Privacy Policy
Last updated 22 August 2026.
This policy explains what we do with your information when you visit lunaby.store or buy from us. We are a small operation, and we collect as little as we can get away with.
1. What we collect
When you buy something: your name, email address, shipping address, phone number if you give one, and the details of your order.
Payment: your card details go straight to our payment provider. They are never sent to us and we never store them. We only see the last four digits and the card brand, so we can identify a transaction if you ask us about it.
When you just browse: your IP address, the pages you look at, your device and browser, and where you arrived from. This comes from cookies and similar technology.
When you contact us: whatever you put in the email.
2. Why we use it
To take payment, ship your order, send you tracking, answer your emails, handle returns, keep the shop running and secure, meet our tax and accounting obligations, and understand which pages and ads actually work.
We only send marketing email if you asked for it. Every one of those emails has an unsubscribe link that works.
3. Who else sees it
Only the companies we need to run the shop, and only the part they need:
- Shopify hosts the store and processes orders.
- Our payment provider handles the transaction.
- Our maker and shipping carriers receive your name and delivery address so your parcel can be made up and delivered. Some of them are outside the United States.
- Our email and reviews tools receive your email address if you subscribe or if we invite you to review a purchase.
- Analytics and advertising platforms receive usage data through cookies.
We do not sell your personal information, and we never have.
4. Cookies
Some cookies are strictly necessary: they keep your cart and your session working. Others measure traffic or attribute an ad. You can block or delete cookies in your browser settings, though the cart will stop working properly if you block the necessary ones.
5. How long we keep it
Order records are kept for as long as tax and accounting law requires, which is generally seven years. Marketing contacts are kept until you unsubscribe. Analytics data is kept in aggregate.
6. Your rights
Wherever you live, you can email us and ask to see the personal information we hold about you, correct it, or have it deleted. You can ask us to stop sending you marketing at any time.
If you are in California, the CCPA and CPRA give you the right to know what we collect and why, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising any of it. We do not sell or share personal information for cross-context behavioural advertising in the sense those laws define.
If you are in the EU or the UK, you also have the right to object to processing, to restrict it, and to receive your data in a portable format, as well as the right to complain to your data protection authority.
Write to us and we will answer within 30 days. We may need to confirm who you are first.
7. Children
We sell clothing for babies, but the shop is meant for adults. It is not directed to children and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we will delete it.
8. Security
The site runs over an encrypted connection and payment is handled by a PCI-compliant provider. No system is perfect, but we do not hold card data ourselves, which removes the biggest risk.
9. Changes
If we change this policy we will update the date at the top. If the change is significant, we will say so on the site.
10. Contact
Email thelunaby@gmail.com with anything at all about your data. A person reads it.