1. Who We Are
Valora Lume is an online brand and store based in Sri Lanka. We provide products and customer account features through our website, including account registration, secure login, order-related services, and customer support.
If you have any privacy-related questions, you can contact us at:
Email: valoralume@gmail.com
2. Information We Collect
We may collect the following types of information:
A. Information you provide directly
- Your name
- Email address
- Age
- Phone number
- Billing address
- Shipping address
- Account login details
- Messages you send to us
- Order and account-related information
B. Account and login information
When you create an account or sign in, we may collect and store:
- Your email address
- Encrypted or hashed authentication data
- Account preferences
- Login and security activity related to your account
C. Social login information
If you choose to sign in using Google or Facebook, we may receive limited profile information from those providers, such as:
- Your name
- Email address
- Profile identifier linked to that provider
We use this information only to authenticate you, create or connect your customer account, and improve the sign-in experience.
D. Technical and usage information
When you visit our website, we may automatically collect limited technical data such as:
- IP address
- Browser type
- Device information
- Session and login activity
- General usage and interaction data
- Security and fraud-prevention related information
3. How We Use Your Information
We use your information to:
- Create and manage your customer account
- Allow you to sign in securely
- Process orders and customer requests
- Communicate with you about your account or orders
- Send password reset, verification, and service-related emails
- Improve website functionality and customer experience
- Prevent fraud, abuse, unauthorized access, and other security risks
- Comply with legal obligations and enforce our policies
4. Social Login Services
Our website may allow you to sign in using third-party login providers such as Google and Facebook.
When you use social login:
- We receive only the basic account information needed for authentication and account setup
- Your use of those services is also subject to the privacy policies of Google or Meta/Facebook
- We do not receive your password for those third-party accounts
If you do not want to use social login, you may sign up or sign in using the standard account options provided on our website.
If you used Facebook Login and would like to request deletion of Facebook-linked account data, please use our Facebook User Data Deletion Instructions page and follow the instructions provided there.
5. Security Verification and CAPTCHA
To protect our website, customer accounts, and login forms from spam, abuse, and automated attacks, we may use security tools such as CAPTCHA or similar verification systems.
These tools may process technical information such as browser, device, and IP-related data in order to determine whether a request is from a real person or an automated system.
6. Email Communications
We may send important service-related emails, including:
- Account verification emails
- Password reset emails
- Login or security-related notices
- Order-related notifications
- Customer support responses
We may use trusted third-party email delivery providers to send these emails on our behalf.
8. Cookies and Similar Technologies
Our website may use cookies, sessions, and similar technologies to:
- Keep users signed in
- Maintain secure sessions
- Improve website functionality
- Remember preferences
- Support security and fraud-prevention measures
You can manage browser cookie settings through your browser. However, disabling certain cookies may affect website functionality.
9. Data Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
- Maintaining customer accounts
- Providing services and support
- Meeting legal, tax, accounting, and security obligations
- Resolving disputes and enforcing agreements
When information is no longer needed, we will delete it or retain it only in a form that is legally required or reasonably necessary.
10. Data Security
We take reasonable administrative, technical, and organizational measures to protect your information from unauthorized access, misuse, loss, alteration, or disclosure.
However, no internet-based system is completely secure, and we cannot guarantee absolute security.
11. Your Rights and Choices
Depending on your location and applicable law, you may have rights to:
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion of your information
- Request help regarding account-linked personal data
To make a privacy-related request, contact us at:
We may need to verify your identity before processing certain requests.
12. Children's Privacy
Our website is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will take reasonable steps to delete it.
13. Third-Party Services and Links
Our website may include integrations, services, or links provided by third parties. We are not responsible for the privacy practices of third-party websites or services. We encourage users to review the privacy policies of those third parties separately.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, or legal obligations. When we make updates, we will post the revised version on this page and update the effective date.
15. Contact Us
If you have questions about this Privacy Policy or would like to make a privacy-related request, please contact us at: