Privacy Policy

PRIVACY POLICY

Last Updated: September 21, 2026

This Privacy Policy describes how Shenzhen Xuanaique International Trading Co., Ltd., doing business as Lumaverae ("Lumaverae," "we," "us," or "our"), collects, uses, discloses, stores, and otherwise processes personal information when you visit or use the Lumaverae online store, purchase our products, create or use an account, subscribe to our communications, contact us, or otherwise interact with our website, products, and services (collectively, the "Services").

Our online store is powered by Shopify, which provides the ecommerce platform and related technologies that enable us to offer the Services.

For purposes of applicable data protection laws, unless otherwise stated, Shenzhen Xuanaique International Trading Co., Ltd. is the data controller or business responsible for the personal information described in this Privacy Policy.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood the practices described in this Privacy Policy.

1. WHO WE ARE

Lumaverae is operated by:

Company Name: Shenzhen Xuanaique International Trading Co., Ltd.
Registration No.: 91440300MAKD1YB549
Brand / Store Name: Lumaverae
Email: support@lumaverae.com
Tel: +86 186 8987 6788
Address: Room 310, No. 32, West Area, Chentian Village, Chentian Community, Xixiang Subdistrict, Bao'an District, Shenzhen, China

If you have questions regarding this Privacy Policy or wish to exercise a privacy right, please contact us using the details above.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information that we process in connection with the Services, including information collected when you:

  • visit or browse our online store;

  • search for or view products;

  • place products in your shopping cart;

  • create or use a customer account;

  • place, pay for, cancel, return, or otherwise manage an order;

  • subscribe to our email marketing or other promotional communications;

  • contact our customer service team;

  • participate in promotions, surveys, reviews, or other features that may be made available;

  • interact with our advertisements or marketing campaigns; or

  • otherwise communicate or interact with Lumaverae.

This Privacy Policy does not necessarily apply to websites, applications, platforms, or services operated independently by third parties, even where those services are linked from our website.

3. PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with us, the products and Services you use, your location, and the choices you make.

We may collect the following categories of personal information.

3.1 Contact Information

This may include:

  • first and last name;

  • email address;

  • telephone number;

  • billing address;

  • shipping address; and

  • other contact information that you provide to us.

3.2 Account Information

If you create or use a customer account, we may process information such as:

  • account name or profile information;

  • email address;

  • account credentials or authentication information;

  • saved addresses;

  • account preferences;

  • order history; and

  • account settings.

Passwords and authentication credentials may be processed through Shopify or other authentication providers and may not be directly accessible to us in readable form.

3.3 Order and Transaction Information

When you place or attempt to place an order, we may collect or process:

  • products purchased or considered;

  • shopping cart information;

  • order number;

  • purchase amount;

  • discounts;

  • billing and shipping information;

  • payment method;

  • payment confirmation or transaction status;

  • delivery information;

  • returns, refunds, exchanges, or cancellations; and

  • previous transaction history.

3.4 Payment Information

Payments are processed through Shopify and/or third-party payment providers made available at checkout, such as PayPal or other supported payment methods.

Depending on your selected payment method, the payment provider may collect information such as:

  • cardholder name;

  • payment card details;

  • billing information;

  • financial account details; and

  • transaction authentication information.

We generally receive transaction confirmation, payment status, limited payment details, and information necessary to administer your order rather than complete payment card credentials.

Your payment provider's processing of your information is also governed by its own privacy notice and terms.

3.5 Customer Service and Communications

If you contact us, we may collect:

  • your name and contact information;

  • order details;

  • copies or contents of messages;

  • customer service records;

  • information included in attachments you send us; and

  • other information you voluntarily provide.

Please avoid sending sensitive or confidential personal information through ordinary email or other unsecured communication channels unless it is necessary and specifically requested.

3.6 Device and Technical Information

When you access or use our Services, we and our service providers may automatically collect information such as:

  • Internet Protocol (IP) address;

  • browser type and version;

  • device type;

  • operating system;

  • device or online identifiers;

  • language settings;

  • approximate location derived from an IP address;

  • referring and exit pages;

  • date and time of access;

  • network connection information; and

  • information collected through cookies and similar technologies.

