Privacy policy

Lunar Wonderland operates this shop and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a personalised shopping experience (the “Services”). Lunar Wonderland is powered by Shopify, which enables us to provide the Services to you. This privacy policy describes how we collect, use or share personal data when you visit or use the website, make a purchase or conduct any other transaction using the Services, or otherwise communicate with us. If there is any conflict between our general terms and conditions and this privacy policy, this privacy policy shall prevail with respect to the collection, processing and sharing of your personal data.

Please read this privacy policy carefully. By accessing or using any of the Services, you confirm that you have read this privacy policy and that you agree to the collection, use and disclosure of your data as described herein.

What personal data do we collect or process?
When we use the term “personal data”, we refer to information that identifies you or can be directly linked to you. Personal data does not include information collected anonymously or data that has been anonymised so that it can no longer identify you. Depending on how you interact with the Services, where you live and what applicable law permits or requires, we may collect or process the following categories of personal data, including inferences drawn from such personal data:

• Contact details including name, postal address, billing address, delivery address, telephone number and email address.
• Financial data including credit, debit or bank account numbers, payment card information, financial account information, transaction details, payment method, payment confirmation and other payment details.
• Account information including username, password, security questions, configurations and settings.
• Transaction information including items viewed, added to basket, added to wishlist, purchased, returned, exchanged or cancelled, as well as your past transactions.
• Communications with us including information you provide when contacting customer support or communicating with us in any way.
• Device information including device, browser or network details, IP address and unique identifiers.
• Usage information including how and when you interact with or browse the Services.

Sources of personal data
We may collect personal data from the following sources:

• Directly from you. For example, when you create an account, access or use the Services, communicate with us or otherwise provide personal data to us.
• Automatically through the Services. For example, from your device, through your use of our products or Services, through your visits to our website, or via cookies and similar technologies.
• From our service providers. For example, when service providers collect or process personal data on our behalf.
• From our partners and other third parties.

How do we use your personal data?
Depending on how you interact with us or which Services you use, we may use personal data for the following purposes:

Providing, customising and improving the Services.
We use your personal data to provide the Services, including fulfilling our contract with you, processing payments, delivering orders, storing your preferences and saved items, sending account-related notifications, creating and managing your account, organising shipping, enabling returns and exchanges, allowing product reviews and creating a personalised shopping experience by recommending products based on your activity. This may also include improving or tailoring the Services.

Marketing and advertising.
We use personal data for marketing and advertising, such as sending marketing communications by email, SMS or post, and showing you online advertisements related to our products or other websites, based on your browsing activity and past purchases.

Security and fraud prevention.
We use personal data to authenticate your account, provide secure payments and shopping, detect or investigate fraud or unlawful activity, ensure public safety and protect the security of our Services. You are responsible for safeguarding your login details. We strongly advise you not to share your username, password or other access information with anyone.

Communicating with you.
We use personal data to provide customer support, respond promptly to your enquiries and maintain our business relationship.

Legal reasons.
We use personal data to comply with applicable law or respond to lawful processes, including requests from authorities, to investigate or participate in civil matters or disputes, and to enforce our policies.


How do we share personal data?
We may share your personal data for legitimate purposes in accordance with this privacy policy, including with:

• Shopify and other service providers (e.g. IT management, payment processing, data analysis, customer support, cloud storage, fulfilment and shipping).
• Business and marketing partners who provide marketing services and display ads to you. They use your data in accordance with their own privacy policies. Depending on your location, you may have the right to opt out of such sharing for targeted advertising.
• Third parties when you request or consent to the sharing of information, for example when using social-media integrations.
• Our affiliates or group companies.
• In connection with business transactions such as mergers or insolvency, compliance with legal requirements, enforcing policies or protecting our rights and the rights of users.


Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal data regarding your access and use of the Services. This data may be transferred to Shopify or third parties in other countries. Shopify may also use personal data collected from interactions with our shop and other merchants to provide advanced Shopify features. In such cases, Shopify is responsible for responding to your rights regarding this data. For details, refer to Shopify’s Consumer Privacy Policy and the Shopify Privacy Portal.


Third-party websites and links
The Services may contain links to third-party websites or platforms. We are not responsible for their privacy or security practices. Any information you share publicly or on third-party platforms may be accessible to other users. The inclusion of such links does not imply endorsement unless explicitly stated.


Children’s data
The Services are not intended for children, and we do not knowingly collect data from minors. If you are a parent or guardian and believe your child has provided us with personal data, contact us to request deletion. We are not aware of sharing or selling data of individuals under 16.


Security and retention
No security measures are perfect, and we cannot guarantee absolute protection. Avoid transmitting sensitive information through unsecured channels. Retention periods depend on operational and legal requirements.


Your rights
Depending on your location, you may have rights such as:

• Access
• Deletion
• Correction
• Data portability
• Managing communication preferences

If you are in the UK or EEA, additional rights may apply:

• Right to object
• Right to restrict processing
• Right to withdraw consent

You may exercise these rights through the Services or by contacting us using the details below. Identity verification may be required.


Complaints
If you have concerns about how we process your data, contact us using the details below. You may also lodge a complaint with your local data protection authority.


International transfers
Your data may be transferred outside your home country. For transfers outside the UK or EEA, we rely on standard contractual clauses or equivalent mechanisms.


Changes to this privacy policy
We may update this privacy policy from time to time. Updated versions will be posted on this website with a revised “Last Updated” date.


Contact
If you have questions about our privacy practices or wish to exercise your rights, please contact us by email at contact@lunarwonderland.com or by post at 1209 Mountain Road Place Northeast, Albuquerque, NM, 87110, US. Under applicable data protection laws, we are the data controller for your personal data.