Privacy policy


Last updated: 7 September 2026

At LUMORA, we respect your privacy and are committed to handling your personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit our website, create an account, place an order, request a customised product, contact us or otherwise interact with LUMORA.

This policy is intended primarily for customers and website visitors in the United Kingdom.

1. WHO WE ARE

LUMORA is operated by:

Yuhang Cross-Border E-Commerce Co., Ltd.（屿航跨境电子商务有限公司）, trading as LUMORA

Address:
Room 508, 5th Floor, Zhejiang Innovation Center,
Yinzhou District, Ningbo, Zhejiang, China

Privacy Contact:
vip@kailashop.com

For the purposes of applicable UK data protection law, Yuhang Cross-Border E-Commerce Co., Ltd. is the controller of the personal information described in this Privacy Policy, except where another organisation acts as an independent controller for its own processing activities.

UK Representative

As LUMORA is operated by a company established outside the United Kingdom, we intend to appoint a UK representative where required by applicable UK data protection law.

UK Representative:
[NAME OF UK REPRESENTATIVE]

Address:
[UK ADDRESS]

Email:
[UK REPRESENTATIVE EMAIL]

IMPORTANT: Replace the above information before formally launching to UK customers.

2. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with LUMORA, we may collect the following categories of personal information.

Identity and Contact Information

This may include:

  • Your name
  • Email address
  • Telephone number
  • Billing address
  • Delivery address

Account Information

If you create a LUMORA account, we may process information associated with your account, order history and account preferences.

Login and authentication information may be processed through our website platform and related service providers.

You may also shop as a guest without creating an account where this option is available.

Order and Transaction Information

This may include:

  • Products purchased
  • Order number
  • Order value
  • Delivery information
  • Returns and refunds
  • Order status
  • Customisation requests
  • Transaction records

Payment Information

Payments may be processed through PayPal and other payment or card processing providers made available at checkout.

Payment providers may collect your card or payment credentials directly.

LUMORA generally does not receive or store your complete payment card number or card security code. We may receive information such as the payment method, transaction identifier, payment status, amount and other information required to manage your order.

Customisation Information

When requesting a customised LUMORA product, you may provide information such as:

  • Company logos
  • Names or commemorative wording
  • Personalised text
  • Hand-drawn designs
  • Custom dimensions
  • Custom colour requests
  • Other information necessary to create your requested product

We use this information to assess, design, produce and support your customised order.

Please avoid submitting sensitive personal information that is not necessary for your customisation request.

Communications

When you contact LUMORA, we may collect:

  • Emails
  • Customer service messages
  • Return or refund requests
  • Photographs or videos submitted in connection with product issues
  • Other correspondence you choose to provide

Technical and Website Information

When you use our website, our platform and service providers may automatically process certain technical information, which may include:

  • IP address
  • Browser type
  • Device information
  • Website activity
  • Security logs
  • Cookie or similar technology information

The precise information collected depends on the technologies used by our website and service providers.

Marketing Preferences

If you choose to subscribe to LUMORA marketing communications, we may record:

  • Your email address
  • Your subscription status
  • Marketing preferences
  • Your consent and withdrawal of consent

3. HOW WE COLLECT PERSONAL INFORMATION

We primarily obtain personal information directly from you when you:

  • Place an order
  • Create an account
  • Contact Customer Service
  • Request a customised product
  • Submit a return or refund request
  • Subscribe to marketing communications
  • Provide information through our website

We may also receive limited information from third parties involved in your transaction, such as payment providers, delivery providers and our ecommerce platform.

Certain technical information may be collected automatically when you use our website.

4. HOW AND WHY WE USE YOUR INFORMATION

We may use personal information for the following purposes.

Providing Our Products and Services

We use information to:

  • Process and fulfil orders
  • Create customer accounts
  • Produce customised products
  • Arrange shipping and delivery
  • Process returns and refunds
  • Communicate about orders
  • Provide customer support

Where appropriate, this processing is necessary to perform our contract with you or take steps at your request before entering into a contract.

Processing Payments

We use transaction information and work with payment providers to:

  • Process payments
  • Confirm payment status
  • Handle refunds
  • Prevent fraudulent transactions

Depending on the circumstances, we rely on performance of our contract, our legitimate interests in protecting our business and customers, and applicable legal obligations.

Operating and Protecting Our Website

We may process technical information to:

  • Operate the website
  • Maintain shopping cart and checkout functions
  • Support user accounts
  • Protect website security
  • Detect fraud, misuse or technical problems
  • Maintain service reliability

We rely on our legitimate interests in operating a secure and reliable ecommerce business where appropriate.

Customer Service

We use correspondence and order information to answer questions, resolve problems and provide after-sales support.

This may be necessary to perform our contract with you or for our legitimate interests in providing effective customer service.

Legal and Business Compliance

We may process information where reasonably necessary to:

  • Maintain required business and transaction records
  • Respond to lawful requests
  • Establish, exercise or defend legal claims
  • Prevent fraud or misuse
  • Comply with applicable legal, regulatory, accounting or tax requirements

The applicable lawful basis may include a legal obligation or our legitimate interests, depending on the circumstances.

Marketing

LUMORA will only send you marketing emails where you have actively chosen to subscribe or otherwise provided valid consent.

Purchasing a product does not automatically subscribe you to LUMORA marketing communications.

You may unsubscribe at any time using the unsubscribe option included in our marketing communications or by contacting us.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies that are necessary to operate ecommerce functionality, including:

  • Shopping cart functions
  • Customer account functions
  • Checkout
  • Security
  • Session management
  • Remembering certain website preferences where appropriate

At present, LUMORA does not intentionally use Meta Pixel, TikTok Pixel or Google advertising and remarketing tags on the website.

If we introduce non-essential analytics, advertising, profiling or remarketing technologies in the future, we will update our privacy information and obtain consent where required before activating those technologies.

Where consent is required, you will be provided with appropriate choices regarding the use of non-essential technologies.

Third-party services integrated into our website may also use technologies necessary to provide their services.

6. MARKETING AND ADVERTISING

We currently use an opt-in model for email marketing.

We do not automatically add customers to marketing lists simply because they have placed an order.

If you subscribe to LUMORA marketing, we may send information concerning:

  • New products
  • Product launches
  • Promotions
  • Design inspiration
  • Brand news

You may withdraw your consent at any time.

LUMORA may use advertising or analytics providers such as Meta, TikTok or Google in the future. If we introduce tracking or personalised advertising technologies that require consent, we will implement the appropriate consent controls before using them.

7. HOW WE SHARE PERSONAL INFORMATION

We do not sell your personal information.

We may provide personal information to third parties only where reasonably necessary for the purposes described in this Privacy Policy.

SHOPPAAS

We use SHOPPAAS as our ecommerce website platform.

Information may be processed through the platform to support functions including:

  • Website operation
  • Customer accounts
  • Shopping carts
  • Orders
  • Checkout
  • Related technical services

Payment Providers

We may share or receive information from PayPal and other payment service providers available through our checkout system.

Payment providers may process personal information according to their own privacy notices and regulatory responsibilities.

Delivery and Logistics Providers

We may provide delivery companies with information necessary to fulfil your order, such as:

  • Name
  • Delivery address
  • Telephone number
  • Order or shipment information

Email and Communication Providers

We may use service providers to send:

  • Order confirmations
  • Shipping notifications
  • Customer service communications
  • Marketing emails where you have consented

Professional Advisers and Authorities

We may disclose information where reasonably necessary to professional advisers, courts, regulatory authorities, law enforcement authorities or other appropriate parties where required by law or for the establishment, exercise or defence of legal rights.

Service providers are only given information reasonably necessary for their relevant role.

8. INTERNATIONAL PROCESSING

LUMORA is operated by a company located in China.

As a result, personal information relating to UK customers may be accessed or processed in China.

Our ecommerce, payment, communication and logistics service providers may also process information in countries outside the United Kingdom.

Where applicable UK data protection law treats a disclosure or transfer to a separate organisation outside the UK as a restricted international transfer, we will take steps required by applicable law to ensure an appropriate transfer mechanism or safeguard is in place.

These measures may include applicable UK adequacy regulations, approved contractual safeguards or another legally permitted transfer mechanism, as appropriate to the circumstances.

We also require reasonable technical and organisational protections appropriate to the nature of the personal information involved.