3.7 Website Usage Information

We may collect information about how you use our Services, such as:

  • pages visited;

  • products viewed;

  • searches performed;

  • links clicked;

  • products added to or removed from a shopping cart;

  • interactions with website features;

  • referring websites or advertisements;

  • session information; and

  • other interactions with our Services.

3.8 Marketing and Preference Information

Where applicable, we may collect:

  • email subscription status;

  • marketing preferences;

  • advertising preferences;

  • cookie preferences;

  • products or categories that may interest you; and

  • information concerning your interaction with promotional emails or advertisements.

4. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information from several sources.

4.1 Information You Provide Directly

We collect information directly from you when you:

  • make a purchase;

  • create an account;

  • subscribe to marketing communications;

  • fill in a form;

  • communicate with us;

  • request customer support; or

  • otherwise provide information to us.

4.2 Information Collected Automatically

Certain information is collected automatically when you visit or use our Services through technologies such as:

  • cookies;

  • pixels;

  • tags;

  • software development kits;

  • log files;

  • web beacons; and

  • similar technologies.

4.3 Information From Service Providers

We may receive information from companies that provide services to us, including:

  • Shopify;

  • payment processors;

  • fraud-prevention providers;

  • fulfillment providers;

  • logistics and delivery companies;

  • analytics providers;

  • marketing and advertising providers;

  • customer-support providers; and

  • technology and hosting providers.

4.4 Information From Business and Marketing Partners

Where permitted by applicable law, we may also receive information from advertising platforms, social media platforms, marketing partners, and other business partners.

5. HOW WE USE PERSONAL INFORMATION

We may use personal information for the following purposes.

5.1 Providing and Fulfilling the Services

We use personal information to:

  • process and fulfill orders;

  • process payments;

  • provide order confirmations;

  • arrange shipping and delivery;

  • provide order tracking;

  • process refunds, returns, cancellations, and exchanges;

  • maintain customer accounts;

  • remember preferences;

  • provide customer support; and

  • otherwise perform our contractual obligations to you.

5.2 Customer Communications

We may use your information to:

  • respond to questions;

  • provide customer support;

  • provide information relating to your orders;

  • notify you of changes affecting your purchase or account;

  • resolve complaints or disputes; and

  • maintain our customer relationship with you.

5.3 Marketing and Advertising

Where permitted by applicable law, we may use personal information to:

  • send promotional emails;

  • provide information about products, promotions, or special offers;

  • measure marketing effectiveness;

  • personalize marketing content;

  • create or measure advertising audiences; and

  • display advertisements that may be relevant to you.

Where consent is legally required, we will conduct such marketing or advertising activities on the basis of your consent.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in our marketing emails.

Even after you unsubscribe from promotional communications, we may continue to send non-promotional communications that are necessary for your transactions or customer relationship, such as order confirmations, shipping notices, security messages, or responses to customer service requests.

5.4 Personalization and Service Improvement

We may use personal information to:

  • understand how customers use our Services;

  • improve website functionality;

  • analyze product and website performance;

  • customize shopping experiences;

  • recommend relevant products;

  • understand customer interests; and

  • develop and improve our products and Services.

5.5 Security and Fraud Prevention

We may process personal information to:

  • authenticate accounts;

  • prevent fraudulent transactions;

  • detect suspicious activity;

  • prevent abuse of our Services;

  • protect our customers;

  • protect our business and systems; and

  • investigate potential violations of our policies.

5.6 Legal and Compliance Purposes

We may use personal information where necessary to:

  • comply with applicable laws and regulations;

  • comply with accounting, tax, customs, and recordkeeping requirements;

  • respond to valid legal requests;

  • establish, exercise, or defend legal claims;

  • enforce our Terms of Service or other policies; and

  • protect our legal rights or the rights of others.

6. LEGAL BASES FOR PROCESSING — EEA AND UNITED KINGDOM

If the General Data Protection Regulation ("GDPR"), UK GDPR, or similar legislation applies to our processing of your personal information, we process personal information only where an appropriate legal basis exists.

