Privacy policy

Last updated: June 6, 2026

Casa Lumra operates this store and website to provide you with a curated shopping experience (the "Services"). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understood this policy.

1. Personal Information We Collect or Process

"Personal information" refers to information that identifies or can reasonably be linked to you. It does not include anonymised or de-identified information. Depending on how you interact with the Services, we may collect or process the following:

  • Contact details — name, address, billing and shipping address, phone number, and email address
  • Financial information — credit/debit card numbers, payment card information, transaction details, form of payment, and payment confirmation
  • Account information — username, password, security questions, preferences, and settings
  • Transaction information — items you view, add to cart or wishlist, purchase, return, exchange, or cancel, and your past transactions
  • Communications with us — information included in your messages to us, such as customer support inquiries
  • Device information — device type, browser, network connection, IP address, and other unique identifiers
  • Usage information — how and when you interact with or navigate the Services

2. Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you — when you create an account, visit or use the Services, communicate with us, or otherwise provide your personal information
  • Automatically through the Services — from your device when you use our products or services or visit our website, including through cookies and similar technologies
  • From our service providers — when we engage them to enable certain technology or when they collect or process your personal information on our behalf
  • From our partners or other third parties

3. How We Use Your Personal Information

Depending on how you interact with us, we may use your personal information for the following purposes:

Provide, Tailor & Improve the Services To process payments, fulfill orders, manage your account, arrange shipping, facilitate returns and exchanges, remember your preferences, send account notifications, enable product reviews, and create a customized shopping experience.

Marketing & Advertising To send marketing and promotional communications by email, text, or postal mail, and to show you relevant online advertisements based on your activity on the Services.

Security & Fraud Prevention To authenticate your account, provide a secure shopping experience, detect and investigate fraudulent or malicious activity, and protect public safety and our services.

Communicating with You To provide customer support, respond to your inquiries, and maintain our business relationship with you.

Legal Reasons To comply with applicable law, respond to valid legal process, participate in litigation, and enforce or investigate potential violations of our terms or policies.

4. How We Disclose Personal Information

We may disclose your personal information to third parties in the following circumstances:

  • With Shopify, vendors, and service providers who perform services on our behalf (e.g. payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping)
  • With business and marketing partners to provide advertising services. You may have the right to opt out of targeted advertising based on your online activity — you can exercise that right [here]
  • When you direct or consent to disclosure, such as to ship products or through social media integrations
  • With our affiliates or within our corporate group
  • In connection with a business transaction such as a merger or bankruptcy
  • To comply with legal obligations, respond to subpoenas or warrants, enforce our terms, or protect the rights of our users or others

5. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit may be transmitted to and shared with Shopify and third parties located in countries other than where you reside.

Shopify may also use personal information collected about your interactions with our store and other merchants to provide enhanced features. In these circumstances, Shopify is responsible for processing your personal information for those purposes. To learn more, visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

6. Third-Party Websites & Links

The Services may contain links to third-party websites or platforms. We are not responsible for the privacy or security of those sites, and we encourage you to review their policies before engaging with them. Our inclusion of such links does not imply any endorsement of their content or operators.

7. Children's Data

The Services are not intended for use by children. We do not knowingly collect personal information from anyone under the age of majority in your jurisdiction. If you are a parent or guardian of a child who has provided us with their personal information, please contact us to request its deletion.

As of the effective date of this Privacy Policy, we do not knowingly sell or share personal information of individuals under 16 years of age.

8. Security & Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee absolute security. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce applicable contracts and policies.

9. Your Rights & Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may apply only in certain circumstances.

  • Right to Access / Know — request access to personal information we hold about you
  • Right to Delete — request deletion of personal information we maintain about you
  • Right to Correct — request correction of inaccurate personal information
  • Right of Portability — receive a copy of your personal information and request its transfer to a third party
  • Right to Opt Out of Sale or Targeted Advertising — opt out of the sale or sharing of your personal information for targeted advertising purposes. You can exercise this right [here]. We also honour the Global Privacy Control (GPC) opt-out signal — learn more at globalprivacycontrol.org
  • Managing Communication Preferences — opt out of promotional emails at any time using the unsubscribe link in our emails. We may still send non-promotional emails related to your account or orders

If you reside in the UK or European Economic Area, you may also have the following rights:

  • Objection to or Restriction of Processing — request that we stop or limit processing of your personal information for certain purposes
  • Withdrawal of Consent — where we rely on consent to process your data, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request. You may also designate an authorised agent to make requests on your behalf. We will not discriminate against you for exercising any of these rights.

10. Complaints

If you have concerns about how we handle your personal information, please contact us using the details below. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority. For the EEA, a list of supervisory authorities can be found here.

11. International Transfers

Your personal information may be transferred, stored, and processed outside the country in which you reside. If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent contracts issued by the relevant UK authority, unless the destination country has been determined to provide an adequate level of protection.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy on this website, update the "Last updated" date, and provide notice as required by applicable law.

13. Contact

For questions about this Privacy Policy, our privacy practices, or to exercise any of your rights, please contact us at:

Casa Lumra 133 Richmond St W, Ste 207-114 Toronto, ON M5H 2L3 Canada hello@casalumra.com

For the purpose of applicable data protection laws, Casa Lumra is the data controller of your personal information.