Privacy Policy

Last Updated: [Insert Date]

1. Introduction

Xingrui Foreign Trade Center, Qingxiu District, Nanning City (doing business as “LUMOOLA”, “we”, “us”, or “our”) is committed to protecting your personal information and your right to privacy. This Privacy Policy applies to our website https://www.lumoola.com (Link), and any related services, sales, marketing, or events (we refer to them collectively in this Privacy Policy as the “Services”).

By accessing or using our Website, you trust us with your personal information. We take your privacy very seriously. In this privacy notice, we seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it.

This policy is designed to comply with major international privacy laws, including the General Data Protection Regulation (GDPR) for European users and the California Consumer Privacy Act (CCPA) for users in the United States.

Please read this privacy policy carefully as it will help you make informed decisions about sharing your personal information with us.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the Website, express an interest in obtaining information about us or our products and services, when you participate in activities on the Website (such as posting messages in our online forums, using our chat support, or entering competitions), or otherwise when you contact us.

2.1 Personal Information Provided by You

The personal information that we collect depends on the context of your interactions with us and the Website, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Personal Identity Data: Name, username, billing address, shipping address, email address, and phone number.
• Credentials: Passwords, password hints, and similar security information used for authentication and account access.
• Payment Data: We may collect data necessary to process your payment if you make purchases (including subscriptions and physical products), such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. Note: All payment data is stored by our payment processor (e.g., PayPal, Stripe). You should review their privacy policies and contact the payment processor directly to respond to your questions.
• User-Generated Content: Content you voluntarily upload or input, including text and images sent via our chat windows, contact forms, or posted in comment sections/reviews.

2.2 Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Website. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as:

• Log and Usage Data: IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Website.
• Cookies and Tracking: We use cookies and similar tracking technologies to access or store information. Specific information about how we use such technologies is set out in our “Cookie Policy” section below.

3. How We Use Your Information

We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.

We use the information we collect or receive:

• To facilitate account creation and logon process: If you choose to link your account with us to a third-party account (such as your Google or Facebook account), we use the information you allowed us to collect from those third parties to facilitate account creation and logon process.
• To fulfill and manage your orders: We use your information to fulfill and manage your orders, subscriptions, payments, returns, and exchanges made through the Website.
• To post testimonials and reviews: We post testimonials on our Website that may contain personal information. Prior to posting a testimonial, we will obtain your consent to use your name and the content of the testimonial.
• To allow you to create an account: We use your info to manage your registered account and provide paid subscription content.
• To send you marketing and promotional communications: We and/or our third-party marketing partners may use the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt-out of our marketing emails at any time.
• To protect our Services: We may use your information as part of our efforts to keep our Website safe and secure (for example, for fraud monitoring and prevention).

4. Legal Basis for Processing (GDPR Statement)

If you are from the European Economic Area (EEA) or the UK, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only:

1. Contractual Necessity: Where we need the personal information to perform a contract with you (e.g., to ship a bracelet you purchased or provide access to a paid subscription).
2. Consent: Where you have given us your consent to do so (e.g., subscribing to a newsletter).
3. Legitimate Interests: Where the processing is in our legitimate interests and not overridden by your rights (e.g., for fraud prevention or improving our website).

5. Sharing Your Information

We only share information with the following third parties. We have categorized each party so that you may easily understand the purpose of our data collection and processing practices.

• Invoice and Billing: We may share your data with third-party payment processors (such as PayPal or Stripe) to process payments for products and subscriptions.
• Logistics and Shipping: We share your name, address, and phone number with logistics providers (such as DHL, FedEx, UPS, or China Post) to deliver physical goods to you.
• Web Analytics: We may use third-party service providers (such as Google Analytics) to monitor and analyze the use of our Service.
• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

6. International Data Transfers

LUMOOLA is based in China. If you are accessing our Website from outside China, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information (see “Sharing Your Information” above), in China and other countries.

If you are a resident in the European Economic Area (EEA) or United Kingdom (UK), then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. We will however take all necessary measures to protect your personal information in accordance with this privacy policy and applicable law.

7. How Long We Keep Your Information

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

• Account Information: Retained as long as your account is active.
• Order History: Retained for accounting and tax audit purposes (typically 5-7 years depending on jurisdiction).
• Marketing Data: Retained until you opt-out or unsubscribe.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

8. Security of Your Information

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

9. Your Privacy Rights (GDPR & Global)

In some regions (like the EEA and UK), you have certain rights under applicable data protection laws. These may include the right:

1. To request access and obtain a copy of your personal information.
2. To request rectification or erasure.
3. To restrict the processing of your personal information.
4. If applicable, to data portability.
5. Not to be subject to automated decision-making.

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal.

To exercise any of these rights, please contact us at info@lumoola.com. We will consider and act upon any request in accordance with applicable data protection laws.

10. Information for California Residents (CCPA)

This section applies only to California residents. Under the California Consumer Privacy Act (CCPA), you have the rights listed below:

• Right to Know: You may request that we disclose to you what Personal Information we have collected, used, shared, or sold about you, and why we collected, used, shared, or sold that information.
• Right to Delete: You may request that we delete Personal Information we collected from you and explicitly tell our service providers to do the same.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

LUMOOLA does not sell your personal information to third parties for monetary value.

11. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

12. Updates to This Policy

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

13. Contact Us

If you have questions or comments about this policy, or if you wish to exercise your privacy rights, you may contact our Data Protection Officer (DPO) or privacy team by email at info@lumoola.com, or by post to:

Entity Name: Xingrui Foreign Trade Center, Qingxiu District, Nanning City Brand Name: LUMOOLA Address: Room 3103, Building A, Tianjian International Mansion, No. 9 Zhongtai Road, Qingxiu District, Nanning City, Guangxi Province, China.

Contact Page: https://www.lumoola.com/contact (Link)