Privacy Policy
Last updated: May 12, 2026
This Privacy Policy explains what personal data Lunova.fashion (“we”, “us”) collects when you visit our site or place an order, why we collect it, how we use it and the rights you have over it. We are committed to processing your data lawfully, fairly and transparently in accordance with the EU GDPR, the UK GDPR and the California Consumer Privacy Act (CCPA/CPRA).
1. Data Controller
The data controller is Lunova.fashion. For any privacy enquiry contact info@lunova.fashion.
2. What We Collect
- Order data: name, shipping & billing address, email, phone, the items you bought.
- Payment data: card details are entered directly into Stripe — we never see or store your full card number.
- Account data: email and hashed password if you create an account.
- Technical data: IP address, device, browser, pages viewed, referring URL — used for security, fraud prevention and aggregated analytics.
- Marketing data: only if you explicitly opt in to our newsletter.
3. How We Use Your Data
- To process and ship your order (legal basis: contract).
- To handle returns, refunds and customer support (contract / legitimate interest).
- To prevent fraud, abuse and chargebacks (legitimate interest).
- To comply with tax, accounting and consumer-protection laws (legal obligation).
- To send marketing emails — only with your consent, which you can withdraw at any time.
4. Sharing With Third Parties
We share the minimum data necessary with vetted processors acting on our behalf: Stripe (payments), shipping carriers (USPS, UPS, DHL), our cloud hosting and email provider, and Google/Meta only if you have accepted analytics cookies. We never sell your personal data.
We may disclose data when legally required (court order, tax authority, anti-fraud cooperation).
5. International Transfers
Some processors are based outside your country (e.g. in the USA). Where required, transfers are protected by the EU Standard Contractual Clauses or equivalent safeguards.
6. Retention
Order records are retained for the period required by tax law (typically 7–10 years). Account data is kept until you request deletion. Marketing data is kept until you unsubscribe.
7. Your Rights
You have the right to access, rectify, erase, restrict or port your data, to object to processing and to withdraw consent at any time. To exercise any of these rights email info@lunova.fashion. You also have the right to lodge a complaint with your local data-protection authority.
8. Cookies
We use cookies as described in our Cookie Policy.
9. Security
We implement industry-standard technical and organisational measures (HTTPS/TLS, encrypted backups, access controls). However, no internet transmission is 100% secure and we cannot guarantee absolute security.
10. Changes
We may update this Policy from time to time. Material changes will be notified on this page; the “Last updated” date reflects the current version.