Depending on the circumstances, our legal bases may include:

Performance of a Contract

We process personal information where it is necessary to enter into or perform a contract with you, including processing orders, payments, deliveries, refunds, returns, and customer service requests.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.

These interests may include:

  • protecting our business against fraud;

  • securing our Services;

  • improving our products and website;

  • operating and administering our business;

  • understanding the effectiveness of our Services;

  • providing customer support; and

  • conducting appropriate marketing where permitted by law.

Consent

Where required, we rely on your consent, including for certain cookies, advertising technologies, or direct marketing communications.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before consent was withdrawn.

Legal Obligation

We may process personal information when necessary to comply with legal requirements, including tax, accounting, consumer protection, customs, fraud-prevention, and regulatory obligations.

7. COOKIES AND SIMILAR TECHNOLOGIES

We and our service providers use cookies and similar technologies to operate, secure, analyze, and improve our Services.

Cookies may include the following categories.

Strictly Necessary Cookies

These cookies are required for important website functions such as:

  • maintaining your shopping cart;

  • processing checkout;

  • providing secure account access;

  • remembering privacy choices;

  • preventing fraud; and

  • maintaining website security.

These technologies may be used without consent where permitted by applicable law because they are necessary to provide the Services you request.

Functional Cookies

Functional cookies may remember preferences and improve website functionality and personalization.

Analytics Cookies

Analytics technologies help us understand how visitors interact with the Services, measure website performance, and identify areas for improvement.

Advertising and Marketing Cookies

Subject to applicable law and your consent choices, advertising technologies may be used to:

  • measure advertising campaigns;

  • understand advertising interactions;

  • provide more relevant advertisements; and

  • support interest-based or targeted advertising.

Managing Cookie Preferences

Where available, you can manage non-essential cookie choices through the Cookie Preferences function on our website.

You may also configure your browser to block or delete cookies. However, blocking certain cookies may affect the functionality of the Services.

Where legally required and supported by our ecommerce platform, we may also recognize qualifying browser-based privacy preference signals, including Global Privacy Control ("GPC") signals.

8. HOW WE DISCLOSE PERSONAL INFORMATION

We do not disclose personal information except as reasonably necessary for the purposes described in this Privacy Policy or as otherwise permitted or required by law.

We may disclose personal information to the following categories of recipients.

8.1 Shopify

Our online store is hosted and powered by Shopify.

Shopify processes information concerning your interaction with our store in order to provide ecommerce, checkout, security, analytics, personalization, and other platform services.

Depending on the Shopify services and features that are enabled, Shopify may process certain customer information for its own purposes as an independent controller or "business" under applicable privacy laws.

Please review Shopify's Consumer Privacy Policy for more information regarding Shopify's processing practices.

Depending on your location, you may also be able to exercise certain rights regarding Shopify's processing through the Shopify Privacy Portal.

8.2 Payment Processors

We disclose or transmit information as necessary to payment processors and financial service providers so that they can:

  • authorize payments;

  • process transactions;

  • conduct fraud screening;

  • authenticate transactions;

  • process refunds; and

  • provide payment-related services.

Payment processors process information according to their own privacy policies and security requirements.

8.3 Fulfillment and Shipping Providers

We may provide information such as your name, telephone number, email address, shipping address, and order details to:

  • warehouses;

  • fulfillment partners;

  • postal services;

  • courier companies;

  • logistics companies; and

  • customs or import/export service providers

where necessary to fulfill and deliver an order.

8.4 Technology and Service Providers

We may use service providers for purposes including:

  • website hosting;

  • cloud storage;

  • cybersecurity;

  • fraud detection;

  • email communications;

  • customer support;

  • analytics;

  • website optimization;

  • advertising;

  • marketing; and

  • information technology services.

These providers may process personal information as necessary to provide their services to us.

8.5 Advertising and Marketing Partners

Where permitted by applicable law and subject to your privacy choices, we may provide or make available certain online identifiers, device information, browsing information, or other information to advertising or marketing partners for advertising measurement, campaign optimization, or targeted advertising.

