Privacy policy

SCOPE AND RESPONSIBLE PARTY

This Privacy Policy explains how personal information is collected, used, disclosed, stored and otherwise processed when you visit lumerane.world, communicate with us, subscribe to our communications, use our online services or make a purchase or other transaction through our store.

The controller responsible for the processing of personal information in connection with this website and our business activities is:

Alper Celik, trading as LUMERANE BY CELIK
Riedstrasse 3
6330 Cham
Switzerland
Email: lumerane@protonmail.com

LUMERANE BY CELIK is currently operated as a Swiss sole proprietorship. Any reference in this Privacy Policy to “LUMERANE”, “we”, “us” or “our” means Alper Celik, trading as LUMERANE BY CELIK.

This website and online store are hosted and operated using Shopify. Shopify provides the technical commerce platform that enables us to offer the website, products, content and related services to you.

This Privacy Policy applies to personal information processed through the website and associated services. It does not replace the privacy policies of independent third parties whose websites or services you access separately.

APPLICABLE DATA-PROTECTION LAW

We process personal information in accordance with applicable data-protection law, particularly the Swiss Federal Act on Data Protection and its implementing legislation.

Where the European Union General Data Protection Regulation or comparable foreign privacy laws apply to a particular processing activity, we also process personal information in accordance with those requirements.

Under the GDPR, where applicable, processing may be based on one or more of the following legal grounds:

performance of a contract or steps taken at your request before entering into a contract;
compliance with a legal obligation;
our legitimate interests or those of a third party, provided that your interests, fundamental rights and freedoms do not override those interests;
your consent, where consent is required; or
another legal basis permitted by applicable law.

Where processing is based on consent, you may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

CATEGORIES OF PERSONAL INFORMATION WE PROCESS

Depending on how you interact with us, we may process the following categories of personal information:

Contact information, including your name, billing and delivery address, email address and telephone number.

Account information, including login credentials, account preferences and information associated with a customer account.

Order and transaction information, including products viewed, selected or ordered, order value, billing and delivery details, order status, returns, cancellations, refunds, communications and transaction history.

Payment-related information. Payments are processed by Shopify and the payment providers made available in the checkout. We generally do not receive complete payment-card or bank-account credentials. We may receive limited payment information, such as the payment method, payment status, transaction reference and fraud-screening results.

Communications, including messages, enquiries, customer-service requests, complaints, reviews, feedback and other information you send to us.

Marketing information, including newsletter subscriptions, marketing preferences, confirmation of a Double Opt-in, campaign interactions and withdrawal of consent.

Device and usage information, including IP address, device identifiers, browser type, operating system, language settings, approximate location, referring website, pages viewed, links clicked, session information, cookie identifiers and interactions with the website.

Preference, analytics and marketing information, including information derived from cookies, pixels, local storage and similar technologies, subject to the consent requirements applicable in your location.

Information obtained from service providers and business partners, including Shopify, payment providers, shipping providers, Syncee, suppliers, marketing providers, fraud-prevention providers and other parties involved in providing the requested services.

We do not intentionally request sensitive personal information unless it is necessary and lawful for a particular purpose.

HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

directly from you, for example when you complete a form, subscribe to our newsletter, contact us, create an account or place an order;
automatically when you access or use the website, including through cookies and similar technologies;
from Shopify and other providers that support our store;
from payment, logistics, marketing, fraud-prevention, customer-service and technology providers;
from Syncee, participating suppliers or fulfilment partners when relevant to a product, order or supplier relationship; and
from publicly accessible sources where permitted by law.

PURPOSES OF PROCESSING

We may process personal information for the following purposes:

Providing and operating the website, online store and associated technical functions.

Displaying content, maintaining website security, remembering essential settings and enabling shopping-cart, account and checkout functions.

Responding to enquiries, providing customer service and communicating with you.

Processing, managing and fulfilling orders, payments, deliveries, returns, cancellations and refunds.

