Privacy Policy

Last Updated: 09/04/2024

This Privacy Policy describes the privacy practices of  Luminousyy(“Luminousyy”, “we” or “us”), and how we handle the personal information we collect in connection with our websites and services.

Personal Information We Collect

Personal information you provide:

• Contact details and account information, such as your first and last name, email and mailing addresses, and phone number.
• Payment and transactional data needed to complete your orders on or through the services (including name, payment card information, bank account number, billing information), as well as your purchase history. Payment card information is processed by our third-party payment processors, such as Shopify. We do not have access to payment card numbers.
• Communications that we exchange with you, including when you contact us with questions, feedback or otherwise.
• Marketing data such as your preferences for receiving our marketing communications and details about your engagement with them.

Automatic data collection. We, our service providers and our advertising partners may automatically log and combine information about you, your computer or mobile device, and your interaction over time with the services, online resources and our communications, such as:

• Device data such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings and general location information such as city, state or geographic area.
• Online activity data such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the services, navigation paths between pages or screens, information about your activity on a page or screen, access times, duration of access and whether you have opened or otherwise engage with our communications, such as our marketing emails or clicked links or files within them.

We collect this information using cookies and other similar technologies. 

Information we obtain from other sources: 

• Social media information. We may maintain pages on social media platforms, such as Facebook, Tik Tok, and Instagram. When you visit or interact with our pages on those platforms, you or the platforms may provide us with information through the platform.
• Other sources. We may obtain personal information from other third parties, such as marketing partners, publicly-available sources, and data providers. 

How We Use Personal Information

We use each category of personal information described above for the following purposes or as otherwise described at the time of collection:

Providing our services. We use personal information to operate, maintain, and provide you with our services, including to facilitate payments and complete your orders. In particular, we use personal information to perform our contractual obligations under our Terms of Use.

Communicating with you about our services. We use personal information to respond to your requests, provide customer support, and communicate with you about our services, including by sending announcements, updates, security alerts and support and administrative messages.

Improving, monitoring, personalizing, and protecting our services. We business interests to improve and keep our services safe for our users, which includes: 

• understanding your needs and interests, and personalize your experience with the services and our communications;
• troubleshooting, testing and research and to keep the services secure; and
• investigating and protecting against fraudulent, harmful, unauthorized or illegal activity.

Research and development. We may use personal information for research and development purposes , including to analyze and improve the services and our business. As part of these activities, we may create or use aggregated, de-identified or other anonymized data from personal information we collect. We make personal information into anonymized data by removing information that makes the data personally identifiable to you. We may use this anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the services and promote our business. We will maintain any de-identified information in de-identified form and will not re-identify such information, except in accordance with the requirements of applicable law.

Marketing and advertising. We, our service providers, and our third-party advertising partners may collect and use personal information for the following marketing and advertising purposes:

• Email. We or our advertising partners may from time-to-time send you direct marketing emails as permitted by law, including, but not limited to, notifying you of special promotions, offers and events via email. 
• Text messages. We may notify you via text message about products that may interest you and other alerts you request. Consent to receive automated marketing text messages is not a condition of any purchase. If you would like more information about our do-not-call policy, or how to opt out, please review the “Opt out of marketing communications” section below. You may be responsible for standard SMS and per-minute charges by your mobile carrier. 
• Interest-based advertising. We may engage third-party advertising companies, such as Google, to display our ads on their online services. We may also share information about our users with these companies to facilitate advertising for our services to them or similar users on other online platforms. 

Except where consent is required by applicable law, we undertake such marketing and advertising for our business purposes. Where we seek your consent, you may withdraw your consent at any time. 

Compliance and protection. We may use personal information to comply with legal obligations, resolve disputes, and to defend us against legal claims or disputes, including to:

• protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
• audit our internal processes for compliance with legal and contractual requirements and internal policies;
• enforce the terms and conditions that govern the services;
• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft; and
• comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.

How We Disclose Personal Information

We may disclose each category of personal information described above to the following entities:

Service providers. Companies and individuals that provide services on our behalf or help us operate the services or our business (such as hosting, information technology, customer support, email delivery, text message delivery, and website analytics services).

Payment processors. Any payment card information you use to make a purchase on the services is collected and processed directly by our payment processors, such as Shopify and PayPal. PayPal can similarly use your payment data in accordance with its privacy policy.

Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.

Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Ana Luisa (including, in connection with a bankruptcy or similar proceedings).

Personal information requests. We also offer you choices that affect how we handle the personal information that we control. Depending on your location, residency, and the nature of your interactions with our services, you may have additional rights and submit a request for the following in relation to personal information: 

• Information about how we have collected and used personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
• Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
• Correction of personal information that is inaccurate or out of date.
• Deletion of personal information that we no longer need to provide the services or for other lawful purposes.
• Opt out of the sale or processing of personal information for targeted advertising. To exercise these rights, please contact us as provided below. 
• Additional rights, such as to object to and request that we restrict our use of personal information.

Other Sites and Services

Our services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions. This Privacy Policy does not apply to such third-party sites or services.

Security

We use reasonable organizational, technical and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration and destruction of personal information we maintain. Unfortunately, data transmission over the Internet cannot be guaranteed as completely secure. Therefore, while we strive to protect your personal information, we cannot guarantee the security of personal information.

Children’s Privacy 

Our services are not intended for use by children under 18 years of age. If we learn that we have collected personal information through the services from a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.

