Privacy policy

Privacy Policy – Luna Mesa

Luna Mesa values your privacy and handles personal data with care. In this privacy policy, we explain which personal data we collect, how we use it, and what rights you have.
This privacy policy applies to the use of our website and webshop.

1. Who is responsible?

Luna Mesa is responsible for the processing of personal data as described in this privacy policy.

Contact details:
Email: contact.lunamesa@gmail.com
Website: www.luna-mesa.com

2. Which personal data do we process?

We process personal data that you provide to us directly or that is automatically collected when you use our webshop. This may include:

Name
Billing and shipping address
Email address
Telephone number
Payment details (via payment providers; we do not store full payment details ourselves)
Order and purchase history
Information you provide via forms (such as contact or registration forms)
Email address for the newsletter (if you subscribe)
Technical data such as IP address, browser details, and device information (via cookies)

3. For what purposes do we use this data?

We process personal data solely for the following purposes:

Processing and fulfilling orders
Communication regarding orders, payments, and delivery
Shipping products
Sending service-related messages, such as order confirmations and shipping updates
Responding to questions or contact requests
Creating and managing customer accounts (if applicable)
Sending newsletters, if you have subscribed
Improving our webshop and services
Complying with legal obligations, such as administrative and retention requirements

4. On what legal basis do we process personal data?

We process personal data only when there is a valid legal basis, such as:

the performance of a contract (for example, processing an order);
your consent (for example, for receiving the newsletter);
a legal obligation (such as tax retention requirements);
a legitimate interest (such as improving our webshop).

You can unsubscribe from the newsletter at any time via the unsubscribe link included in each email.

5. Shopify

Our webshop is built on Shopify. Shopify processes personal data on our behalf to process orders, enable payments, and provide technical support for our webshop.

Shopify may store personal data on servers located outside the European Economic Area. In such cases, Shopify ensures appropriate safeguards, such as standard contractual clauses, to protect your privacy.

More information about how Shopify handles personal data can be found in Shopify’s privacy policy.

6. Sharing personal data with third parties

We share personal data with third parties only when necessary for our services or to comply with legal obligations. This may include:

Shopify (webshop platform)
Payment service providers
Shipping and delivery services
Email and newsletter software providers
IT and administrative service providers

Where required, we enter into data processing agreements with parties that process personal data on our behalf or rely on their GDPR-compliant terms.

7. Cookies and tracking technologies

Our website uses cookies and similar technologies to ensure the proper functioning of the webshop, to analyse website traffic, and to improve the user experience.

We use functional cookies that are necessary for the operation of our webshop, as well as analytical and marketing cookies, subject to your consent where required by applicable law.

For marketing and advertising purposes, we use technologies provided by Meta Platforms Inc., including the Meta (Facebook and Instagram) Pixel and Conversions API. These tools allow us to measure the effectiveness of our advertising, understand user interactions on our website, and display personalised advertisements to visitors who have shown interest in our products.

Through these technologies, certain data such as IP address, browser information, device data, and interactions on our website may be shared with Meta. This processing is carried out in accordance with Meta’s privacy policy.

Marketing and analytical cookies are only placed after you have given your consent via our cookie banner. You can change or withdraw your consent at any time via the “Cookie preferences” link available on our website.

For more information about how Meta processes personal data, please refer to Meta’s Privacy Policy.

8. How long do we retain personal data?

We do not retain personal data longer than necessary for the purposes for which it was collected, unless we are legally required to retain data for a longer period (for example, for financial administration).

9. Data security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, or disclosure.

10. Your rights

You have the right to:

access your personal data
have your data corrected or deleted
object to the processing of your data
withdraw your consent
request data portability
lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)