Forwarding the information necessary to suppliers, fulfilment partners and shipping providers where a product is sourced or fulfilled by a third party.

Maintaining customer accounts, preferences and order histories.

Sending newsletters, product announcements, launch information and other marketing communications where you have consented or where otherwise permitted by law.

Administering the Double Opt-in process and recording marketing consent, confirmation, withdrawal and unsubscribe information.

Measuring and improving website performance, user experience, products, services and marketing activities, subject to applicable consent requirements.

Personalising content, recommendations, advertisements and the presentation of services, subject to applicable consent requirements.

Preventing fraud, misuse, security incidents and violations of our terms.

Complying with accounting, tax, commercial, regulatory and other legal obligations.

Establishing, exercising or defending legal claims.

Managing suppliers, service providers and business operations.

SHOPIFY

Our store is hosted on Shopify. Shopify provides the commerce infrastructure used to operate the website, including hosting, storefront, customer-account, checkout, payment, security, analytics and marketing-related functions.

Shopify may process personal information on our behalf as a service provider and, for certain services and purposes, as an independent controller. The precise role depends on the relevant Shopify service and processing activity.

Shopify may process information such as contact details, account information, order and transaction data, payment-related information, device information, IP addresses, cookie identifiers and information about interactions with our store and other Shopify services.

Further information about Shopify’s handling of customer information is available in the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/consumers

Shopify’s privacy portal, through which you may obtain further information and exercise available privacy choices, is available at:

https://privacy.shopify.com/

SHOPIFY NETWORK INTELLIGENCE AND ENHANCED SERVICES

We have enabled Shopify Network Intelligence. This allows Shopify to use certain customer and interaction information, together with information from Shopify and participating merchants, to provide enhanced services. These services may include improved analytics, personalisation, advertising measurement, marketing optimisation, fraud prevention, product improvement and relevant recommendations.

Where required by applicable law, Shopify Network Intelligence and associated advertising, analytics or personalisation functions are used only after you provide the relevant consent through our cookie and privacy controls.

You may reject non-essential processing, manage individual categories or withdraw your selection through the cookie-preference controls available on the website. You may also use Shopify’s privacy portal:

https://privacy.shopify.com/

A rejection or withdrawal does not affect processing that is necessary to operate the website, provide a service you requested, comply with legal obligations or protect the security of our services.

COOKIES AND SIMILAR TECHNOLOGIES

We and our service providers use cookies, pixels, local storage, software development kits and similar technologies.

These technologies may be divided into the following categories:

Required technologies are necessary for core website functions, including security, network management, shopping-cart, checkout, account, language and privacy-preference functions. Because the website cannot operate properly without them, they may be used without optional consent where legally permitted.

Preference technologies remember choices and help personalise your future visits.

Analytics technologies help us understand how visitors use the website, evaluate performance and identify areas for improvement.

Marketing technologies help us and our partners measure campaigns, personalise marketing communications and display potentially relevant advertising.

Where consent is legally required, preference, analytics and marketing technologies are not activated until you make the corresponding selection. You can accept all optional categories, decline them or manage them separately through the cookie banner.

You can later change or withdraw your choices through the cookie-preference link or privacy settings made available on the website. You may also configure your browser to block or delete cookies. Blocking required cookies may prevent parts of the website from functioning correctly.

EMAIL MARKETING, SHOPIFY MESSAGING AND DOUBLE OPT-IN

If you subscribe to our newsletter or other marketing communications, we may process your email address, subscription status, consent record, confirmation time, IP address and information about your interactions with communications.

We use Shopify Messaging and related Shopify email functionality to administer subscriptions and send marketing communications.

For new email subscribers, we use a Double Opt-in procedure. After submitting your email address, you receive a confirmation request. Marketing communications are sent after you confirm the subscription, subject to the technical configuration and applicable law.