International Data Transfers

You will provide personal information directly to our website in the United States. We may also transfer personal information to our affiliates and service providers in the United States and other jurisdictions. Please note that such jurisdictions may not provide the same protections as the data protection laws in your home country.

Retention of Personal Information

Where required under applicable laws, we retain personal information only for as long as is necessary to fulfil the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations or until you withdraw your consent (where applicable). 

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements. 

Do Not Track and Opt-Out Preference Signals

Some Internet browsers can be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals.  However, we process opt-out preference signals that conform to the Global Privacy Control specification (“GPC”). GPC is a browser-level technical specification that you can use to inform websites that you opt-out of sale or sharing of personal information. If you enable the GPC signal, our website will treat the browser or device you use to access our website as opted-out from the sale or sharing of personal information to the extent we engage in such processing. To learn more, visit https://globalprivacycontrol.org/.

Notice of Financial Incentives

This Notice of Financial Incentives is provided by Ana Luisa and applies to the Ana Luisa Rewards program (the “Program”). We are providing this Notice of Financial Incentives because applicable law may require us to provide certain information about the Program and obtain your opt-in consent prior to entering you into the Program.

Summary of the Incentives. Your account receives points on qualifying purchases. Points are accumulated to get rewards that may be redeemed for discounts on future purchases. You may be granted additional rewards when you write and submit reviews of our products or for being a member, such as for your birthday.

How to Opt In. You can opt in to the Program by registering for an account online.

Value of Consumer Information. In our good faith calculation, we consider the value of consumer information collected through the Program as the equivalent of relevant expenses related to the collection and retention of consumers’ personal information as part of the Program. The financial incentive we offer to consumers through the Program is reasonably related to the value of the consumer’s data.

Withdrawal of the Program. You have the right to withdraw from the Program at any time. You may withdraw by cancelling your Program.

Additional Notice for California Consumers

If you are a California consumer, the following provisions apply to our processing of your personal information, which prevail over any conflicting provisions in other sections of this Privacy Policy. We sell and share, and in the past 12 months have sold and shared, California consumers’ personal information for consideration or cross-context behavioral advertising purposes. We do not sell or share, and in the past 12 months have not sold or shared, personal information of California consumers we know to be under 16 years of age. 

We have collected the following categories of personal information in the last 12 months:

• Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
• Personal information described in subdivision (e) of Cal. Civ. Code Section 1798.80, such as a name, address, telephone number, credit card number, debit card number, or other payment information.
• Characteristics of protected classifications under California or federal law, such as gender, race, veteran status, or preferred language.
• Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or other similar network activity, including, but not limited to, browsing history, search history, and information regarding your interaction with a website, application, or advertisement.
• Geolocation data, including physical location or movements.
• Sensory data, including electronic, visual, or similar information.
• Professional or employment-related information, such as your resume or work history.
• Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99), such as your education history.
• Inferences, such as a profile about your preferences, characteristics, and behavior.
• Sensitive personal information, such as account login information allowing access to an account or race and ethnicity, in each case as further described above in the relevant categories.

We use each of the above categories of personal information for a variety of purposes such as the following:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
• Helping to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for these purposes.
• Debugging to identify and repair errors in our systems.
• Short-term, transient use including contextual non-personalized advertising shown as part of a your current interaction with us.
• Providing services on our behalf, including maintaining or servicing accounts, providing customer service, fulfilling transactions, verifying identity information, processing payments, and other services.
• Conducting internal research to develop and demonstrate technology.
• Conducting activities to verify, enhance, and maintain the quality or safety of services or devices which we may own, control, or provide.

We may also use the information we collect for our operational purposes, purposes for which we provide you additional notice, provided that such additional purposes are compatible with the context in which your personal information was collected, or with your consent.

As required or permitted under applicable law, we will take steps to verify your identity before acting on your request to exercise your rights. We may require you to provide your name, contact information, government-issued identification, to verify your identity in response to exercising requests of the above type.

You also have the right not to receive discriminatory treatment by us for the exercise of privacy rights conferred by applicable law, including the right not to be retaliated against for the exercise of your rights. Please note, we do not use or disclose sensitive personal information for purposes that, under applicable law, require us to support the right to limit the use or disclosure of sensitive personal information.

Profiling and Sensitive Data. We do not process your personal information for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects under applicable law. Please also note personal information we process may include certain “sensitive data” as such term is defined under applicable law, in which case we will process your sensitive data in accordance with applicable law.

Your Privacy Rights. You may have the following rights, in each case to the extent set out in applicable law:

• The right to confirm whether we process personal information about you and request access to such personal information (including, if applicable, in a portable and readily usable format) or certain information about how we process your personal information.
• The right to correct inaccuracies in certain personal information we may hold about you.
• The right to delete personal information we have collected from or about you.
• The right to opt out of the sale of your personal information or the processing of your personal information for targeted advertising.

If your rights request is denied, you may lodge an appeal with us. The response to your rights request will inform you of any appeal rights you may have and how you may exercise them.

As required or permitted under applicable law, we will take steps to verify your identity before acting on your request to exercise your rights. We may require you to provide your name, contact information, government-issued identification, to verify your identity in response to exercising requests of the above type.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the website or by other means as permitted or required under applicable law. 

Luminousyy

Privacy Compliance Officer

BaoHe Street

LongGang Zone

ShenZhen City, GuangDong Province, China