光智汇联Privacy policy
How we handle personal information relating to website visits, product enquiries, purchasing, projects and community participation, and the choices available to you.
This policy applies to personal information activities for which we determine the purposes and means of processing through Luma-Hub. You can contact us at aaron@luma-hub.com. Company names, technical specifications and similar information are also treated as personal information when they identify a particular individual.
We process information only as necessary for the features you use. You do not need to submit project documents to browse public content. Declining optional information or marketing messages does not affect unrelated basic services. Reading this policy does not constitute blanket consent to all processing activities.
1. Scope and processing principles
This policy covers website accounts, lighting product enquiries and purchases, product planning and development, material samples and quotations, partnership applications, community participation and related customer communication. Read any more detailed feature-specific notice alongside this policy.
We follow principles of lawfulness, fairness, necessity and transparency, processing relevant information for defined purposes only. For a new purpose incompatible with the original one, we will provide a new explanation and obtain consent where required by law.
If you visit an external website or contact an independent third-party provider, that party's policy applies to its independent processing. Where a business customer commissions us to process personal information, we must comply with the processing agreement and applicable law rather than automatically reuse it for our own new purposes.
2. Information needed in different situations
The following information depends on the features you choose. You are not required to provide information for a feature you do not use. Forms should distinguish required and optional fields, with required information limited to what is necessary for the current request.
| Situation | Relevant information | Purpose and choices |
|---|---|---|
| Website browsing and search | Your search terms, and request and device information necessary for access and security. | Displaying pages, returning search results, diagnosing errors and preventing misuse. Do not enter private or confidential information into search fields. |
| Accounts and saved items | Account identifiers, contact and authentication information required by your registration or login method, and items you choose to save. | Verifying identity, providing account features and account recovery. Registration information is not needed if you do not use account features. |
| Lighting selection and product enquiries | The name, reply method, space description, budget range, preferences and questions you provide. | Answering product questions and establishing selection criteria. You may provide photographs or supporting information as needed. |
| Purchases, gifts and after-sales support | Order contact and delivery details, product and transaction records, and necessary invoicing and after-sales information. | Fulfilling orders, delivery, settlement and after-sales support when you order or request assistance. A delivery address is not required for an enquiry alone. |
| Planning, development and diagnosis | Project contact, company and role, contact email, requirements, schedule and project files you provide. | Assessing requirements, preparing quotations, discussing solutions and performing agreed projects. Personal information within technical documents should be limited to what is necessary. |
| Samples, RFQs and purchasing | Contact and reply details, material specifications, application, quantity and destination region; delivery and order details when samples are sent or an order is fulfilled. | Selection, sample arrangements, quotations, purchasing and supply communication. Additional information is requested according to the stage and actual need. |
| Expert and supplier partnerships | Business contact details, professional experience, work examples, product capabilities and qualifications relevant to the partnership. | Assessing suitability, discussing tasks and carrying out partnership arrangements. Unrelated personal history is not required. |
| Community, case studies and complaints | Public display names and content you choose to publish; complaint contact details and supporting information. | Organising discussions, displaying authorised content, handling complaints and protecting lawful rights. Private project information does not become a public post when submitted. |
If you do not provide information necessary for a request, we may be unable to process that request. You can still use features that do not depend on it. We will explain why additional information is needed, and you may ask about its necessity before providing it.
3. Purposes and legal bases
We identify a basis for each activity under applicable law, including processing necessary to enter into or perform a contract with you, compliance with legal obligations, and valid consent where required. A website visit or reading this policy alone does not imply consent to unrelated processing.
When you submit an enquiry, this is one basis for processing necessary to respond to your request for information, a quotation or a transaction. The enquiry-page checkbox confirms that you have read the relevant notice and asks us to process the information needed for this communication. It does not mean you consent to marketing, sharing with all partners or other unrelated processing. You decide whether to provide optional fields and attachments.
