Luné Studio

Privacy Notice

Last updated: 29 May 2026

Luné Studio Ltd ("Luné", "we", "us") is the data controller of personal data collected through lunestudio.life. We are registered in England & Wales (Company No. 14820391) and registered with the ICO. This notice explains how we handle your data under the UK GDPR and Data Protection Act 2018.

1. Data we collect

  • Identity & contact: name, email, billing/shipping address, phone.
  • Order & payment: items purchased, order value, payment confirmation (cards processed by Stripe — we never see full card numbers).
  • Account: password (hashed), preferences, marketing consent.
  • Technical: IP address, device, browser, pages viewed, cookies (see Cookie Policy).
  • Communications: messages you send us via email or contact form.

2. How we use your data & lawful basis

  • Fulfil your order (contract): processing payments, shipping, returns, customer support.
  • Account & security (contract / legitimate interests): managing your account, preventing fraud.
  • Marketing emails (consent): only if you opt in. Unsubscribe any time.
  • Analytics & site improvement (consent via cookie banner).
  • Legal compliance: tax, accounting, responding to lawful requests.

3. Sharing

We share data only with processors who help us run the business: Stripe (payments), Shopify (e-commerce), our shipping carriers, email provider, and hosting/analytics vendors. All are bound by contracts requiring UK GDPR-compliant safeguards. Where data leaves the UK we rely on adequacy decisions or the UK International Data Transfer Addendum.

4. Retention

Order records: 6 years (HMRC). Account data: while your account is active, then deleted within 12 months of closure. Marketing data: until you withdraw consent. Analytics: up to 26 months.

5. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing, and to data portability. Where we rely on consent you may withdraw it at any time. Email privacy@lunestudio.life. You may also complain to the ICO at ico.org.uk.

6. Security

We use TLS encryption, hashed passwords, access controls and reputable processors. No system is 100% secure; we will notify you and the ICO of any qualifying breach within 72 hours.

7. Contact

Luné Studio Ltd, London, United Kingdom. privacy@lunestudio.life.