8.6 Professional Advisers

We may disclose information to professional advisers such as:

  • lawyers;

  • accountants;

  • auditors;

  • insurers;

  • tax advisers; and

  • other professional consultants

where reasonably necessary for legitimate business or legal purposes.

8.7 Legal and Regulatory Disclosures

We may disclose personal information when we reasonably believe disclosure is necessary to:

  • comply with applicable law;

  • respond to a valid court order, subpoena, warrant, or lawful governmental request;

  • enforce our agreements or policies;

  • investigate suspected fraud or unlawful conduct;

  • protect our rights or property; or

  • protect the safety or rights of customers or others.

8.8 Business Transactions

If Lumaverae or Shenzhen Xuanaique International Trading Co., Ltd. undergoes or considers a merger, acquisition, restructuring, financing, sale of assets, insolvency, or similar corporate transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

9. SHOPIFY AND ENHANCED SERVICES

Shopify provides the ecommerce infrastructure that powers our store.

Information you submit through the Services may therefore be transmitted to or processed by Shopify and its service providers.

Where we enable Shopify Network Intelligence or other Shopify Enhanced Services, Shopify may use information from your interactions with our store, Shopify, and other merchants to provide or improve certain services, which may include:

  • fraud prevention;

  • analytics;

  • product and shopping personalization;

  • measurement;

  • improved store functionality; and

  • advertising-related services.

In circumstances where Shopify independently determines the purposes and means of such processing, Shopify may act as an independent data controller or business under applicable privacy laws.

Customers may review Shopify's Consumer Privacy Policy and, where available, use Shopify's Privacy Portal to manage rights relating to processing performed independently by Shopify.

10. TARGETED ADVERTISING, SALE, AND SHARING

We do not sell personal information for money.

However, certain privacy laws use broad definitions of terms such as "sale," "sharing," or "targeted advertising."

As a result, certain disclosures of online identifiers, cookie information, device information, or browsing activity to advertising, marketing, or analytics partners may be considered a "sale," "sharing," or processing for "targeted advertising" under certain U.S. state privacy laws even where no money is exchanged.

Where applicable law provides such a right, you may opt out through:

  • our Cookie Preferences or privacy controls;

  • an applicable data-sharing opt-out mechanism available through our website;

  • a qualifying Global Privacy Control signal where supported and legally required; or

  • a request submitted to us at support@lumaverae.com.

We do not knowingly sell or share, as those terms are defined under applicable U.S. privacy laws, personal information relating to individuals under 16 years of age.

11. INTERNATIONAL DATA TRANSFERS

Lumaverae operates internationally, and our company is located in Shenzhen, China.

Accordingly, personal information may be transferred to, accessed from, stored in, or processed in countries other than the country in which you live, including China and countries in which Shopify, payment processors, logistics providers, cloud-service providers, or other service providers operate.

Privacy and data protection laws in these countries may differ from those in your home jurisdiction.

Where applicable law requires safeguards for international transfers of personal information, we will rely on appropriate legally recognized transfer mechanisms.

For transfers subject to the GDPR or UK GDPR, these mechanisms may include, where applicable:

  • an adequacy decision;

  • European Commission Standard Contractual Clauses;

  • the UK International Data Transfer Agreement or applicable UK Addendum; or

  • another legally recognized transfer mechanism.

We also require relevant service providers to handle personal information consistently with applicable data-protection obligations.

12. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law.

The appropriate retention period depends on factors including:

  • the type of information;

  • whether you maintain a customer account;

  • the nature and duration of our relationship with you;

  • the time necessary to fulfill an order;

  • applicable tax and accounting obligations;

  • consumer-protection requirements;

  • fraud-prevention requirements;

  • applicable limitation periods;

  • potential disputes; and

  • whether retention is necessary to establish, exercise, or defend legal claims.

For example, order and transaction information may be retained after an order has been completed where necessary for accounting, tax, fraud-prevention, warranty, dispute-resolution, or other legal purposes.

Marketing information may be retained until you unsubscribe or object, after which we may retain limited suppression information to ensure that your preference continues to be respected.

When personal information is no longer reasonably required, we may delete, anonymize, or otherwise securely dispose of it in accordance with applicable law.

13. INFORMATION SECURITY

We use reasonable administrative, organizational, and technical measures designed to protect personal information from:

  • unauthorized access;

  • unauthorized disclosure;

  • alteration;

  • misuse;

  • accidental loss; and

  • destruction.

We also rely on service providers such as Shopify and payment providers that maintain their own security controls.

However, no method of transmission over the Internet and no electronic storage system can be guaranteed to be completely secure.

You should therefore use appropriate caution when transmitting personal or confidential information online.

You are responsible for maintaining the confidentiality of your account credentials and should not disclose your password or account access information to others.

If you believe that your account or personal information has been compromised, please contact us promptly.

14. YOUR PRIVACY RIGHTS

Depending on where you live and subject to applicable legal conditions and exceptions, you may have some or all of the following rights.

Right to Access or Know

You may have the right to request information about the personal information we process about you and obtain a copy of that information.

Right to Correction

You may have the right to request that inaccurate or incomplete personal information be corrected.

Right to Deletion

You may have the right to request deletion of personal information, subject to applicable exceptions.

For example, we may be permitted or required to retain certain information to complete transactions, comply with legal obligations, prevent fraud, resolve disputes, or establish legal claims.

Right to Data Portability

Where applicable, you may have the right to receive certain personal information in a structured, commonly used, and machine-readable format or request transmission to another organization.

Right to Restrict Processing

You may have the right to request restriction of certain processing activities.

Right to Object

Where processing is based on legitimate interests, you may have the right to object to such processing in certain circumstances.

You may also have the right to object to processing for direct marketing purposes.

Right to Withdraw Consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect processing lawfully carried out before consent was withdrawn.

Right to Opt Out of Sale, Sharing, or Targeted Advertising

Where applicable law grants you this right, you may opt out of processing considered to constitute a sale, sharing, or targeted advertising.

Right to Appeal

Residents of certain jurisdictions may have the right to appeal our decision concerning a privacy request.

Right to Non-Discrimination

Where applicable, we will not unlawfully discriminate against you because you exercise a privacy right.

15. PRIVACY RIGHTS FOR UNITED STATES RESIDENTS

Residents of certain U.S. states may have additional privacy rights under applicable state laws.

Depending on the jurisdiction and whether the applicable law applies to us, these rights may include the right to:

  • confirm whether we process your personal information;

  • access or know personal information;

  • obtain information regarding categories of personal information collected, used, or disclosed;

  • correct inaccurate personal information;

  • delete personal information;

  • obtain a portable copy of personal information;

  • opt out of sale of personal information;

  • opt out of sharing for cross-context behavioral advertising;

  • opt out of targeted advertising;

  • limit certain uses of sensitive personal information where applicable;

  • use an authorized agent to submit a request;

  • appeal certain privacy-request decisions; and

  • receive equal service and pricing without unlawful discrimination for exercising privacy rights.

California law, for example, may provide qualifying consumers with rights to know, correct, delete, and opt out of the sale or sharing of personal information.

These rights are subject to applicable legal thresholds, exemptions, verification requirements, and exceptions.

16. EEA AND UNITED KINGDOM PRIVACY RIGHTS

If you are located in the European Economic Area ("EEA") or United Kingdom, applicable data-protection laws may provide you with rights including:

  • access;

  • rectification;

  • erasure;

  • restriction of processing;

  • data portability;

  • objection to certain processing;

  • objection to direct marketing;

  • withdrawal of consent; and

  • the right to lodge a complaint with an applicable supervisory authority.

You may submit a request to us using the contact information at the end of this Privacy Policy.

You also have the right to lodge a complaint with the data-protection authority responsible for your place of residence or work or the location of an alleged infringement.

17. HOW TO EXERCISE YOUR PRIVACY RIGHTS

To submit a privacy request, contact:

Email: support@lumaverae.com

Please clearly describe the right you wish to exercise and provide sufficient information for us to identify the relevant account or transaction.

To protect your personal information, we may need to verify your identity before fulfilling certain requests.