You may unsubscribe at any time by using the unsubscribe link included in a marketing email or by contacting us at lumerane@protonmail.com. We may retain limited suppression information to ensure that your unsubscribe request continues to be respected.

We do not currently use newsletter registration for SMS marketing. If SMS marketing is introduced later, we will implement the necessary notice and consent mechanisms before sending such messages.

SYNCEE, SUPPLIERS AND ORDER FULFILMENT

We use Syncee as a product-sourcing, supplier-management and potential dropshipping or order-fulfilment service.

Syncee may process information necessary to connect products, suppliers and orders. Depending on the products and fulfilment arrangements used, this may include customer name, email address, telephone number, billing or delivery address, order details, product details, shipping information, IP address, device information and order-status information.

Where an order is fulfilled by a third-party supplier, the information necessary to process and deliver the order may be transmitted through Syncee or directly to the relevant supplier, fulfilment partner and shipping provider. These recipients may use the information only for the relevant operational purposes and in accordance with their respective legal obligations and contractual responsibilities.

The identity and location of a supplier may vary according to the product selected. Where reasonably required, additional information concerning the relevant supplier or fulfilment arrangement may be provided in the product information, checkout, order communication or upon request.

Syncee is operated from Hungary and may use additional service providers. Further information is available in Syncee’s privacy documentation:

https://syncee.com/privacy-policy/

TRANSLATE & ADAPT

We use Shopify Translate & Adapt to translate and localise store content for different languages and markets. The app is integrated into Shopify.

The app primarily processes store content and certain administrative information required to provide its functions. Where translated content includes information submitted by a customer, Shopify may process that information as part of providing the platform and translation-related services.

PAYMENTS

Payment transactions are processed through Shopify and the payment providers displayed in the checkout. The payment methods available may depend on your location, device, currency and other checkout factors.

The relevant provider may process identity, contact, payment, transaction, device, fraud-prevention and authentication information in accordance with its own legal obligations and privacy terms.

We receive the information necessary to verify payment status, administer the order, process refunds, prevent fraud and meet accounting and legal obligations. We generally do not receive or store complete payment-card details.

SHIPPING AND DELIVERY

For order fulfilment and delivery, we may disclose necessary information to suppliers, fulfilment partners, postal operators, couriers and logistics providers. This may include your name, delivery address, contact details, order contents, delivery instructions and shipment-tracking information.

Shipping providers may process this information as independent controllers or as service providers, depending on the applicable service and law.

FRAUD PREVENTION, SECURITY AND LEGAL COMPLIANCE

We and our service providers may process personal information to detect, investigate and prevent fraud, abuse, unauthorised access, security incidents and other unlawful activity.

We may also process or disclose information when reasonably necessary to comply with legal obligations, binding governmental requests, court orders, tax or accounting requirements, or to establish, exercise or defend legal claims.

RECIPIENTS OF PERSONAL INFORMATION

Depending on the relevant activity, personal information may be disclosed to the following categories of recipients:

Shopify and its affiliated companies;
payment and financial-service providers;
Syncee and relevant product suppliers;
fulfilment, warehousing, postal, courier and logistics providers;
hosting, cloud, security, analytics and technical-service providers;
email, marketing, communication and customer-service providers;
professional advisers, including legal, accounting and tax advisers;
governmental authorities, courts and regulators where disclosure is legally required;
parties involved in a business reorganisation, financing, acquisition, sale or transfer, subject to appropriate safeguards; and
other recipients where you have consented or where disclosure is otherwise permitted by law.

We do not sell customer contact information in the ordinary commercial meaning of selling a customer list for money. Certain privacy laws may nevertheless define some advertising-related sharing or use of information more broadly as a “sale”, “sharing” or “targeted advertising”. Where such laws apply, the relevant privacy choices and opt-out mechanisms are made available.

INTERNATIONAL DATA TRANSFERS

We are based in Switzerland, but Shopify, Syncee and other service providers may process personal information in other countries, including member states of the European Economic Area, Canada, the United States and countries in which suppliers, fulfilment partners or sub-processors operate.

