Privacy policy

This Privacy Policy explains how personal data of users and customers of the LunaMia store is collected, used, and protected.

1. Data Controller

LunaMia is the data controller for personal data.

For any questions related to personal data protection, access requests, rectification, or deletion of data, the user can contact us via email: lunamia.shop.store@gmail.com.

2. Personal Data Collected

Depending on website usage or order placement, the following personal data may be collected:

  • first name;
  • last name;
  • billing and shipping address;
  • email address;
  • phone number;
  • tax identification number, when necessary for invoicing;
  • data related to orders, payments, and shipping;
  • communications sent by the customer via the contact form or email;
  • technical browsing data, when applicable, including cookies and website usage data.

 

3. Purposes of Data Processing

Personal data is processed for the following purposes:

  • order processing and management;
  • invoice issuance and compliance with legal and tax obligations;
  • order delivery and customer contact regarding purchase status;
  • responding to contact requests, questions, or complaints;
  • fraud prevention, misuse of the website, or illegal activities;
  • improving website functionality and user experience;
  • sending marketing communications, only when consent has been given for this purpose.

 

4. Legal Basis for Processing

The processing of personal data is carried out based on at least one of the following grounds:

  • performance of a contract or pre-contractual steps, in the case of orders and purchase-related contacts;
  • compliance with legal obligations, particularly tax, accounting, and invoicing obligations;
  • legitimate interest of the store, namely for security, fraud prevention, and administrative management;
  • consent of the data subject, when applicable, for example for sending newsletters or using certain cookies.

 

5. Sharing Data with Third Parties

Personal data may be shared, only when necessary, with third-party entities that provide indispensable services to the store's activity, such as:

  • payment platforms;
  • carriers and logistics operators;
  • providers of invoicing services, website hosting, technical support, or communications.

Personal data will not be sold or transferred to third parties for independent commercial purposes.

 

6. Data Retention

Personal data is retained only for the period necessary for the purposes for which it was collected and for compliance with legal obligations. Specifically:

data related to orders, invoicing, and accounting may be retained for the legally required period;

data sent via contact forms or email will be retained for the time necessary to manage the request;

data processed based on consent will be retained until that consent is withdrawn, without prejudice to other applicable legal grounds.

 

7. Data Subject Rights

Under applicable law, the data subject may exercise the following rights at any time:

  • right of access;
  • right to rectification;
  • right to erasure;
  • right to restriction of processing;
  • right to object;
  • right to data portability, when applicable;
  • right to withdraw consent, when processing is based on consent.

To exercise any of these rights, the data subject should contact the store via email: lunamia.shop.store@gmail.com.

The CNPD states that the data controller must respond to the request within the legal period and that if this does not happen within 30 days, or if there is an unjustified refusal, the data subject may file a complaint.

 

8. Complaint to the Supervisory Authority

If the data subject believes that the processing of their personal data violates applicable law, they may file a complaint with the National Data Protection Commission (CNPD). The CNPD is the competent Portuguese authority for personal data protection.

 

9. Data Security

LunaMia adopts appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, or destruction.

However, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure.

 

10. Cookies

The website may use cookies and similar technologies to ensure its operation, improve performance, and analyze website usage.

Whenever legally required, the use of non-essential cookies will depend on the user's consent.

Detailed information about cookies may be provided in a separate cookie policy.

 

11. Changes to this Policy

This Privacy Policy may be updated at any time, with the most recent version being the one published on the website.

Regular consultation of this page is recommended.

 

12. Contact

For any questions related to this Privacy Policy or the processing of personal data, the user can contact:

LunaMia

Email: lunamia.shop.store@gmail.com