Privacy Policy

Lunavelle — ASTRONARA TRADING FZCO

About This Policy

Lunavelle is committed to protecting our customer's privacy. Please take the time to review this Privacy Policy which explains what information we collect about you, how we use it, and your rights.

This Policy provides important information and you should not use any services on https://trylunavelle.com/ (the "Website") without reading this Policy.
ASTRONARA TRADING FZCO, trading as Lunavelle, ("Lunavelle", "we" or "us") is the data controller and processor of the personal data collected via or in connection with the Website.
This Policy is prepared in accordance with Regulation EU 2016/679 (General Data Protection Regulation – GDPR) and the California Consumer Privacy Act (CCPA) of 2018.

What Information We Collect About You and Why

Why do you collect information?	Which information is collected?	Legal basis	Retention period
2.1. For processing your purchase requests	First name, last name, delivery address, telephone number, email address, purchase price and currency	Contract execution (Art. 6(1)(b) GDPR)	1 year after purchase
2.2. To process payments	First name, last name, delivery address, telephone number, email address, purchase price, currency, credit card brand, type, BIN number, and issuer country	Contract execution (Art. 6(1)(b) GDPR)	Duration of subscription + 1 month after termination
2.3. To process recurring purchase requests	Unique data "token" identification number	Consent (Art. 6(1)(a) GDPR)	1 year after purchase
2.4. To provide personalized offers and marketing	IP address, email address, telephone number	Consent (Art. 6(1)(a) GDPR)	1 month after Website visit
2.5. To ensure Website security	IP address, device ID, browser type, hardware/software settings, pages visited, actions on Site, dates/times of visits, physical location (mobile)	Legitimate interest (Art. 6(1)(f) GDPR)	1 month after Website visit
2.6. To manage social media accounts	Name, email, gender, country, picture, messages, comments, post reactions	Consent (Art. 6(1)(a) GDPR)	2 years
2.7. To manage customer reviews and feedback	Name, email, profile image, message content and date	Consent (Art. 6(1)(a) GDPR)	2 years after receiving feedback
2.8. To handle queries, requests and complaints	First name, last name, email, country, telephone, inquiry subject, date, content, attachments, reply	Consent (Art. 6(1)(a) GDPR) + Legitimate interest (Art. 6(1)(f) GDPR)	2 years from last inquiry
2.9. To contact you about unfinished or failed orders	First name, last name, email, telephone, abandoned cart contents	Contract execution (Art. 6(1)(b) GDPR) + Legitimate interest (Art. 6(1)(f) GDPR)	1 month after unsuccessful purchase
2.10. To protect rights and interests in legal proceedings	Information from 2.1, documents, procedural documents, court rulings	Legitimate interest (Art. 6(1)(f) GDPR)	10 years following account termination or legal proceedings

What Do We Do With Your Personal Data

We use your information for the purposes specified above. These are the main categories of actions we take with your personal information:

We use your information to process your purchase request and deliver your purchases to you.
We use your information to send you marketing and promotional materials.
We use your information to contact you from time to time to inform you about discounts, special deals, or offers, or to provide general information about our products and service.
We transfer your personal information to third parties that are our service providers or business partners, when that is needed for fulfilling your orders, or when that is necessary for protecting our rights.
We may use your payment information "token" and transfer it to our partner companies if you ask us to save your payment information for future purchases.

Sharing Your Personal Information

We share your personal information with the following subjects:

Financial institutions that handle payment processing and banks;
attorneys, attorney's assistants, notaries, bailiffs, auditors, consultants, IT service providers, electronic communications service providers, insurance companies, archiving services, and other subjects that provide services to us;
courts, law enforcement, and other state institutions, when we are required by law;
third party partners to verify your identity;
our marketing partners to deliver personalized marketing content;
our shipping services partners to deliver your purchases;
our Website online store management system service provider;
our group companies if you decide to make a purchase with them and we have received your permission;
Analytical tools service providers (such as Google Analytics).

Information Security

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL). Although no method of transmission over the Internet is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
If you choose to pay using Klarna or PayPal express checkout, you will provide certain personal data directly to Klarna or PayPal through their own checkout interface. We do not collect or have access to your full payment credentials. Klarna or PayPal acts as an independent data controller for the personal data you provide to them.

Selling/Buying Personal Information (CCPA)

If you are a resident of the United States, we may "sell" (as defined in CCPA) or purchase the following categories of personal information:

Identifiers data;
Characteristics of protected classifications under California and federal law;
Internet/electronic activity;
Commercial information;
Inferences drawn from the categories described above to create a profile about you to reflect your preferences, characteristics, behavior, and attitudes.

California Residents' Rights Under the CCPA

If you are a California resident, you have the following rights. Please contact us at [email protected] to exercise any of them.

