Effective Date: July 15, 2025

1. Personal Information We Collect

We collect only the personal information reasonably necessary to operate our online store, process transactions, fulfill orders, communicate with customers, and improve our services.

Depending on how you interact with Luxora, we may collect the following categories of information:

Information You Provide Directly

When you create an account, place an order, contact us, or otherwise interact with our website, we may collect:

• Full name

• Billing and shipping address

• Email address

• Telephone number

• Order information

• Products purchased

• Customer service communications

• Information you voluntarily provide through forms or messages

• Account information, if you create an account

• Preferences relating to our products or communications

Payment Information

When you purchase products from Luxora, payment information may be processed by third-party payment providers.

Depending on the payment method you choose, payments may be processed through services such as:

• PayPal

• Venmo

• Credit or debit card payment processors

• Apple Pay

Luxora generally does not need to receive or store your complete credit card number, security code, or bank account credentials when payment is processed through these third-party providers.

Payment providers may independently collect and process financial and payment information in accordance with their own privacy policies. For example, PayPal states that financial information associated with payment methods is encrypted and securely stored within its services.

You should review the applicable payment provider's privacy policy for information about how it processes your payment information.

Automatically Collected Information

When you visit our website, certain technical information may be collected automatically, including:

• IP address

• Browser type

• Device type

• Operating system

• Approximate geographic location derived from technical information

• Pages visited

• Website interactions

• Date and time of visits

• Referring website

• Information concerning how you interact with our website

Some of this information may be collected through cookies and similar technologies.

2. How We Use Personal Information

We may use personal information for the following purposes:

• To process and fulfill orders

• To provide products and services requested by customers

• To process payments

• To arrange shipping and delivery

• To communicate with customers regarding orders

• To respond to questions, requests, and customer-service inquiries

• To provide order confirmations and shipping updates

• To maintain customer accounts

• To prevent fraud, abuse, and unauthorized transactions

• To maintain the security of our website

• To troubleshoot technical problems

• To improve our website, products, and customer experience

• To understand website traffic and usage

• To comply with legal and regulatory obligations

• To establish, exercise, or defend legal claims

• To send marketing communications where legally permitted and where required consent has been obtained

• To otherwise operate and administer Luxora's business

We will not use personal information for purposes that are materially incompatible with the purposes described in this Privacy Policy without providing additional notice or obtaining consent where required by applicable law.

3. Legal Bases for Processing Under the GDPR

If the General Data Protection Regulation ("GDPR") applies to your personal information, Luxora will process your personal information only when a lawful basis exists.

Depending on the circumstances, our legal bases may include:

Performance of a Contract

We may process information when it is necessary to fulfill an order or provide services you have requested.

For example, we need your name, shipping address, and contact information to process and deliver your order.

Legal Obligation

We may process information when necessary to comply with applicable laws, regulations, tax requirements, accounting obligations, legal requests, or other legal obligations.

Legitimate Interests

We may process information when necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.

Examples may include:

• Protecting our website and customers from fraud

• Maintaining website security

• Improving our services

• Managing customer relationships

• Preventing abuse

• Establishing or defending legal claims

Consent

Where required by law, we may request your consent before processing personal information.

For example, consent may be required for certain non-essential cookies, marketing communications, or other forms of optional processing.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

4. Cookies and Similar Technologies

Luxora uses cookies and similar technologies to operate, secure, and improve our website.

Cookies are small data files stored on your device by your browser. Wix explains that its platform uses cookies for functions such as website security, stability, visitor functionality, and platform performance. Additional cookies may be placed by Wix business solutions, third-party applications, analytics services, advertising services, or other integrations used on a particular website.

Our website may use the following categories of cookies:

Essential Cookies

These cookies are necessary for the website to operate properly.

They may be used for purposes such as:

• Website security

• Shopping cart functionality

• Checkout functionality

• Maintaining sessions

• Fraud prevention

• Basic website functionality

These cookies generally cannot be disabled through our website where they are necessary to provide the services you request.

Functional Cookies

Functional cookies may remember choices or preferences to improve your experience.

Analytics Cookies

Where enabled, analytics cookies may help us understand how visitors use our website, including which pages are visited and how visitors interact with our website.

Marketing or Advertising Cookies

Where applicable and where legally permitted, marketing technologies may be used to measure advertising performance or provide relevant advertising.