The privacy laws of a recipient country may differ from those in Switzerland or your country of residence. Where legally required, international transfers are based on an applicable adequacy decision, recognised certification framework, standard contractual clauses, contractual safeguards or another legally permitted transfer mechanism.

Where the Swiss Federal Act on Data Protection applies, appropriate safeguards may include standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner, with the necessary Swiss-law adaptations.

Where the GDPR applies, appropriate safeguards may include the European Commission’s Standard Contractual Clauses.

You may contact us if you would like further information about the safeguards relevant to a particular transfer, subject to applicable legal and confidentiality restrictions.

DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by law.

Retention periods depend on the nature of the information, the relevant processing purpose, contractual requirements, applicable limitation periods and accounting, tax, regulatory and record-keeping obligations.

In particular:

order, transaction, invoice and accounting information may be retained for the applicable statutory retention period;
customer-service and contractual correspondence may be retained for the duration necessary to administer the relationship and address potential claims;
marketing information is retained until consent is withdrawn, the subscription ends or the information is no longer needed, subject to retaining limited suppression records;
cookie and consent records may be retained for the period necessary to demonstrate and administer privacy choices;
security records may be retained for the period reasonably necessary to investigate incidents and protect the services.

When information is no longer required, it is deleted, anonymised or otherwise handled in accordance with applicable law.

DATA SECURITY

We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of internet transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any account credentials and for notifying us if you suspect unauthorised account activity.

YOUR PRIVACY RIGHTS

Depending on the law applicable to you and the circumstances of the processing, you may have rights including:

the right to request information about whether and how we process your personal information;
the right to access your personal information;
the right to request correction of inaccurate or incomplete information;
the right to request deletion of information;
the right to request restriction of processing;
the right to object to certain processing;
the right to receive certain information in a portable format;
the right to withdraw consent at any time with effect for the future;
the right to object to or opt out of certain advertising-related processing;
the right not to be subject to certain decisions based solely on automated processing where applicable; and
the right to lodge a complaint with a competent data-protection authority.

These rights are subject to the conditions, limitations and exceptions provided by applicable law. We may need to verify your identity before responding to a request.

To exercise a right relating to processing for which we are responsible, contact:

lumerane@protonmail.com

For privacy choices relating directly to Shopify’s own processing and enhanced services, you may also use:

https://privacy.shopify.com/

If you are in Switzerland, you may contact the Swiss Federal Data Protection and Information Commissioner:

https://www.edoeb.admin.ch/

If the GDPR applies to you, you may also lodge a complaint with the competent supervisory authority in your country of residence, place of work or place of the alleged infringement.

AUTOMATED PROCESSING AND PERSONALISATION

Shopify and other service providers may use automated systems to support fraud prevention, security, payment processing, service personalisation, recommendation, analytics and advertising.

Such systems may evaluate transaction, device, usage and interaction information. We do not intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you unless this is necessary for a contract, authorised by applicable law or based on valid consent and the required safeguards are implemented.

CHILDREN’S PRIVACY

Our services are not directed at children, and we do not knowingly collect personal information from children who are unable to provide valid consent under applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us unlawfully, please contact us so that we can review the matter and take appropriate action.

THIRD-PARTY WEBSITES AND SOCIAL MEDIA

The website may contain links to websites, platforms or social-media services operated independently by third parties.

We are not responsible for the privacy, security or content practices of independent third parties. We recommend reviewing the privacy information of the relevant provider before submitting personal information or using its services.

Information posted in public or semi-public areas of third-party platforms may be visible to other users and processed in accordance with the platform’s own terms and policies.

CHANGES TO THIS PRIVACY POLICY

We may amend this Privacy Policy when our business, website, suppliers, applications, processing activities or legal obligations change.

The current version will be published on this website. Where a change materially affects your rights or the manner in which we process personal information, we may provide additional notice where required by law.