Privacy Policy

This site (https://www.lautira.com) is operated by Cikian (referred to below as "we"), and the brand name used publicly is Lautira.

This policy applies to every stage in which you access this site through a browser or another device, create an account, browse and buy products, request after-sales support, and communicate with us by email.

This policy takes effect on November 1, 2026. The current version is v1.0. Earlier versions no longer apply from the date this version takes effect.

This policy covers matters that affect your important rights: what information we collect, who we share it with, how long we keep it, and how you can exercise your rights. Each of these is explained in its own section below, and we suggest you read them closely.

We collect only the information needed to provide a specific function. The table below lists, by category, what we actually process, where it comes from and what it is used for. We do not actively collect information that is not listed in the table.

We also explicitly do not collect the following information:

• We do not collect your government ID number, biometric information, financial account passwords or full bank card numbers;
• We do not request device permissions such as contacts, SMS or call logs, and we do not read your photo library. Only when you actively choose to upload an avatar do we read the single image you select;
• We do not collect your precise GPS location, and we do not obtain your location in the background.

We use your personal information only for the purposes listed below. If we need to change those purposes, we will obtain your consent again, unless the law provides otherwise.

1. Providing core services: registration and sign-in, saving your cart and favourites, creating and fulfilling orders, arranging delivery, and handling returns, exchanges and refunds;
2. Keeping the service secure: detecting unusual sign-ins, bulk registrations, fraudulent orders and payment risk, preventing account misuse, and investigating faults and abuse;
3. Improving our products and services: with your consent, measuring page views and product views so that we can improve product display, search results and page structure;
4. Communicating with you: sending verification codes, order status and after-sales progress notices, and replying to your enquiries and complaints;
5. Meeting legal obligations: retaining transaction records as required by law, responding to lawful requests from competent authorities, and handling consumer disputes.

We do not use your personal information for automated decision-making that has a significant impact on you. For example, this site does not show different prices to different users based on their browsing history.

About marketing messages: we do not currently send you marketing emails or text messages. If we offer a subscription service in the future, we will ask for your consent separately and give you a way to unsubscribe in every email.

We use cookies and browser local storage to keep you signed in, remember your language preference, and measure traffic after you consent. The table below lists every cookie this site actually uses; we do not set any other cookies.

The "strictly necessary" cookies in the table above are essential to providing the service (keeping you signed in, for example). If they are turned off you cannot sign in or place an order, so no option to turn them off is offered. You are asked about the "preference" and "analytics" cookies on your first visit: analytics cookies are set only if you choose "Accept". Choosing "Decline" does not affect your ability to browse products or place orders.

You can change your choice at any time by clicking "Cookie settings" in the footer, or delete or block cookies in your browser settings. Please note that clearing the "strictly necessary" cookies will sign you out.

Besides cookies, this site stores a small amount of data in your browser local storage. This data is not used for cross-site tracking:

• user-info: your account details cached after sign-in (email, nickname, avatar), used to show them quickly when you refresh the page; cleared when you sign out;
• store-checkout-items: the list of items awaiting order during checkout; it expires when you close the tab;
• auth-redirect-after-oauth: temporarily stores the page you originally wanted to visit before signing in with Google, so that you are returned there automatically once sign-in is complete.

We do not sell your personal information, and we do not provide it to third parties for their own marketing purposes.

To provide specific functions, we engage the service providers listed below to process the information they need. They may process it only on our instructions and are bound by confidentiality and security obligations:

Google (Google Sign-In, Google Analytics 4)

Receives authorisation information during sign-in and returns the account identifier, email address and avatar link; receives page view data once you consent to analytics. This processing may take place on servers outside mainland China.

Object storage and content delivery providers

Store and deliver the avatars and product images you upload so that pages load properly.

Email delivery provider

Sends the verification code emails needed for registration, sign-in and password recovery, and receives your email address and the message content.

Human verification provider

Checks whether a request comes from a real person when verification codes are sent and at similar steps, and receives the verification ticket and the network identifiers required.

Apart from the cases above, we disclose your personal information only in the following circumstances:

1. we have your separate consent;
2. the law or a mandatory request from a competent authority (a court, a public security authority, a market regulation authority and the like) requires it, and only to the extent lawful and necessary;
3. it is necessary to protect the personal safety or property of you, other users or the public;
4. in a merger, demerger or transfer of assets, we will require the successor to remain bound by this policy; otherwise we will obtain your consent again.

This site offers “Sign in with Google”. We receive the information listed below through Google OAuth 2.0 only after you click that button and confirm the authorisation on Google’s consent screen. The only scopes we request are the basic openid, email and profile scopes.

We do not request or read data from Gmail, Google Drive, Google Calendar, Contacts or any other Google service. We never post anything on your behalf on Google or anywhere else, and we never receive your Google password.

For information obtained through Google APIs, we commit to the following:

• we use it only for “Sign in with Google” and the account identification and profile display directly related to it, never for any purpose unrelated to signing in;
• we do not use it for advertising, ad personalisation, profiling or credit assessment;
• we do not sell or rent it, and do not provide it to third parties for their own marketing purposes;
• we do not use it to train, fine-tune or evaluate generalised AI or machine-learning models, or to generate any AI content;
• we do not use Google APIs or Google user data to create, generate or distribute AI-generated non-consensual intimate imagery (NCI); this site offers no face-swap, undressing, nudity or sexual-content generation features;
• we do not disclose it to any third party except as necessary to provide the sign-in feature or as required by law or by a competent authority.

Our use of information received from Google APIs, and its transfer to any other app, adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke this site’s access at any time from the “Third-party apps & services” page of your Google Account (myaccount.google.com/permissions); after revocation we can no longer receive new information. To have Google sign-in data that we already store deleted, email support@lautira.com and we will handle it as described in “How long we keep your information”.

Our servers and databases are run by us or provided by hosting providers we engage, and are located mainly in the country/region where the Operator is based. Your account, order, delivery address and review information is stored there.

Some service providers (for example Google, which provides Google Sign-In and analytics) may process data outside your country/region, including in the United States. When we transfer data across borders, we take the measures required by applicable law (for example, signing standard contractual clauses and requiring providers to apply equivalent protection), and we require them to process data only on our instructions.

If the law of your country/region sets specific requirements for data leaving the country, you can contact us for details.

We keep your personal information only for as long as necessary for the purposes of processing. After that we delete it or anonymise it, unless the law requires us to keep it longer.

Where the law requires us to keep information longer, or where it must be kept to deal with possible disputes, reports or litigation, we keep it for as long as necessary and delete it once that need no longer exists.

• The whole site uses HTTPS encrypted transmission. Login credentials are stored in a cookie with the HttpOnly flag, which page scripts cannot read;
• Passwords are not stored as plain text; they are stored using salted encryption. We do not show your plain-text password to you or to any third party;
• The API layer validates the origin of requests to prevent cross-site request forgery, and sensitive actions such as sending verification codes and signing in are subject to rate limits and human verification;
• Internally, data access rights are assigned on a least-privilege basis, and the admin side and the store side use separate account systems;
• We assess the security capabilities of our service providers and require them to keep information confidential.

No system can be absolutely secure. If personal information is leaked, altered or lost, we will notify you and report to the competent authorities as required by law, explaining what happened, the possible impact, the measures we have taken and what we suggest you can do.

To the extent applicable law allows, you have the following rights over your personal information:

Access and copy

You can ask to see the personal information we hold about you and to obtain a copy.

Correction and completion

You can change your nickname, phone number, avatar and delivery addresses yourself in the "Account Center". Your email address is your sign-in identifier; if you need to change it, please contact us.

Deletion

Where the purpose of processing has been achieved, where you withdraw consent, or where our processing breaches the law, you can ask us to delete the relevant information.

Withdraw consent

You can withdraw your consent to analytics at any time through "Cookie settings" in the footer. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Close your account

A self-service account closure option is not currently available. You can email support@lautira.com to request closure. Once we have verified your identity, we will close the account and handle the related data as described in the "How long we keep your information" section. After closure you will no longer be able to sign in; for after-sales issues on completed orders you can still contact us by email.

Complaints and reports

You can complain about the way we process your personal information by writing to support@lautira.com.

To exercise these rights, please email support@lautira.com from your registered email address and describe your request. To protect the security of your account, we may first need to verify your identity (by confirming by reply to your registered email address, for example). We will reply within 15 working days of receiving your request and verifying it; in complex cases this may take up to 30 days, and we will explain the reason for the delay.

We do not charge for reasonable requests. For requests that are clearly repetitive or exceed reasonable limits, we may refuse them, or charge the necessary cost to the extent the law allows.

If you believe that our processing has harmed your lawful rights, then in addition to contacting us you can complain to the supervisory authority where the Operator is based or where you habitually reside.

This site is a shopping site for adult consumers and is not aimed at children. If you are under 18, please use this site with the consent and guidance of a parent or other guardian, and have your guardian register and place orders on your behalf.

We do not actively collect the personal information of children under 14. If we find that we have collected a child's personal information without the guardian's consent, we will delete that data as soon as possible. Guardians who become aware of such a case should contact support@lautira.com.

If our services, the way we process information or legal requirements change, we will update this policy and mark the new effective date and version number at the top of the page.

For material changes, such as changes to processing purposes, types of information or the parties we share with, we will notify you through a notice on this site or by email before the change takes effect, and we will obtain your consent again where necessary. If you do not agree with the updated policy, you can stop using this site and request closure of your account.

Cikian is responsible for interpreting and applying this policy. If you have any question, comment or request about this policy, please contact us:

Operator

Cikian

Contact email

support@lautira.com

Applicable site

https://www.lautira.com

Response time

We reply as soon as possible after receiving your email, usually within 15 working days.