Lumihour ("we", "us", "our") operates this website and the related services, including all information, content, features, tools, products and services made available through it (together, the "Services"), in order to provide you with a curated shopping experience. Lumihour is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and disclose your personal information as described below.

1. Personal Information We Collect

Depending on how you interact with the Services, we may collect the following categories of personal information:

• Contact details, including your name, billing and shipping address, phone number, and email address.
• Financial information, including payment card details and transaction information, processed securely by Stripe, our payment services provider. We do not store your full payment card details ourselves.
• Account information, including your username, password, and preferences, if you create an account.
• Order and transaction information, including items viewed, added to your cart or wishlist, purchased, returned or exchanged.
• Communications, including messages you send us through our contact form, email, or otherwise.
• Device and usage information, including your IP address, browser type, and how you interact with the Services.

2. How We Collect Personal Information

We collect personal information directly from you (for example, when you place an order or contact us), automatically through your use of the Services (for example, through cookies and similar technologies), and from service providers who help us operate the Services, such as Stripe and delivery couriers.

3. How We Use Your Personal Information

• To provide and improve our Services, including processing payments, fulfilling and shipping orders, managing returns, maintaining your account, and personalising your shopping experience.
• To communicate with you, including order confirmations, shipping updates, responses to enquiries, and, where you have consented, marketing communications.
• For security and fraud prevention, including detecting and preventing fraudulent or unauthorised activity.
• To comply with our legal obligations, including tax, accounting, and consumer protection requirements.

4. Our Legal Basis for Processing (UK GDPR)

Where the UK General Data Protection Regulation applies, we rely on the following legal bases to process your personal information: performance of a contract with you (for example, to fulfil your order); our legitimate interests (for example, to prevent fraud or improve our Services), provided these are not overridden by your interests; your consent (for example, for marketing emails, which you may withdraw at any time); and compliance with a legal obligation.

5. How We Share Your Personal Information

We do not sell your personal information. We may share it with:

• Shopify and other service providers who help us operate the Services, including Stripe (payment processing) and delivery couriers.
• Marketing and analytics partners, where you have consented to marketing communications or analytics cookies.
• Professional advisers, regulators, or law enforcement, where required by law or to protect our legal rights.

The Services are hosted by Shopify, which processes personal information about your use of the Services on our behalf. To learn more about how Shopify handles personal information, you can visit Shopify's Consumer Privacy Policy. Payment information you provide at checkout is processed by Stripe in accordance with the Stripe Privacy Policy.

6. Cookies

We use cookies and similar technologies to operate our store, remember your preferences, and understand how our Services are used. You can manage or disable cookies through your browser settings, though some parts of the Services may not function properly if you do so.

7. Data Retention

We retain your personal information for as long as necessary to provide the Services, comply with our legal obligations (including tax and accounting requirements), resolve disputes, and enforce our agreements.

8. International Transfers

Your personal information may be transferred to, and processed in, countries other than the United Kingdom, where Shopify, Stripe, and some of our other service providers are located. Where we do so, we rely on appropriate safeguards, such as the UK's International Data Transfer Agreement or Addendum, or a determination that the destination country provides an adequate level of protection.

9. Your Rights

If you are located in the UK, you have the right, subject to certain exceptions, to:

• Request access to the personal information we hold about you;
• Request that we correct inaccurate personal information;
• Request that we delete your personal information;
• Object to, or request that we restrict, certain processing of your personal information;
• Request a copy of your personal information in a portable format;
• Withdraw your consent at any time, where we rely on consent to process your personal information; and
• Opt out of marketing communications at any time, using the unsubscribe link in our emails or by contacting us.

To exercise any of these rights, please contact us using the details below. If you are unhappy with how we have handled your personal information, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Children's Privacy

The Services are not directed at children, and we do not knowingly collect personal information from children under the age of 13. If you believe we have inadvertently collected such information, please contact us so we can delete it.

11. Security

We use reasonable technical and organisational measures to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. We will post the updated policy on this page with a revised "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us at support@lumi.com

Lumihour is currently operated as an independent online store. Full legal entity details will be added here once business registration is complete.