Privacy Policy

A legal disclaimer

Last updated: 28/12/2025

1. Introduction

Luminara (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit or make a purchase from our website (the “Site”).

We comply with the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and the Data Protection Act 2018.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Email: [insert contact email]

2. Who We Are

Business name: Luminara
Business type: Online jewellery retailer (dropshipping)
Platform: Wix
Customers: United Kingdom and international

For the purposes of data protection law, Luminara is the Data Controller of your personal data.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Information You Provide to Us

Full name
Billing and shipping address
Email address
Phone number
Payment details (processed securely by third-party payment providers; we do not store full card details)
Order details and purchase history
Customer communications (emails, messages, enquiries)

b) Information Collected Automatically

When you use our Site, we may automatically collect:

IP address
Browser type and device information
Pages visited and interactions
Referring URLs
Cookies and similar tracking technologies

4. How We Use Your Personal Data

We use your personal data for the following purposes:

To process and fulfil orders
To arrange shipping via third-party suppliers
To process payments securely
To communicate with you about your orders, enquiries, or account
To improve our website, services, and customer experience
To comply with legal and regulatory obligations
To prevent fraud and maintain site security

5. Legal Bases for Processing (GDPR)

We process your personal data under the following lawful bases:

Contractual necessity – to fulfil orders and provide products
Legal obligation – to comply with tax, accounting, and regulatory requirements
Legitimate interests – to operate, improve, and secure our business
Consent – for non-essential cookies and marketing communications (where applicable)

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyse site traffic.

Cookies may be used to:

Remember your preferences
Enable core site functionality
Analyse site performance and usage

You can manage or disable cookies through your browser settings. Non-essential cookies are only used with your consent, in accordance with GDPR.

For more information, please refer to our Cookie Policy (if published separately).

7. Third-Party Services

We share personal data with trusted third parties only where necessary to operate our business:

a) Website Platform

Wix.com Ltd – website hosting, analytics, and infrastructure

b) Payment Processors

Payments are processed securely by third-party providers, including:

Credit and debit card providers
Apple Pay
Google Pay
Klarna

We do not store full payment card details.

c) Suppliers and Fulfilment Partners

As a dropshipping business, we share relevant order and shipping details with third-party suppliers to fulfil and deliver your purchases.

d) Analytics and Marketing Tools

We may use analytics tools provided by Wix or integrated services to understand website usage and improve performance.

All third parties are required to process personal data in accordance with data protection laws.

8. International Data Transfers

As we operate internationally and use global service providers, your personal data may be transferred outside the UK or European Economic Area (EEA).

Where such transfers occur, we ensure appropriate safeguards are in place, including:

Adequacy decisions
Standard Contractual Clauses approved by regulators

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including legal, accounting, or reporting requirements.

Typical retention periods include:

Order and transaction data: retained for legal and tax obligations
Customer communications: retained as necessary to resolve enquiries

When data is no longer required, it is securely deleted or anonymised.

10. Your Rights Under GDPR

Under UK GDPR and EU GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request erasure of your data (“right to be forgotten”)
Restrict processing of your data
Object to processing based on legitimate interests
Request data portability
Withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact us using the details above. We may need to verify your identity before responding.

11. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority.

In the UK, this is:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk

If you are located in the EU, you may also contact your local data protection authority.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last updated” date.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Luminara
Email: [insert contact email]