Right to Opt-Out from the Sale of Information

You have the right to request that we not sell your personal data. Your opt-out request will be effective for 12 months. We will comply within 15 business days of receiving your request.

Right to Know

You have the right to request disclosure of what personal information we have collected, used, shared, or sold about you during the last 12 months. We will respond within 45 calendar days (extendable by another 45 days if necessary).

Right to Delete

You may request that we delete your personal information. We will respond within 45 calendar days. Note that many exceptions allow us to keep your personal information.

Right to Not Be Discriminated Against

We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices, or provide a lower quality of goods and services for exercising your rights.

European Union Residents' Rights (GDPR)

When allowed by law, you can:

Submit a request for confirmation that we are processing data related to you, and request access to that data;
Submit a request to correct inaccurate or incomplete information;
Submit a request to delete the information we have about you if we use it illegally;
Submit a request to restrict the processing of your information;
Object to collection, use and storage of your information;
Submit a request to transfer (receive) the data you provided to us (data portability);
Withdraw any consents given to us;
Lodge a complaint with a supervisory authority and seek a judicial remedy.

Age of Consent

By using this site, you represent that you are at least the age of majority in your state or province of residence.
We do not process any personal data of minors that are 16 years old or younger. If you are a minor, we request that you stop using the Website immediately. We have a right to delete your personal data without separate notification if we have reason to believe that you are younger than 16 years old.

Cookies

Our website uses cookies as described in the table below:

Cookie Name	Purpose	Expiry
Stored Cookies
`_fbp`	Advertisement cookie. Set by Facebook to display advertisements when on Facebook or on a platform powered by Facebook advertising.	3 months
`fr`	Advertisement cookie. Facebook sets this cookie to show relevant advertisements by tracking user behaviour across the web.	3 months
`_vwo_uuid_v2`	Analytical cookie. Set by Visual Website Optimiser to calculate unique traffic on a website.	1 year
`_vis_opt_s`	Analytical cookie. Visual Website Optimiser sets this to track sessions (number of times the browser was closed and reopened).	3 months 8 days
`_ga`	Analytical cookie. Installed by Google Analytics to calculate visitor, session and campaign data. Stores information anonymously and assigns a randomly generated number to recognize unique visitors.	2 years
`omnisendAnonymousID`	Analytical cookie. Set by Omnisend for storing user actions on the website with a unique ID. Encrypts visitor data for security.	1 year
`_hjSessionUser_`	Statistics cookie. Hotjar cookie set when a user first lands on a page. Used to persist the Hotjar User ID to attribute behavior in subsequent visits to the same user ID.	1 year
`_vwo_uuid`	Performance cookie. Visual Website Optimizer sets this to generate a unique ID for every visitor for its report segmentation feature.	10 years
Session Cookies
`soundestID`	Analytical cookie. Set by Omnisend to determine if a visitor is new or has visited before.	Session
`omnisendSessionID`	Analytical cookie. Set by Omnisend to set a unique ID for the session. Collects information on visitor behaviour for statistical purposes.	30 minutes
`_hjFirstSeen`	Analytical cookie. Hotjar sets this to identify a new user's first session.	30 minutes
`_hjIncludedInSessionSample`	Analytical cookie. Hotjar sets this to know whether a user is included in the data sampling defined by the site's daily session limit.	2 minutes
`_hjIncludedInPageviewSample`	Analytical cookie. Hotjar sets this to know whether a user is included in the data sampling defined by the site's pageview limit.	2 minutes
`_hjAbsoluteSessionInProgress`	Analytical cookie. Hotjar sets this to detect the first pageview session of a user.	30 minutes
`_gat_UA`	Analytical cookie. A variation of the _gat cookie set by Google Analytics and Google Tag Manager to allow website owners to track visitor behaviour and measure site performance.	1 minute
`_vis_opt_test_cookie`	Functional cookie. Visual Website Optimiser sets this to detect if cookies are enabled on the browser.	Session
`_hjSession_`	Statistics cookie. Hotjar cookie set when a user first lands on a page with the Hotjar script. Used to persist the Hotjar User ID.	30 minutes
`soundest-views`	Functional cookie. Omnisend cookies designed to enable the site to provide services and ensure their proper functioning.	Session
`_vwo_sn`	Performance cookie. Stores session-level information.	30 minutes

Cookies are small text files stored by your browser on your device when you browse websites. They are widely used to make websites work or work in a better, more efficient way.
You can configure your browser to decline some or all cookies or to ask for your permission before accepting them. Please note that by deleting cookies or disabling future cookies you may be unable to access certain areas or features of our website.
For information on how to adjust or change your browser settings, visit www.aboutcookies.org or www.allaboutcookies.org.