, shipping carriers, and — with consent — analytics and email providers.