You may withdraw consent for processing based on consent, without affecting prior lawful processing. Contract performance or record retention that lawfully does not require consent will continue only to the extent necessary. Processing business contact information also requires an appropriate legal basis. We do not treat the “legitimate interests” concept used in other jurisdictions as a general basis for unrestricted collection in mainland China.
4. Enquiry forms and email communication
When you review and confirm an enquiry, your contact details, request, source-page information and any attachments you choose to provide are submitted through this website’s server so we can receive, route and handle the enquiry, make necessary follow-up enquiries and communicate about related fulfilment. Enquiry emails are sent to aaron@luma-hub.com. Alibaba Cloud provides this site’s hosting, mailbox and SMTP email transmission services. Review the information and attachments before confirming. After submission, you may contact us to request correction or deletion.
Attachments are uploaded only after you confirm submission. You may choose not to provide an attachment. If you upload one, separately confirm that you are authorised to provide it and avoid unrelated personal information, passwords, payment details or trade secrets you are not authorised to share. An acknowledgement means only that this website’s email transmission process accepted the send request; it does not guarantee delivery to an inbox or acceptance of a project.
An ordinary enquiry does not require identity documents, bank account details, passwords or verification codes. Before supplying third-party contacts, employee information, unpublished drawings or trade secrets, remove unrelated information and confirm that you have lawful authority to share it. Handling your enquiry, quotation or order does not subscribe you to marketing messages. Separate promotional use of your contact details must satisfy the relevant notice and choice requirements.
6. Public content and information about others
Display names, posts, comments and images you make public may be viewed, quoted or shared by others. Before publishing, check for information you wish to keep private, and for other people's personal information, likenesses or trade secrets.
Enquiry forms and project communications do not automatically become public. Use of identifiable customer, contact or partner information in case studies or promotion should be authorised or altered so that individuals cannot be identified.
When providing another person's delivery or contact information, ensure that you have a lawful basis and explain this policy where necessary. We must also lawfully handle that person's access, correction or deletion requests.
7. Service providers, sharing and disclosure
Alibaba Cloud provides this site’s hosting, mailbox and SMTP, CDN and security protection, and backup services. Hosting and backups may process the contact details, enquiries and attachments you submit; mailbox and SMTP services process email addresses, message content, attachments and transmission records; CDN and security services may process requested addresses, request times, device or browser information and security events to provide hosting, transmission, delivery acceleration, protection and backup. Alibaba Cloud contact details are available through the linked support site.
These services process relevant information on our behalf and under our instructions. Our contracts should specify the purposes, methods, scope, security duties and duration of processing, and we should oversee compliance. Service providers must not use the information independently beyond the commissioned purpose. If delivery or another agreed service requires us to provide personal information to a further provider, we will give notice where applicable law requires it.
Selling personal information is not a condition of our services. Public disclosure, information transfers arising from mergers or asset transfers, and legally required disclosure to authorities must each satisfy applicable notice, protection and other obligations.
8. Overseas services and cross-border information
International projects may involve contacts and partners in different countries or regions. Offering multiple website languages does not mean that you have consented to disclosure to any overseas recipient.
Where a service requires personal information to be sent abroad, legally required information about the recipient's country or region, name, contact details, processing purposes, information types and rights procedures should be provided beforehand. Applicable transfer safeguards and consent requirements must also be met.
Contact us about cross-border arrangements and safeguards relating to your enquiry or project. A general cross-border clause cannot be treated as authorisation for any transfer without establishing the relevant facts and conditions.
9. Retention and deletion
Enquiry emails and subsequent correspondence are retained for up to five years from receipt or dispatch; attachments for up to five years from submission; and website access, security and email transmission logs for up to five years from generation. If the purpose ends earlier and continued retention is unnecessary, we will delete or anonymise the information earlier as required by law. Different statutory retention requirements prevail. Periods for order, invoicing and other transaction records are determined by applicable law and what is necessary for performance and after-sales support.
Enquiry-form information passes briefly through the website server during transmission. If Alibaba Cloud backups contain these emails, attachments or logs, we manage the copies according to the applicable retention periods and delete or anonymise them when those periods end. Where a single item cannot immediately be removed from a backup for technical reasons, we restrict further use and remove it when the backup rotates. Clearing the website’s duplicate-submission record alone does not delete emails, attachments or backup copies.