Depending on applicable law, verification may include confirming information already associated with your account or order.

We will only request information reasonably necessary to verify and process your request.

Where permitted by law, you may appoint an authorized agent to submit a request on your behalf. We may request evidence showing that the agent is authorized to act for you and may also require direct verification from you.

We will respond within the period required by applicable law.

Certain requests may be denied or limited where an applicable exception applies. Where required by law, we will explain the basis for our decision and any available appeal procedure.

18. MARKETING COMMUNICATIONS

If you subscribe to our marketing communications, we may send information about products, promotions, special offers, and other Lumaverae news.

You may opt out of promotional email communications at any time by:

Unsubscribing from marketing does not prevent us from sending necessary transactional or service-related messages, such as order confirmations, shipping notifications, account notices, or customer-support messages.

19. CHILDREN'S PRIVACY

Our Services are intended for a general adult audience and are not designed or directed primarily toward children.

We do not knowingly collect personal information from children below the minimum age permitted to provide personal information independently under applicable law.

Individuals who are not legally capable of entering into a purchase contract in their jurisdiction should use the Services only with the involvement of a parent or legal guardian where permitted by law.

If you are a parent or legal guardian and believe that a child has provided personal information to us inappropriately, please contact us at support@lumaverae.com.

If we determine that personal information was collected from a child contrary to applicable law, we will take appropriate steps to delete or otherwise handle that information as required.

20. THIRD-PARTY WEBSITES AND SERVICES

Our Services may contain links or integrations relating to third-party websites, social networks, payment providers, or other services.

We do not control the independent privacy practices of those third parties.

When you access a third-party website or service, that third party may collect information directly from you in accordance with its own privacy policy.

We encourage you to review the privacy policies and terms of third-party services before providing personal information to them.

The inclusion of a third-party link does not necessarily mean that we endorse or control that third party's privacy practices.

21. AUTOMATED DECISION-MAKING

We and our service providers may use automated systems to assist with activities such as:

  • fraud detection;

  • transaction security;

  • risk assessment;

  • website personalization;

  • product recommendations; and

  • advertising optimization.

Where applicable law provides rights relating to decisions based solely on automated processing that produce legal or similarly significant effects, we will comply with those requirements.

22. DO NOT TRACK AND GLOBAL PRIVACY CONTROL

Some browsers offer "Do Not Track" settings.

Because there is not a universally accepted standard governing all Do Not Track signals, our Services may not respond to traditional Do Not Track signals in all circumstances.

However, where required under applicable privacy law and supported by our platform configuration, we may recognize qualifying Global Privacy Control ("GPC") signals as requests to opt out of certain sale, sharing, or targeted-advertising activities.

You may also use privacy and Cookie Preferences controls available through our website.

23. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • changes to our Services;

  • changes to our business practices;

  • changes to technologies or service providers;

  • operational requirements; or

  • changes to legal or regulatory requirements.

When we update this Privacy Policy, we will publish the revised version and update the "Last Updated" date at the top of this page.

Where required by applicable law, we will provide additional notice or obtain consent regarding material changes.

We encourage you to review this Privacy Policy periodically.

24. QUESTIONS, COMPLAINTS, AND CONTACT INFORMATION

If you have questions regarding this Privacy Policy, believe your personal information has been handled improperly, or wish to exercise a privacy right, please contact us.

Lumaverae

Legal Entity / Data Controller:
Shenzhen Xuanaique International Trading Co., Ltd.

Registration No.:
91440300MAKD1YB549

Email:
support@lumaverae.com

Telephone:
+86 186 8987 6788

Registered / Contact Address:
Room 310, No. 32, West Area, Chentian Village, Chentian Community, Xixiang Subdistrict, Bao'an District, Shenzhen, China

If you are located in a jurisdiction that provides a right to complain to a data-protection regulator, you may also lodge a complaint with the competent supervisory authority in your jurisdiction.

For processing independently conducted by Shopify, you may also review Shopify's Consumer Privacy Policy and use Shopify's Privacy Portal where applicable.

© 2026 Lumaverae / Shenzhen Xuanaique International Trading Co., Ltd. All rights reserved.