9. HOW LONG WE KEEP PERSONAL INFORMATION

We do not intend to keep personal information for longer than is reasonably necessary for the purpose for which it was collected, subject to applicable legal, accounting, tax and dispute-resolution requirements.

Our general retention approach is:

Customisation Files

Company logos, personalised wording, hand-drawn designs and similar original customisation materials are generally retained for up to 12 months after completion of the order or the last related after-sales interaction, unless there is a legitimate reason to retain them longer.

After that period, customisation files that are no longer necessary should be deleted or anonymised where reasonably practicable.

Customer Service Records

General customer service communications are normally retained for approximately 24 months, unless a longer period is reasonably necessary for an ongoing dispute, warranty matter, legal claim or other legitimate purpose.

Customer Accounts

Account information is retained while the account remains active.

If you request account closure, information that is no longer required will be deleted or anonymised where reasonably practicable. Certain order and transaction records may need to be retained separately.

Marketing Information

Marketing subscription information is retained while you remain subscribed.

If you unsubscribe, we may keep a minimal suppression record so that we can respect your preference and avoid inadvertently sending further marketing.

Order and Financial Records

Order, payment, delivery, refund and other necessary commercial records may be retained for longer periods where required for accounting, tax, fraud prevention, legal compliance or dispute resolution.

Security Information

Technical and security logs are retained only for as long as reasonably necessary for security, fraud prevention and technical operation.

10. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access
  • Unauthorised disclosure
  • Accidental loss
  • Misuse
  • Alteration
  • Destruction

These measures may include appropriate access controls, account security practices, service-provider management and limiting access to information to people who require it for legitimate business purposes.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

Accordingly, while we take reasonable steps to protect personal information, we cannot guarantee absolute security.

11. YOUR DATA PROTECTION RIGHTS

Depending on your circumstances and the applicable law, you may have rights in relation to your personal information, including the right to:

Access

Request information about the personal data we hold about you and, where applicable, receive a copy.

Rectification

Ask us to correct inaccurate or incomplete personal information.

Erasure

Ask us to delete personal information in circumstances where the law gives you that right.

Restriction

Ask us to restrict the processing of personal information in certain circumstances.

Data Portability

Request certain personal information in a structured, commonly used and machine-readable format where this right applies.

Object

Object to certain processing based on legitimate interests or to processing for direct marketing.

Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal will not affect processing that was lawful before your consent was withdrawn.

These rights are subject to legal conditions and exceptions.

To exercise a privacy right, contact:

vip@kailashop.com

We may need to request reasonable information to confirm your identity before fulfilling certain requests.

12. AUTOMATED DECISION-MAKING

LUMORA does not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects for customers.

We do not currently use systems such as automated credit scoring, fully automated rejection of customers or AI-based personalised pricing for this purpose.

If this changes in a material way, we will update this Privacy Policy as required.

13. CHILDREN'S PRIVACY

LUMORA's products and website are intended primarily for adult customers and are not directed at children.

We do not knowingly seek to collect personal information from children for marketing or profiling purposes.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the situation and take appropriate action.

14. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to websites or services operated by third parties.

Those organisations may process personal information according to their own privacy practices.

LUMORA is not responsible for the privacy practices of independent third-party websites, and we encourage you to review their privacy information before providing personal data.

15. COMPLAINTS

If you have concerns about how LUMORA handles your personal information, please contact us first so that we have an opportunity to investigate and respond.

Privacy Contact:
vip@kailashop.com

If you are located in the United Kingdom and remain dissatisfied, you also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.

This does not affect any other legal rights available to you.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in:

  • Our business
  • Our website
  • Our service providers
  • Our use of technology
  • Our legal or regulatory obligations

When we update this policy, we will revise the Last updated date at the top of the page.

Where a change materially affects how we use personal information, we will take additional steps to notify affected individuals where appropriate.

We will update our privacy information before using personal information for materially new purposes where required by applicable law.

17. CONTACT US

If you have questions about this Privacy Policy, wish to exercise a data protection right or have concerns about our handling of personal information, please contact:

LUMORA
Operated by: Yuhang Cross-Border E-Commerce Co., Ltd.

Room 508, 5th Floor, Zhejiang Innovation Center
Yinzhou District, Ningbo, Zhejiang, China

Email: vip@kailashop.com

UK Representative:
[TO BE COMPLETED BEFORE UK LAUNCH]