Where continued retention is legally required or immediate deletion is technically unavailable, use should stop beyond necessary storage and security protection. You may ask which information categories concern you and how retention is determined.
10. Information security
We should use appropriate organisational and technical measures for the nature and risks of processing, including access controls, confidentiality duties, security maintenance and incident handling. Measures should suit the sensitivity of the information and service requirements.
Internet transmission and storage cannot be guaranteed completely secure. If an incident is discovered, we will take appropriate remedial action promptly and fulfil applicable notification or reporting obligations. This does not reduce our legal responsibilities.
Do not submit sensitive information in public areas. Protect your devices and login credentials, and contact us promptly if you suspect unauthorised access to your account or information.
11. Your rights and how to make a request
Under applicable law, you may request information about, access to, a copy of, or corrections or additions to your personal information. Where the conditions are met, you may request deletion, restriction or refusal of processing, withdraw consent, close an account or transfer information to a processor you designate.
Email aaron@luma-hub.com with the suggested subject “Personal information request”. Describe your request and the account, project or contact record that will help us locate it. You do not need to send identity documents or other sensitive evidence at the outset.
To avoid disclosing information to the wrong person, we may verify identity or representative authority to the extent necessary and respond within applicable legal deadlines. If a request cannot be fully met, we will explain the basis and available alternatives. Exercising privacy rights alone will not result in unreasonable differential treatment.
Requests are generally free of charge. Any legally permitted exception should be explained in advance. You may also complain directly to a competent data-protection or other authority, or seek a legal remedy.
12. Messages and your choices
Notifications directly relating to your request, order, account security or service changes support the relevant service. Product promotions, event invitations and other marketing should have the required permission and provide a convenient opt-out.
Use the opt-out in a message or contact our email address to stop marketing. Opting out should not affect order updates, after-sales support or necessary service notifications you still need.
If automated decisions with a significant effect on individual rights are introduced, the basic arrangements should be explained in advance, with explanation, refusal or human-review mechanisms required by law. General wording in this policy alone does not authorise them.
13. Children and sensitive information
Professional enquiries, purchasing and partnership features are primarily intended for users with the appropriate legal capacity. Minors using services involving personal information should have suitable guardian guidance and necessary consent.
Processing personal information of children under 14 requires guardian consent and specific protection as prescribed by law. If information has been collected without the applicable requirements, it should be investigated promptly and deleted or otherwise appropriately handled.
General browsing and initial enquiries do not require biometric data, health information, precise location history, financial accounts or identity documents. If a specific task requires sensitive personal information, its necessity, effects and safeguards should be explained, with separate consent or other applicable conditions satisfied.
14. Rights in other regions
Whether European Economic Area, UK or other data-protection rules apply depends on whether we are established there, offer goods or services to people there, monitor their behaviour there, or meet another applicable criterion. Providing a multilingual website alone does not determine the territorial scope. Where such rules apply, we will provide the required information about processing bases, data rights, any locally required representative and transfer safeguards.
The need for a local representative, additional notices or a particular transfer mechanism depends on the business and processing activities. This policy does not exclude mandatory rights provided by the law that applies to you.
For information about arrangements for your location or service, include your country or region and the nature of your request when contacting us.
15. Policy updates and contact details
We will update this policy when features, processing activities or legal requirements change and state the update date. Changes materially affecting purposes, information types, recipients or your rights should be appropriately highlighted. A silent update cannot replace consent where renewed consent is required.
For questions about personal information, public content, email preferences or this policy, contact: Zhuhai Buyan Intelligent Technology Co., Ltd. · Luma-Hub, aaron@luma-hub.com. To handle requests for access, correction, deletion or withdrawal of consent, we verify identity or authority to act only as necessary. If identity documents are needed, we will first explain the fields required and a secure submission method, and allow unrelated information to be obscured.
For website use and transactions, also read our Terms of Use.
