Privacy Policy

We respect your privacy and process personal data only where we have a lawful basis to do so. This policy applies to this website and to orders placed through it. If you have any questions about it, contact us at luna.express@gmail.com.

The operator of this website is the data controller. You can reach us at luna.express@gmail.com.

• Name
• Billing and shipping address
• Email address
• Telephone number, where you provide one
• Order information, including products, options and any photo you upload for personalisation
• Payment-related information, as described in section 6
• IP address
• Device and browser information
• Website usage information
• Information collected through cookies and similar technologies, as described in section 11

• Processing, producing and delivering your orders
• Customer support and communication about your order
• Processing returns, withdrawals and refunds
• Fraud prevention and security
• Operating and maintaining this website
• Meeting legal, tax and accounting obligations
• Marketing, where legally permitted and with your consent where consent is required
• Improving the website and the customer experience

• Performance of a contract — to process, produce and deliver your order and handle returns.
• Legal obligation — to keep accounting records and comply with consumer and tax law.
• Legitimate interests — to secure the website, prevent fraud and improve our service, where this does not override your rights.
• Consent — for non-essential cookies and for marketing messages where consent is required. You may withdraw consent at any time.

Payment card details may be processed directly by third-party payment processors. We do not necessarily receive or store complete payment card details; where a payment processor is used, it acts under its own privacy terms and security standards. We retain the payment-related order information we need for accounting and refund purposes.

We share personal data only where necessary, and only with categories of recipients such as:

• Payment processors
• Shipping and logistics providers
• Suppliers and fulfilment partners
• E-commerce and platform providers
• Website hosting providers
• Analytics providers, where analytics are in use
• Customer support providers
• Public authorities, where we are legally required to do so

We do not sell your personal data.

Some service providers may process personal data outside the European Economic Area. Where this happens, we rely on appropriate safeguards required by GDPR, such as an adequacy decision of the European Commission or the Standard Contractual Clauses, together with any additional measures that may be necessary.

We keep personal data only for as long as necessary for the purposes described in this policy, and for as long as required by legal, tax and accounting obligations. Photos uploaded for personalisation are used to produce your order and are removed from production systems once they are no longer needed for that purpose or for handling a possible complaint.

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time, without affecting processing already carried out
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at luna.express@gmail.com. In Latvia, the competent supervisory authority is the Data State Inspectorate (Datu valsts inspekcija); its current contact details are published on its official website.

This website may use the following categories of cookies and similar technologies:

• Essential cookies and local storage — needed for the site to function, for example to keep your cart and personalisation choices.
• Functional cookies — remember preferences you set.
• Analytics cookies — help us understand how the site is used.
• Advertising and marketing cookies — used to measure or personalise advertising.

Non-essential cookies are only set where the applicable EU privacy and ePrivacy rules allow it, and where consent is required they are not active until you give that consent. You can also clear cookies and local storage at any time in your browser settings; clearing them empties your cart.

Where we send marketing messages, we do so in line with applicable law and, where required, only with your consent. You can unsubscribe at any time using the link in the message or by writing to luna.express@gmail.com. Unsubscribing does not affect service messages about an order you have placed.

This store is not directed at children. We do not knowingly collect personal data from children, and where such data is processed it is handled in accordance with applicable law. If you believe a child has provided us with personal data, contact luna.express@gmail.com and we will take appropriate action.

We may update this Privacy Policy from time to time, for example when our processing or our service providers change. The latest version is always published on this page, with the date of the most recent update shown at the top.

Please contact us by email at luna.express@gmail.com for any privacy-related questions or requests.