Non-essential cookies will be used in accordance with applicable privacy laws. Where consent is required, we will request consent before placing such cookies.

You may manage cookies through your browser settings and, where available, through our website's cookie-consent mechanism.

Because Wix sites may contain additional cookies from third-party applications and integrations, the exact cookies used by Luxora may change depending on the services and features we use.

5. Third-Party Service Providers

Luxora uses third-party service providers to operate our business.

These providers may process personal information on our behalf or independently as required to provide their services.

Third parties may include:

Wix

Our online store is hosted and operated using Wix.

Wix may process information necessary to provide website hosting, e-commerce functionality, security, website infrastructure, and related services.

Wix identifies website owners as data controllers for visitor/customer data they process through their websites, while Wix may act as a data processor for such information.

Payment Providers

We may use payment services including:

• PayPal

• Venmo

• Credit/debit card payment processors

• Apple Pay

These providers may process payment and transaction information according to their own privacy policies and applicable laws.

PayPal and Venmo are operated by PayPal, Inc. Venmo's current privacy statement explains that PayPal, Inc. is the data controller for information processed through Venmo services.

Dropshipping Suppliers and Fulfillment Partners

Because Luxora operates using a dropshipping business model, we may work with third-party suppliers, manufacturers, fulfillment companies, warehouses, shipping companies, and logistics providers.

When necessary to fulfill your order, we may provide such providers with information such as:

• Customer name

• Shipping address

• Email address

• Telephone number, when necessary

• Order details

• Delivery information

We share only information reasonably necessary for the provider to fulfill its role.

Our suppliers and fulfillment partners may be located outside the United States, including in countries where privacy laws may differ from those in your country.

Shipping and Delivery Providers

We may share necessary information with postal services, shipping companies, couriers, and logistics providers to deliver your order.

Other Service Providers

We may also use providers for:

• Website analytics

• Website security

• Customer support

• Email communications

• Fraud prevention

• Accounting

• Business administration

• Marketing, where legally permitted

Third-party providers may have their own privacy policies and obligations regarding personal information.

6. When We Disclose Personal Information

Luxora does not sell your personal information in exchange for money.

We may disclose personal information when reasonably necessary to:

• Fulfill orders

• Process payments

• Ship products

• Provide customer support

• Operate our website

• Maintain website security

• Prevent fraud

• Comply with legal obligations

• Respond to lawful governmental requests

• Protect the rights, property, and safety of Luxora, our customers, or others

• Establish, exercise, or defend legal claims

• Complete a business transaction, such as a merger, acquisition, restructuring, or sale of assets

We may also disclose information when you specifically authorize us to do so.

7. Data Retention

Luxora retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

The length of time we retain information depends on factors including:

• The purpose for which the information was collected

• Whether you maintain an account with us

• Whether we need the information to fulfill an order

• Legal, tax, accounting, and regulatory requirements

• Fraud prevention and security requirements

• The establishment, exercise, or defense of legal claims

For example, transaction and order records may need to be retained for accounting, tax, legal, or business purposes even after an order has been completed.

When personal information is no longer reasonably necessary, we will delete it, anonymize it, or otherwise securely dispose of it where reasonably practicable and in accordance with applicable law.

8. Your Rights Under the GDPR

If you are located in the European Union, European Economic Area, or another jurisdiction where GDPR rights apply, you may have the following rights:

Right to Access

You may request confirmation of whether we process your personal information and request a copy of that information.

Right to Rectification

You may request that inaccurate or incomplete personal information be corrected.

Right to Erasure

You may request deletion of your personal information in certain circumstances.

This right is sometimes referred to as the "right to be forgotten."

We may retain certain information where we have a lawful reason or legal obligation to do so.

Right to Restriction of Processing

You may request that we restrict the processing of your personal information in certain circumstances.

Right to Data Portability

Where applicable, you may request to receive certain personal information you provided to us in a structured, commonly used, and machine-readable format, or request that it be transferred to another organization where technically feasible.

Right to Object

You may object to certain processing of your personal information, including processing based on legitimate interests.

You may also object to direct marketing at any time.

Right to Withdraw Consent

Where we process personal information based on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing that occurred before consent was withdrawn.

Rights Regarding Automated Decision-Making

Where applicable under the GDPR, you may have rights concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Luxora does not intend to make decisions producing legal or similarly significant effects about customers solely through automated processing.

9. How to Exercise Your Privacy Rights

To exercise a privacy right or submit a privacy request, contact us:

Email: makayla18vang@gmail.com
Phone: 209-631-1347

Please clearly describe your request and provide enough information for us to reasonably verify your identity and locate the relevant information.

We may request additional information where reasonably necessary to verify that the request is being made by the individual to whom the information relates.

We will respond to valid GDPR requests within the time period required by applicable law.

Where permitted by law, we may charge a reasonable fee for requests that are manifestly unfounded, excessive, or repetitive. We may also refuse a request where a lawful exception applies.

10. Right to Lodge a Complaint

If you believe that Luxora has processed your personal information in violation of applicable data protection law, you have the right to lodge a complaint with a supervisory authority.

If you are located in the European Union or European Economic Area, you may contact the data protection authority in the country where you live, work, or where you believe the alleged infringement occurred.

You can find information about EU data protection authorities through the European Data Protection Board.

You may also contact Luxora directly first so that we can attempt to address your concern.

11. International Data Transfers

Luxora is based in the United States, and some of our service providers, suppliers, payment processors, technology providers, and fulfillment partners may be located in countries outside your country of residence.

As a result, your personal information may be transferred to, stored in, or processed in countries outside the European Economic Area ("EEA"), including the United States.

Where the GDPR applies and personal information is transferred outside the EEA, we will take appropriate measures required by applicable data protection law.

Depending on the circumstances, these measures may include:

• Transfers to countries recognized as providing an adequate level of data protection

• Standard Contractual Clauses approved or recognized under applicable data protection law

• Other legally recognized transfer mechanisms

• Appropriate contractual, technical, and organizational safeguards

Wix states that its servers are located in multiple regions, including Europe and the United States, and that transfers outside the EEA are handled in accordance with applicable data protection requirements where European data protection regulations apply.

Because Luxora uses independent third-party providers, those providers may have their own international data-transfer mechanisms and privacy policies.

12. Data Security

Luxora takes reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Security measures may include:

• Secure website connections

• Access controls

• Limited access to customer information

• Third-party payment security

• Website security measures provided by Wix

• Reasonable administrative safeguards

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

Therefore, while we take reasonable steps to protect personal information, we cannot guarantee absolute security.

13. Children's Privacy

Luxora's website is not intended for children under the age of 13.

We do not knowingly collect personal information from children under 13.

If you believe that a child has provided personal information to Luxora without appropriate parental or guardian authorization, please contact us so that we can take appropriate steps to delete the information where required by law.

Where the GDPR or another applicable law establishes a different age threshold or additional requirements concerning children's consent, we will comply with those requirements.

14. Marketing Communications

If you choose to receive promotional communications from Luxora, we may use your email address or other contact information to send information about:

• New products

• Promotions

• Discounts

• Special offers

• Store announcements

• Other Luxora-related communications

Where required by law, we will obtain your consent before sending marketing communications.

You may unsubscribe from marketing emails at any time by using the unsubscribe mechanism included in the communication or by contacting us at:

makayla18vang@gmail.com

Even if you unsubscribe from marketing communications, we may still contact you when necessary to complete an order, provide customer service, address an account issue, or provide other transactional or legally required communications.

15. Links to Third-Party Websites

Our website may contain links to websites, services, social media platforms, payment providers, or other third-party websites.

Luxora is not responsible for the privacy practices, security, content, or policies of third-party websites.

We encourage you to review the privacy policies of any third-party services you access.

16. California Privacy Rights

Because Luxora is located in California, California privacy laws may apply to our business depending on our size, activities, and other legal requirements.

Where applicable, California residents may have rights concerning their personal information, including rights to know/access, correct, delete, and limit or opt out of certain uses or disclosures of personal information.

Luxora does not sell personal information for monetary consideration.

If you wish to submit a privacy request, contact us using the information provided in Section 9.

We will process requests in accordance with applicable California law.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our business practices

• Our website

• Our products and services

• Third-party service providers

• Applicable laws and regulations

• Privacy and security practices

When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy.

If a change materially affects your rights or how we process personal information, we will provide additional notice where required by law.

We encourage you to periodically review this Privacy Policy.