Privacy policy

1. About This Policy

The Lux Baro is a brand independently operated from China. We operate this store and website and use Shopify to provide product browsing, ordering, payment, shipping, returns, exchanges, refunds, and customer support (collectively, the “Services”). This Privacy Policy explains how we collect, use, retain, and disclose your personal information when you visit or use the Services, purchase a product, or communicate with us.

“Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymized or de-identified so that it can no longer reasonably identify an individual.

2. Personal Information We Collect

Depending on how you use the Services, we may collect:

  • Contact and order information, such as your name, email address, telephone number, billing address, and shipping address;
  • Transaction information, such as products viewed, items placed in your cart, purchases, returns, exchanges, refunds, cancellations, and order history;
  • Account information, such as login credentials, preferences, and settings, if you create an account;
  • Communications, including customer-support messages and any photos or videos you provide in connection with a product issue;
  • Device and usage information, such as your IP address, browser, device, network connection, and information about how you navigate and use the website; and
  • Limited payment and transaction-status information, such as the payment method selected, payment confirmation, and refund status.

Complete payment-card or payment-account credentials are processed by Shopify, PayPal, or other payment service providers. The Lux Baro does not directly store your complete card number or payment-account credentials. Refunds are processed to the original payment method.

3. How We Collect Personal Information

We may collect personal information:

  • Directly from you when you place an order, create an account, request a return or exchange, or contact us;
  • Automatically when you use the website, including through Shopify, cookies, and similar technologies;
  • From service providers that support payment processing, website hosting, fraud prevention, shipping, customer support, or other necessary business functions; and
  • From other sources that you authorize or that are permitted by law.

4. How and Why We Use Personal Information

We process personal information only when we have an appropriate legal basis, including:

  • Completing your order and providing after-sales service (performance of a contract): We use relevant information to process payments, confirm and ship orders, manage returns, exchanges and refunds, administer accounts, and send necessary order-related communications;
  • Legitimate interests: to operate and improve the Services, protect accounts and transactions, prevent fraud, and respond to customer inquiries;
  • Compliance with legal obligations: to meet tax, accounting, consumer-protection, regulatory, and valid legal-process requirements; and
  • Consent: where consent is required for non-essential cookies or other processing. You may withdraw consent at any time, without affecting processing carried out before withdrawal.

We use email for necessary communications relating to orders, payments, shipping, returns, exchanges, refunds, account security, and customer support. If we offer an email subscription and you voluntarily opt in, we may also send brand news or marketing emails. You may unsubscribe at any time using the unsubscribe link in those emails. Unsubscribing from marketing will not stop necessary transactional or service communications.

5. Cookies and Website Analytics

The website and Shopify use essential cookies and similar technologies to provide the shopping cart, checkout, account sign-in, security, and other core website functions. Non-essential analytics or personalization features are used only after consent where required by applicable law.

You can review or change your choices through the website’s cookie banner or cookie-preference controls. Declining non-essential cookies will not prevent you from using the core shopping and checkout functions, although some non-essential features may be unavailable.

If we enable Shopify Network Intelligence, Shopify Enhanced Services, or advertising-related features, Shopify may, in accordance with its terms, combine information about your interactions with our store with information obtained from other merchants or Shopify services to provide measurement, analytics, personalization, or advertising-related services. This processing applies only when the relevant feature is enabled and is subject to applicable cookie-consent and data-sharing opt-out settings. Where applicable law provides these rights, you may use the cookie-preference controls or data-sharing opt-out page made available on our website to withdraw consent or opt out of the use of personal information for targeted advertising, sale, or sharing.

6. How We Disclose Personal Information

We may disclose personal information only as reasonably necessary to:

  • Shopify, which provides the ecommerce platform and hosting for the Services;
  • PayPal or other payment service providers;
  • Shipping, logistics, and order-fulfillment providers;
  • Providers of cloud hosting, technical support, security, fraud prevention, accounting, or professional services;
  • Third parties when you expressly request, authorize, or consent to the disclosure;
  • Government authorities, regulators, or other parties where necessary to comply with law or valid legal process, or to protect the rights and safety of the store, our customers, or others; and
  • Relevant parties in connection with a merger, acquisition, financing, restructuring, or transfer of the business, subject to applicable law and confidentiality obligations.

We do not sell personal information for money. Certain Shopify Enhanced Services may be treated as a “sale,” “sharing,” or targeted advertising under the laws of some jurisdictions. Where those laws apply, we will provide the relevant cookie choices or data-sharing opt-out method.

7. Shopify’s Processing

The Services are powered by Shopify. Information that you submit or that is generated through your use of the Services may be processed by Shopify and its service providers to host the store, enable checkout, provide security, and improve Shopify’s platform services.

If Shopify decides why and how it processes information for a particular service, Shopify acts as an independent controller and is responsible for that processing.

For more information and to exercise rights relating to Shopify’s processing, please review the Shopify Consumer Privacy Policy (https://www.shopify.com/legal/privacy/app-users) and the Shopify Privacy Portal (https://privacy.shopify.com/).

8. International Data Transfers

Because The Lux Baro, Shopify, payment providers, logistics providers, or other service providers may be located in different countries, your personal information may be processed outside the country where you live.

Where international transfers are restricted by law, we or the relevant service provider use applicable safeguards, such as approved standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, taking into account order and account administration, after-sales support, dispute resolution, fraud prevention, tax, accounting, and other legal obligations.

When retention is no longer necessary, information is deleted, anonymized, or securely disposed of as required by applicable law.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

  • Request access to or a copy of your personal information;
  • Correct inaccurate or incomplete information;
  • Request deletion of personal information;
  • Restrict or object to certain processing;
  • Receive a portable copy of certain information where applicable;
  • Withdraw consent where processing is based on consent; and
  • Lodge a complaint with your local data-protection authority.

These rights are not absolute and may be subject to legal exceptions. To protect your information, we may need to verify your identity before processing a request. We will not discriminate against you for exercising a privacy right available under applicable law.

To exercise a right, email us at theluxbaro@gmail.com.

For information processed independently by Shopify, you may also submit a request through the Shopify Privacy Portal (https://privacy.shopify.com/).

11. Third-Party Links

The Services may contain links to third-party websites or services. When you leave our website, the third party’s own privacy policy applies.

We do not control and are not responsible for the privacy, security, or content of third-party websites.

12. Children’s Privacy

The Services are not directed to children, and we do not knowingly collect personal information from children below the age of majority applicable where they live.

If a parent or guardian believes that a child has provided personal information to us, please email us to request deletion.

13. Information Security

We and our service providers use reasonable administrative, technical, and organizational measures to protect personal information.

However, no method of transmission or storage is completely secure. Please do not send complete payment credentials or other highly sensitive information through unsecured channels.

14. Changes to This Policy

We may update this Policy to reflect changes to our business, technology, legal requirements, or regulatory obligations.

We will publish the revised version on this website, update the “Last updated” date, and provide any additional notice required by law.

15. Contact Us

For questions about this Policy, our handling of personal information, or your privacy rights, please contact:

The Lux Baro
Email: theluxbaro@gmail.com

For purposes of applicable data-protection laws, the operator of The Lux Baro is the controller of the personal information described in this Policy.