Legal

Privacy policy

This policy explains what personal data we process and why.

Who we are

Lumora (contact: redlightlumora@gmail.com) is the data controller for personal data processed through this website.

What we collect

  • Order data: name, delivery address, email, phone and order contents
  • Payment data: processed by our payment provider; we never see full card details
  • Support data: the content of messages you send us
  • Newsletter data: your email address, if you subscribe
  • Analytics data: only with your consent, via the cookie banner

Why we process it

To fulfil your order (contract), to meet accounting and consumer-law obligations (legal obligation), to answer support requests and improve the store (legitimate interest), and to send marketing email or run analytics (consent).

Retention

Order and invoice records are kept for the period required by tax law. Newsletter data is kept until you unsubscribe. Analytics data is kept for a maximum of 14 months.

Your rights

You may request access, correction, erasure, restriction or portability of your data, and object to processing based on legitimate interest. Contact redlightlumora@gmail.com. You may also complain to your national data protection authority.

Sharing

We share data only with the processors needed to run the store: our e-commerce platform, payment provider, shipping carriers, and — with consent — analytics and email providers.