Last Updated: August 26, 2026
This Privacy Policy explains how we collect, use, store, transfer and protect your personal information when you visit auralumelamp.com, place orders, communicate with our customer service, or use our e‑commerce services. This policy complies with the EU General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA / CPRA). It applies to all visitors, customers located in the United States, European Union and other regions.
1. What Personal Information We Collect
We collect information you voluntarily submit to us, plus automatically‑collected technical information when you browse our website.
1.1 Information you provide actively
‑ Full name, billing & shipping address, postal code ‑ Email address, phone number ‑ Order details, purchase history, product customization requirements ‑ Payment‑related information (note: we do not store full credit‑card numbers; payment processing is handled by authorized third‑party payment processors) ‑ Content you send to support: photos, videos, inquiry messages, return‑request information
1.2 Information collected automatically when visiting website
‑ Device type, operating system, browser type ‑ IP‑address, approximate geographic location ‑ Access time, page viewed, click‑stream behaviour ‑ Cookies, web beacons and similar tracking‑technology data
2. How We Collect Your Information
-
Information submitted during account registration, checkout, order placement
-
Messages sent via contact form, email, live‑chat customer service
-
Automatic collection through website cookies and analytics tools
-
Information obtained from our authorized service providers (payment gateways, logistics partners)
3. Purpose - Legal Basis For Processing Personal Data
We process your personal data only for legitimate purposes and under valid legal grounds:
‑ Performance of contract: To process, fulfill and ship your orders; arrange logistics; handle returns, exchanges and after‑sales service. ‑ Legitimate interest: Website security & fraud prevention; improve website function, product and customer‑service quality; analyse website operation statistics. ‑ Consent: Send marketing newsletters and promotional emails; deploy non‑essential advertising & analytics cookies. You may withdraw consent at any time. ‑ Legal obligation: Comply with tax, accounting and applicable legal requirements; respond to valid legal requests from government authorities.
We will NOT sell, rent or trade your personal information to third‑party marketers for independent advertising purposes.
4. Data Sharing - Third‑Party Service Providers
We only share your data with trusted service providers necessary for business operation. All processors are bound by data‑protection obligations. Categories of third‑party recipients include: ‑ E‑commerce & hosting platform (Shopify): store‑operation, order‑management ‑ Payment processors: complete secure payment settlement ‑ Logistics & fulfillment partners: US domestic warehouse and China manufacturing facility for order dispatch ‑ Analytics & advertising service: Google Analytics, Meta Pixel (marketing‑related data processing only with your consent) ‑ Legal requirement: We may disclose information if required by law, court‑order or government investigation.
Cross‑border data transfer notice: To fulfill dual‑fulfillment orders (US warehouse / China direct‑ship), your contact, shipping and order data may be transferred and stored in the United States and in China. All cross‑border transfers are conducted in compliance with applicable data‑protection law.
5. Data Retention Period
‑ Order, billing and transaction records: retained for 7 years to satisfy tax‑accounting and commercial‑dispute‑resolution requirements. ‑ Marketing‑email subscriber data: kept until you unsubscribe. ‑ Website log and analytics data: stored for maximum 12 months. ‑ When you request deletion: we will erase your personal data, except information we must retain for legal compliance.
6. Cookies Policy
Our website uses cookies and similar tracking‑technologies. ‑ Necessary Cookies: Required for website basic function, checkout and security; cannot be switched off. ‑ Analytics Cookies: Help us understand visitor usage of our store. ‑ Marketing / Advertising Cookies: Used for retargeting advertisement. These will only load if you give explicit consent.
You can manage or reject non‑essential cookies via your browser settings. If you refuse marketing cookies, you may still browse and shop on our website, but targeted advertisements will not be shown to you.
7. Rights For EU / EEA Residents (GDPR Rights)
Subject to applicable law, you have the right to:
-
Access a copy of your personal data we hold
-
Request correction of inaccurate personal information
-
Request erasure / deletion of your personal data
-
Restrict or object to certain data‑processing activities
-
Data portability: receive your data in machine‑readable format
-
Withdraw previously‑given consent at any time
You may submit your request by writing to service@auralumelamp.com. We will respond to valid request within 30 calendar days. We may need to verify your identity to process your application. If you believe we have violated GDPR, you also have right to lodge a complaint with your local data‑protection supervisory authority.
8. Rights For California Residents (CCPA / CPRA)
If you are California resident, you are entitled to below consumer rights:
-
Right to know: request disclosure of categories and specific pieces of personal information we collected about you.
-
Right to delete: request deletion of your personal information subject to exceptions.
-
Right to opt‑out of sale / sharing of personal information: we do NOT sell your personal data. You may opt‑out of cross‑context behavioural advertising.
-
Non‑discrimination: you shall not receive discriminatory treatment for exercising CCPA rights.
To exercise above‑mentioned rights, send email to service@auralumelamp.com. We will respond within 45 calendar days. Identity‑verification steps are required. Do‑Not‑Sell‑My‑Personal‑Information requests may be submitted via our support email.
9. Data Security
We adopt industry‑standard security measures to protect your personal information: ‑ Encryption for data transmission and sensitive stored information ‑ Access permission control for internal staff; only authorized personnel can access personal‑customer‑data ‑ System‑monitoring for potential security‑breach risk
In the event of personal‑data breach that poses high‑risk to your rights and freedom, we will notify relevant users and supervisory authority within 72 hours as required by applicable law. No internet transmission system can guarantee absolute‑zero‑risk security.
10. Children’s Privacy
Our website is intended for general‑adult consumers. We do not knowingly collect personal information of children under 16 years old. If you believe we have obtained data from a child, please contact us immediately and we will delete such information.
11. External‑Links Disclaimer
Our website may contain hyperlinks to third‑party websites. We are not responsible for the privacy practices or content of external‑sites. Please read their privacy‑policy when you visit those websites.
12. Policy Revision
We may update this Privacy Policy from time‑to‑time for regulatory‑adjustment or business‑change reasons. The “Last Updated” date at the top indicates revision time. Material changes will be notified by website notice. Continued use of our website after revision means you accept the updated policy.
13. How To Contact Us For Privacy‑Related Inquiries
For all privacy‑related questions, data‑right requests, please contact: