Privacy Policy

1. Introduction

This Privacy Policy describes in detail how Lune London. (“Lune London”, “we”, “us”, or “our”) collects, processes, stores, and protects your personal information when you use our website, https://lune-london.co.uk, make a purchase through our platform, subscribe to our newsletters, or otherwise engage with our services (the “Services”).

At Lune London, safeguarding your privacy is of paramount importance. We are fully committed to handling your personal data in a lawful, fair, and transparent manner, in accordance with applicable laws including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where relevant, the General Data Protection Regulation (EU GDPR).

By accessing our Site or Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any aspect of this Privacy Policy, you must immediately discontinue the use of our Site and Services.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• “Personal Data” refers to any information relating to an identified or identifiable natural person, such as name, address, email address, payment details, or IP address.

• “Processing” means any operation performed upon Personal Data, whether automated or not, including collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.

• “Controller” refers to Lune London Ltd., which determines the purposes and means of processing your Personal Data.

• “Cookies” are small text files stored on your device when you visit our website, enabling us to recognise your browser, store preferences, and track your activities.

• “Third Parties” means external companies and service providers that process information on our behalf, such as payment processors, logistics providers, IT service providers, or marketing partners.

• “Supplier” refers to our contracted manufacturers and logistics partners responsible for production, warehousing, and dispatch of goods purchased through our platform.

3. Information We Collect

We may collect and process different categories of information depending on how you interact with our Site and Services. This includes:

1. Information provided directly by you, such as your full name, billing and shipping addresses, telephone number, email address, and payment details. This may also include account registration data (username and password), as well as any information you provide voluntarily when contacting our customer support.

2. Information collected automatically when you interact with our Site, including your IP address, browser type, device information, geolocation derived from your IP, session duration, pages viewed, and interactions with content. This data is collected through the use of Cookies, pixels, and tracking technologies.

3. Information obtained from third parties, such as fraud detection providers, payment processors, or marketing platforms. In some instances, we may also collect publicly available information from your social media profiles, should you engage with our brand through external platforms.

This data is necessary to provide our Services, to process your orders, to ensure compliance with legal obligations, and to protect both our legitimate interests and your rights as a consumer.

4. Purpose and Legal Basis for Processing

We process your Personal Data for multiple purposes, each supported by a specific lawful basis under applicable legislation:

• Contractual necessity: We process your information to fulfil our contractual obligations when you place an order, including payment processing, order fulfilment, shipment, and customer support.

• Legitimate interests: We may process data to prevent fraud, enhance the security of our platform, improve our services, and communicate with you in a personalised manner.

• Consent: Where required by law, for example for email newsletters, SMS marketing, or targeted advertising, we rely on your explicit consent. You may withdraw this consent at any time.

• Legal obligations: We retain and process data as required under UK and EU tax law, consumer protection law, and other statutory frameworks.

5. Data Sharing and Disclosure

Your Personal Data may be shared in the following circumstances:

• With service providers: We use trusted partners such as Shopify for e-commerce operations, Stripe and PayPal for secure payment processing, and DHL or FedEx for logistics. These providers act as processors under strict contractual obligations to protect your information.

• With suppliers: In certain cases, orders may be shipped directly from our Suppliers’ warehouses. In such cases, relevant information (e.g., name, delivery address, and order details) will be shared with the Supplier for fulfilment purposes.

• With affiliates: We may share data within our group companies to streamline operations and provide you with consistent services.

• For legal reasons: Personal Data may be disclosed where required by law, court order, or competent authority, or where disclosure is necessary to protect our rights, enforce our policies, or prevent fraudulent activity.

• In business transfers: Should Lune London Ltd. undergo a merger, acquisition, reorganisation, or sale of assets, your information may be transferred to the successor entity under the same safeguards as outlined in this Policy.

We do not sell or rent your Personal Data to third parties under any circumstances.

6. Cookies and Tracking Technologies

Our Site uses Cookies and similar technologies to enhance functionality and personalise your experience. Cookies may be “session Cookies” (which expire once you close your browser) or “persistent Cookies” (which remain on your device until deleted).

Cookies are used to:

• Maintain your shopping cart and checkout process.

• Analyse visitor behaviour and improve website performance.

• Deliver targeted advertising and promotional messages.

• Track abandoned carts for remarketing campaigns (email or SMS).

You may adjust your browser settings to refuse Cookies; however, doing so may impair functionality and prevent you from accessing certain features of our Site.

7. International Transfers

Your information may be transferred to, and processed in, countries outside of the UK, including where our Suppliers or service providers are located. Some of these jurisdictions may not provide the same level of protection for personal data as the UK or EU.

Where data is transferred outside the UK or EEA, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions by the UK Government.

By using our Services, you consent to the transfer of your information to international destinations under these safeguards.

8. Data Retention

We retain your Personal Data only for as long as necessary to fulfil the purposes outlined in this Policy, including:

• Transaction data (e.g., orders, invoices, and payment records) is retained for six years in compliance with UK tax law.

• Customer support correspondence may be retained for up to two years.

• Marketing data is retained until you withdraw your consent or unsubscribe.

After expiry of the retention period, data is securely deleted or anonymised.

9. Your Rights

As a resident of the United Kingdom or European Union, you are entitled to the following rights under the UK GDPR/EU GDPR:

• Right of Access: Obtain confirmation as to whether we process your Personal Data and, if so, request a copy.

• Right of Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure (“Right to be Forgotten”): Request deletion of your Personal Data, subject to statutory retention obligations.

• Right to Restrict Processing: Request limitation of processing under certain circumstances.

• Right to Data Portability: Receive your data in a machine-readable format and transmit it to another controller.

• Right to Object: Object to processing carried out on the basis of legitimate interests, including profiling and marketing communications.

• Right to Withdraw Consent: Withdraw previously granted consent at any time.

Requests can be made via info@lune-london.com. We aim to respond to all valid requests within 30 days.

10. Security of Processing

We implement appropriate technical and organisational measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. This includes, but is not limited to: encryption of sensitive information during transmission (SSL/TLS), firewalls, intrusion detection systems, restricted data access protocols, multi-factor authentication for personnel accounts, and continuous monitoring of network activities.

Although we strive to use industry-standard safeguards, no method of transmission over the Internet, or method of electronic storage, is 100% secure. As such, we cannot guarantee absolute security of your Personal Data. By using our Services, you acknowledge that the transmission of data via the Internet carries inherent risks beyond our reasonable control, and you agree that we shall not be liable for breaches that result from circumstances beyond our technical and organisational measures.

11. Children’s Privacy

Our Services are not designed for, and we do not knowingly collect, Personal Data from individuals under the age of 13 (or the minimum age of consent under local law). If you are under the required age, you may not register an account, place an order, or otherwise use our Services without the verifiable consent of a parent or guardian.

If we become aware that we have collected Personal Data from a child without parental consent, we will take immediate steps to delete such information from our systems. Parents or guardians who believe their child may have provided information to us may contact us at info@lune-london.co.uk to request deletion.

12. International Users

Our platform is accessible globally; however, please be advised that Personal Data may be processed outside of your country of residence, including in jurisdictions where data protection laws may differ from those in the UK or EU.

By providing Personal Data to us, you consent to the transfer, storage, and processing of such information in countries outside your jurisdiction. We will, at all times, ensure that adequate safeguards (such as Standard Contractual Clauses or adequacy decisions) are in place when transferring Personal Data internationally.

If you are an EU or UK resident, your information is subject to GDPR protections, even where transferred outside the European Economic Area or the United Kingdom.

13. Advertising, Marketing & Profiling

We may use your Personal Data for direct marketing purposes, which includes the sending of promotional emails, SMS messages, targeted advertising campaigns, and retargeting across social media platforms.

We may also use profiling techniques to analyse your purchasing behaviour, browsing patterns, and interaction with our marketing materials, with the objective of providing more relevant content and offers. These activities are carried out under the lawful basis of our legitimate interests and, where required, based on your explicit consent.

You have the right to object at any time to the processing of your Personal Data for direct marketing purposes, including profiling. If you object, we will cease processing your information for such purposes without delay.

14. Data Retention Policy

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal, regulatory, and accounting requirements. Specifically:

• Transactional data (e.g. orders, invoices, tax records) is retained for a minimum of six years in accordance with UK tax regulations.

• Customer service correspondence may be stored for up to two years to resolve disputes and maintain service history.

• Marketing data (e.g. mailing lists) will be retained until you withdraw consent or opt out of communications.

When data is no longer required, it will either be securely deleted, anonymised, or archived in compliance with statutory obligations.

15. Third-Party Services and Links

Our website may contain links to external websites or services operated by third parties. We are not responsible for the privacy practices, data protection policies, or content of such external sites. You are strongly encouraged to review the privacy policies of those third parties before engaging with their services.

Furthermore, we may integrate third-party applications (such as payment gateways, analytics providers, or shipping partners) into our Services. These third parties may collect and process your data independently and are subject to their own terms and privacy policies.

16. Your Rights Under Applicable Law

Depending on your jurisdiction, you may have additional statutory rights under applicable data protection law. These may include:

• The right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority if you believe we are unlawfully processing your information.

• The right to data portability, which entitles you to receive your data in a commonly used, machine-readable format and to transmit it to another controller.

• The right to restrict processing, whereby you can request that we limit the use of your data under specific circumstances.

To exercise these rights, please contact our Data Protection Officer at info@lune-london.co.uk.  We reserve the right to request verification of identity before processing any data subject request.

17. Changes to This Privacy Policy

We may amend or update this Privacy Policy periodically to reflect changes in legislation, business practices, or technological advancements. Updated versions will be published on our website, with the “Last Updated” date revised accordingly.

In cases of significant changes affecting your rights, we will notify you directly via email (where possible) or by placing a prominent notice on our website before the changes take effect. Continued use of our Services after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

18. Governing Law and Jurisdiction

This Privacy Policy shall be governed by, and construed in accordance with, the laws of England and Wales, without regard to conflict of law principles.

Any disputes arising from or in connection with this Privacy Policy shall fall under the exclusive jurisdiction of the competent courts of London, United Kingdom.

Nothing in this section shall limit your statutory rights under applicable consumer protection or data protection laws.

19. Contact Information

Email: info@lune-london.co.uk

Number: +31 6 26 21 57 39

Adress: Van Huutstraat 3F, 7311 AG Apeldoorn, Gelderland, The Netherlands

Customer sevice: info@lune-london.co.uk 

Chamber of Commerce Number: 98014323

Company Name: Thewayout

VAT Number: NL868324929B01

Contact form: Contact

Customer Service Hours: Monday – Friday, 9:00 AM – 5:00 PM (UK time)
Response Time: within 24 hours on business days