Privacy Policy

Last Updated: December 2025

Information We Collect

Personal Information You Provide:

When you make a purchase or create an account, we collect:

• Contact Information: Name, email address, phone number, shipping address, billing address
• Payment Information: Credit card details, billing information (processed securely through our payment processors)
• Account Information: Username, password (encrypted), order history
• Communication Information: Messages, feedback, or inquiries you send to customer support

Information Automatically Collected:

When you visit our website, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Information: Pages visited, time spent on pages, links clicked, referral sources
• Cookies: Small data files stored on your device (see "Cookies" section below)
• Location Information: General geographic location based on IP address

How We Use Your Information

We use your personal information to:

Order Processing & Fulfillment:

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Handle returns and refunds
• Provide customer support

Communication:

• Respond to your inquiries and support requests
• Send transactional emails (order status, shipping notifications)
• Send marketing communications (with your consent - see "Marketing" below)
• Notify you about product updates or recalls (if necessary)

Website Improvement:

• Analyze website traffic and usage patterns
• Improve website functionality and user experience
• Personalize content and product recommendations
• Detect and prevent fraud or security issues

Legal & Compliance:

• Comply with legal obligations and regulations
• Enforce our Terms of Service
• Resolve disputes and handle claims
• Protect our rights and property

How We Share Your Information

We do not sell your personal information to third parties. We only share your information in the following circumstances:

Service Providers:

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: HitPay, Atome, and other payment gateways (to process transactions)
• Shipping Partners: DHL, FedEx, and other carriers (to deliver your orders)
• Email Service Providers: To send order confirmations and communications
• Website Hosting: Shopify and related infrastructure providers
• Analytics Tools: Google Analytics and similar services (to understand website usage)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements:

We may disclose your information if required by law or in response to:

• Court orders or legal processes
• Government or regulatory requests
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

Business Transfers:

If Lumera is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you of any such change.

Data Storage & Security

Where We Store Data:

Your information is stored on secure servers located in:

• Primary: Shopify's cloud infrastructure (various global locations)
• Payment Data: Encrypted and stored by payment processors (not on our servers)
• Backup: Encrypted backups in secure locations

How We Protect Your Data:

• Encryption: SSL/TLS encryption for data transmission
• Secure Payment Processing: PCI-DSS compliant payment processors
• Access Controls: Limited employee access on need-to-know basis
• Regular Security Audits: Ongoing monitoring and security updates
• Password Protection: Encrypted password storage

Important Note: While we implement industry-standard security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your information.

Your Rights & Choices

Access & Correction:

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Update your account information at any time

Data Deletion:

You may request deletion of your personal information by contacting us. Please note:

• We may need to retain certain information for legal or legitimate business purposes
• Order history and transaction records may be retained for tax and accounting purposes
• Deletion requests may take up to 30 days to process

Marketing Communications:

You can opt out of marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at support@lumerahealth.shop
• Updating your account preferences

Note: Even if you opt out of marketing emails, we will still send transactional emails related to your orders.

Cookie Management:

You can control cookies through your browser settings:

• Block all cookies
• Accept only first-party cookies
• Delete existing cookies

Note: Blocking cookies may affect website functionality and your user experience.

Cookies & Tracking Technologies

What Are Cookies:

Cookies are small text files stored on your device when you visit our website. They help us recognize you and remember your preferences.

Types of Cookies We Use:

Essential Cookies (Required):

• Enable basic website functions (shopping cart, checkout, login)
• Cannot be disabled as they're necessary for the website to work

Performance Cookies (Optional):

• Help us understand how visitors use our website
• Collect anonymous data about page visits and user behavior
• Used for analytics and website improvement

Functionality Cookies (Optional):

• Remember your preferences and settings
• Personalize your experience
• Save language and region preferences

Marketing Cookies (Optional):

• Track your browsing habits across websites
• Enable targeted advertising
• Measure effectiveness of marketing campaigns

Third-Party Cookies:

We use third-party services that may set their own cookies:

• Google Analytics: Website traffic analysis
• Facebook Pixel: Advertising and remarketing (if applicable)
• Payment Processors: Secure payment processing

Children's Privacy

Our website and products are not intended for children under 18 years of age. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete it.

International Data Transfers

Your information may be transferred to and stored in countries outside your country of residence, including:

• Hong Kong SAR: Our business operations
• United States: Shopify servers and some service providers
• Other Countries: Where our service providers operate

When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

Retention Periods:

• Account Information: Until you request deletion or close your account
• Order Information: 7 years (for tax and legal purposes)
• Marketing Data: Until you opt out or request deletion
• Website Analytics: 26 months (Google Analytics default)

Third-Party Websites

Our website may contain links to third-party websites (social media, payment processors, shipping carriers). We are not responsible for the privacy practices of these websites.

We encourage you to read the privacy policies of any third-party websites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We will update the "Last Updated" date at the top of this page
• Significant changes will be communicated via email or website notice
• Continued use of our website after changes constitutes acceptance of the updated policy

Contact Us About Privacy

If you have questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact us:

 Personal Data Protection Act (PDPA) Compliance

For our customers: We comply with Singapore's Personal Data Protection Act 2012 (PDPA). You have the right to:

• Access your personal data
• Correct inaccurate personal data
• Withdraw consent for use of your personal data
• Request information about how your data is used

To exercise these rights, contact us at support@lumeraa.net

SMS / MMS TEXT MESSAGE MARKETING PROGRAM PRIVACY POLICY

Your privacy is extremely important to us. We will only use the information you provide through the Program to transmit your mobile messages and respond to you, if necessary. This includes but is not limited to, sharing information with platform providers, phone companies (carriers), and other vendors who assist us in the delivery of mobile messages. 
WE DO NOT SELL, RENT, LOAN, TRADE, LEASE, OR OTHERWISE TRANSFER FOR PROFIT ANY PHONE NUMBERS OR CUSTOMER INFORMATION COLLECTED THROUGH THE PROGRAM TO ANY THIRD PARTY.
Nonetheless, We reserve the right at all times to disclose any information as necessary to satisfy any law, regulation, or governmental request, to avoid liability, or to protect our rights or property. When you complete forms online or otherwise provide us with information in connection with the program, you agree to provide accurate, complete, and true information. You agree not to use a false or misleading name or a name that you are not authorized to use. If, in Our sole discretion, We believe that any such information is untrue, inaccurate, or incomplete, or you have opted into the Program for an ulterior purpose, We may refuse you access to the program and pursue any appropriate legal remedies.
California Civil Code Section 1798.83 and The General Data Protection Regulation 2016/679 (GDPR) allow users of the program who are California or European Union residents to request certain information regarding our disclosure of the information you provide through the Program to third parties for their direct marketing purposes.
Contact us at the following address to make a request:
Lumera
Support@lumeraa.netLumera - Privacy Department
2/F, Tower 1 Tern Centre
237 Queen's Road Central, Sheung Wan
Hong Kong SAR