Who we are.
Lumoré (“we”, “us”, “our”) operates lumorecare.com and sells cosmetic/personal care products.
Data Controller: [Company legal name], [registered address], [country].
Contact: lumore@lumorecare.com, [phone].
TR only: MERSİS/VERGİ NO: [xxxxx].
EU/UK Representative (if applicable): [name, address, email].
Data we collect.
- Account & order data: name, email, phone, billing/shipping address, order details.
- Payment data: tokenized payment info via processors (we do not store full card data).
- Site usage data: device, IP, pages viewed, events, cookies.
- Support data: messages, attachments, timestamps.
- Marketing preferences: email/sms opt-in, campaign interactions.
How we use data & legal bases.
- To process orders, payments, delivery, returns (GDPR Art. 6(1)(b), KVKK m.5/2-c).
- To comply with law/tax/fraud prevention (GDPR 6(1)(c), KVKK m.5/2-ç).
- To run and improve our services, analytics, personalization (GDPR 6(1)(f)).
- With consent for marketing/cookies (GDPR 6(1)(a), KVKK m.5/1).
- US (CCPA/CPRA): for “business purposes” incl. advertising/analytics; we do not collect sensitive PI without purpose limitation.
Sharing & processors.
We share data with vetted providers only to operate the store:
- E-commerce/Hosting/CDN: [WooCommerce/WordPress host/CDN names]
- Payments: [Stripe/PayPal/iyzico/etc.]
- Fulfillment/Carriers: [DHL/UPS/…]
- Analytics/Ads: [GA4/Meta/…]
- Support/CRM/Email: [HubSpot/Klaviyo/…]
We sign DPA/SCCs where required. No unauthorized resale of personal data.
International transfers.
When data moves outside your region, we use appropriate safeguards (e.g., SCCs, UK IDTA). TR için KVKK madde 9 kapsamındaki aktarım şartlarına uyarız.
Cookies.
We use functional, analytics, and advertising cookies. Manage choices in our Cookie Policy and the Cookie Settingsbanner.
Retention.
Orders: [X years] (tax/audit). Accounts: until deletion. Marketing: until you opt-out. Logs: [X months]. We minimize and anonymize where possible.
Your rights.
- GDPR (EEA/UK): access, rectification, erasure, restriction, portability, objection, withdraw consent.
- KVKK (TR): bilgi talebi, düzeltme, silme, aktarıma/işlemeye itiraz, zarar halinde tazmin talebi. Başvuru: lumore@lumorecare.com.
- US (CCPA/CPRA): know/access, delete, correct, opt-out of “sale/share”, limit use of sensitive PI, non-discrimination. Use: Do Not Sell or Share and Limit Use of Sensitive PI.
Children.
Our site isn’t intended for children under 13 (US) / 16 (EU). We do not knowingly collect such data.
Changes.
We may update this policy. See “Last updated” below.
Last updated: [date]
Contact.
Privacy requests: lumore@lumorecare.com | [postal address]