Privacy policy
Last updated: June 13, 2026
At Lunalo, we take the privacy of our customers and users seriously. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, place an order, contact us or use any of our services.
By using our online store, we inform you that your personal data may be processed in accordance with this Privacy Policy and the applicable data protection regulations.
1. Data controller
The data controller of your personal data is:
Trade name: Lunalo
Website: www.lunalo.store
Contact email: lunalo-@hotmail.com
For data protection purposes, Lunalo acts as the data controller of the personal data it collects to manage orders, customer service, communications, incidents and the operation of the store.
2. Personal data we collect
We may collect the following personal data when you interact with our store:
Full name.
Billing address.
Shipping address.
Email address.
Phone number.
Order information.
Products purchased, added to cart or viewed.
Purchase, return or incident history.
Communications you send us by email, forms or other contact channels.
IP address.
Device, browser and website activity information.
Data necessary to process payments, orders and shipments.
Lunalo does not directly store your full bank card details. Payments are managed through secure payment platforms and payment gateways integrated with Shopify or other authorised payment providers.
3. Purposes of processing
We use your personal data for the following purposes:
Order management
We process your data to process purchases, confirm orders, prepare shipments, manage deliveries, resolve incidents, process returns and answer any questions related to your purchase.
Customer service
We use your data to respond to messages, requests, complaints, product questions, shipping enquiries or any communication you send us.
Payments and billing
We process the data necessary to manage payment, confirm the transaction, issue purchase confirmations and comply with tax, accounting or legal obligations where applicable.
Shipping and logistics
We share the necessary data with transport companies, logistics providers, order management platforms or fulfilment providers in order to deliver the product to the address indicated.
Marketing and commercial communications
If you give us your consent or there is another valid legal basis, we may send you commercial communications, offers, news, discounts or information related to Lunalo.
You can unsubscribe from these communications at any time by using the unsubscribe link included in our emails or by writing to us at lunalo-@hotmail.com.
Security and fraud prevention
We may use certain data to detect suspicious operations, prevent fraud, protect the security of the store and ensure proper use of our services.
Improving user experience
We may analyse the use of our website to improve its design, operation, navigation, products, campaigns and shopping experience.
4. Legal basis for processing your data
We process your personal data based on the following legal bases:
Performance of a contract: to manage your purchase, process payment, prepare the order, carry out the shipment and handle incidents related to your order.
Compliance with legal obligations: to comply with tax, accounting, legal or consumer obligations.
Consent: to send you commercial communications, newsletters or promotions when you have voluntarily subscribed or agreed to receive them.
Legitimate interest: to improve our services, prevent fraud, resolve incidents, protect our store and answer enquiries related to our products or services.
5. Data recipients
We may share your personal data with third parties when necessary to provide our services, comply with legal obligations or correctly manage your order.
These third parties may include:
Shopify, as the technological platform of the store.
Payment gateways.
Transport and logistics companies.
Fulfilment providers.
Email marketing providers, if you agree to receive communications.
Web analytics tools.
Technical services, hosting, maintenance or security providers.
Tax, accounting or legal advisors, if necessary.
Public administrations, authorities or courts when there is a legal obligation.
We will only share the data necessary for each purpose.
6. Relationship with Shopify
Our online store operates using Shopify technology, which allows us to sell products, manage orders, process payments and operate our website.
Shopify may process personal data necessary to provide its technological services, improve the platform, protect transactions and support the operation of the store.
The use of Shopify means that certain data may be processed by Shopify and other technology providers related to the platform, in accordance with their own policies and data processing agreements.
7. International data transfers
Some technology providers, such as Shopify, payment gateways, analytics tools, email marketing services or logistics providers, may process data outside the European Economic Area.
Where international data transfers are necessary, recognised mechanisms under applicable regulations will be used, such as adequacy decisions, standard contractual clauses or other valid legal safeguards.
8. Data retention period
We will keep your personal data only for as long as necessary to fulfil the purpose for which it was collected.
In general:
Data related to orders will be kept for as long as necessary to manage the purchase, shipment, return, warranty or incident.
Tax and accounting data will be kept for the periods required by applicable regulations.
Data used for commercial communications will be kept until you withdraw your consent or unsubscribe.
Data related to enquiries or complaints will be kept for as long as necessary to handle them and defend against possible legal liabilities.
Technical or browsing data will be kept as indicated in the Cookie Policy.
9. User rights
You may exercise your data protection rights at any time. Applicable regulations may recognise rights such as access, rectification, erasure, objection, restriction of processing, portability and the right not to be subject to automated decisions where applicable.
Specifically, you may request to:
Access your personal data.
Correct inaccurate or incomplete data.
Delete your data when it is no longer necessary.
Object to the processing of your data.
Restrict processing in certain cases.
Request portability of your data.
Withdraw your consent for commercial communications.
Not be subject to automated decisions with legal or similarly significant effects where applicable.
To exercise your rights, you can write to us at:
In some cases, we may ask you for additional information to verify your identity before processing your request.
10. Right to withdraw consent
When we process your data based on your consent, you may withdraw it at any time.
Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
For example, you can unsubscribe from our commercial communications at any time using the link included in our emails or by writing to us at lunalo-@hotmail.com.
11. Complaints to the supervisory authority
If you believe that we have not processed your personal data correctly, you can contact us first so that we can try to resolve the situation.
You also have the right to lodge a complaint with the Spanish Data Protection Agency, which is the supervisory authority in Spain for data protection matters.
You can find more information on the official website of the Spanish Data Protection Agency.
12. Data security
We apply reasonable technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
However, no internet transmission or data storage system is completely secure, so we cannot guarantee absolute security.
We recommend that you do not send us especially sensitive or confidential information through unsecured channels.
13. Cookies and similar technologies
Our website may use cookies and similar technologies to improve browsing, analyse store usage, remember preferences, personalise content and, where applicable, show personalised advertising.
The use of cookies is regulated in our Cookie Policy, where you can find more information about which cookies we use, what they are used for and how you can configure or reject them.
14. Commercial communications
We will only send you commercial communications when there is a valid legal basis to do so, especially if you have given your consent by subscribing to our newsletter, accepting promotional communications or registering to receive offers.
You can unsubscribe at any time.
Even if you unsubscribe from promotional communications, we may continue to send you messages necessary for orders, payments, shipments, returns, incidents or important information about your purchase.
15. Children’s data
Our store is not directed at minors.
We do not knowingly collect personal data from minors. If a parent, guardian or legal representative believes that a minor has provided us with personal data without authorisation, they may contact us at lunalo-@hotmail.com to request its deletion.
16. Third-party links
Our website may include links to third-party pages, platforms or services.
Lunalo is not responsible for the privacy policies, content, security or practices of those third parties.
We recommend reviewing the privacy policies of any external site before providing personal data.
17. Automated decisions
We do not make automated decisions that produce legal effects on the user or similarly significantly affect them.
We may use automated tools to prevent fraud, analyse browsing, improve the shopping experience or personalise certain content, always within the limits permitted by applicable regulations.
18. Changes to this Privacy Policy
We may update this Privacy Policy when necessary to reflect legal, technical, operational or commercial changes.
The current version will always be the one published on this page, indicating the date of the latest update.
We recommend reviewing this policy periodically.
19. Contact
For any questions about this Privacy Policy, the processing of your personal data or the exercise of your rights, you can contact us at:
We will try to respond within 24 to 48 business hours.