Privacy Policy

Last updated: April 9, 2026

Introduction
This Privacy Policy explains how Lunarafi ("we", "us", or "our") collects, uses, stores, and protects your personal information when you visit lunarafi.com or make a purchase from our store. We are committed to protecting your privacy and handling your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Canadian privacy legislation (PIPEDA) where relevant to our Canadian customers.

Data Controller
Lunarafi is the data controller responsible for your personal information.
Correspondence address: Ten Katestraat 35, 6531 EE Nijmegen, Netherlands
Chamber of Commerce (KvK): 95426477
Email: info@lunarafi.com
Phone: +31 6 87332796
Business hours: Monday–Friday, 9:00 AM – 6:00 PM CET

Section 1 – What Personal Information We Collect
When you purchase from our store, we collect the information needed to process and fulfill your order, including your full name, shipping address, billing address, email address, and phone number. Payment card details are entered directly into our payment processor's secure environment and are never stored on our servers.
When you browse our store, we automatically receive technical information such as your IP address, browser type, operating system, referring website, pages viewed, and the date and time of your visit. This information helps us understand how our store is used and how we can improve it.
If you sign up for marketing communications, we also collect your email address and marketing preferences.

Section 2 – Legal Bases for Processing (GDPR)
Under the GDPR, we process your personal data on the following legal bases:
Performance of a contract: to process your order, arrange delivery, handle returns, and provide customer support.
Legal obligation: to comply with tax, accounting, and consumer protection laws (for example, retaining invoices for seven years under Dutch tax law).
Legitimate interests: to operate and secure our website, prevent fraud, and improve our products and services.
Consent: for marketing emails, non-essential cookies, and any other processing where we specifically ask for your permission.

Section 3 – How We Use Your Information
We use the personal information we collect to process and deliver your orders, communicate with you about your purchase, handle returns and refunds, respond to customer service inquiries, send marketing communications (only with your consent), analyze website traffic and improve our store, detect and prevent fraud, and comply with our legal obligations.

Section 4 – Consent

How do I give consent?
When you provide personal information to complete a transaction, verify your payment method, place an order, arrange delivery, or return a purchase, you consent to our collecting and using that information for that specific purpose only. If we request your personal information for another purpose, such as marketing, we will ask for your explicit consent or provide you with the opportunity to decline.

How can I withdraw my consent?
You may withdraw your consent at any time by contacting us at info@lunarafi.com. You can also unsubscribe from marketing emails directly via the unsubscribe link in any email we send you.

Section 5 – Disclosure and Third-Party Service Providers
We only share your personal information with third parties that help us operate our store and deliver our services to you. These include:
Shopify Inc. — our e-commerce platform provider, which hosts our store and processes order data on secure servers.
Payment processors (such as Shopify Payments, Stripe, PayPal, Apple Pay, and Google Pay) — to securely handle your payment information in accordance with the Payment Card Industry Data Security Standard (PCI-DSS).
Shipping and fulfillment partners — to deliver your order to your address in Canada.
Email service providers — to send order confirmations, shipping updates, and marketing communications (where consented).
Analytics providers such as Google Analytics — to measure website usage and improve performance.
Advertising platforms such as Google Ads and Meta (Facebook/Instagram) — where you have consented to marketing cookies, to show you relevant advertising.
We may also disclose your personal information when legally required to do so, or to protect our rights, property, or safety.

Section 6 – International Data Transfers
Because we ship exclusively to Canada and use service providers headquartered in the United States and Canada (such as Shopify and Google), your personal information may be transferred outside the European Economic Area (EEA). When such transfers occur, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and adequacy decisions (such as the EU–U.S. Data Privacy Framework), to ensure your data receives a level of protection equivalent to that guaranteed within the EEA.

Section 7 – Data Retention
We retain your personal information only as long as necessary for the purposes for which it was collected:
Order and invoice data: seven years, as required by Dutch tax law.
Customer account data: for as long as your account remains active, plus a reasonable period thereafter.
Marketing data: until you withdraw your consent or unsubscribe.
Website analytics data: up to 26 months.
After these periods, your data is either deleted or anonymized.

Section 8 – Cookies
We use cookies and similar technologies to operate our website, remember your preferences, analyze usage, and, with your consent, deliver personalized advertising. You can manage your cookie preferences at any time via our cookie banner or your browser settings. Disabling certain cookies may affect your experience on our website.

Section 9 – Security
We take reasonable technical and organizational precautions to protect your personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. All transactions on our website are encrypted using SSL/TLS, and payment data is handled exclusively by PCI-DSS compliant providers. While no method of transmission over the Internet is 100% secure, we follow industry best practices to safeguard your data.

Section 10 – Your Rights Under GDPR
As a customer, you have the following rights regarding your personal data:
Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may request that we correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): you may request that we delete your personal data, subject to legal retention obligations.
Right to restriction of processing: you may request that we limit how we process your data.
Right to data portability: you may request your data in a structured, commonly used, machine-readable format.
Right to object: you may object to the processing of your data for direct marketing or based on our legitimate interests.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at info@lunarafi.com. We will respond within 30 days of receiving your request.

Section 11 – Right to Lodge a Complaint
If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl. Canadian customers may also contact the Office of the Privacy Commissioner of Canada via priv.gc.ca. We kindly ask that you contact us first so we can try to resolve any concern directly.

Section 12 – Children's Privacy
Our store is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at info@lunarafi.com and we will delete it promptly.

Section 13 – Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or legal requirements. Updates take effect immediately upon posting on this page, and the "Last updated" date at the top will be revised accordingly. If Lunarafi is acquired or merged with another company, your information may be transferred to the new entity as part of that transaction.

Contact
For any privacy-related questions or to exercise your rights, please contact us:
Email: info@lunarafi.com
Phone: +31 6 87332796
Correspondence address: Ten Katestraat 35, 6531 EE Nijmegen, Netherlands
Chamber of Commerce (KvK): 95426477
Business hours: Monday–Friday, 9:00 AM – 6:00 PM CET