Privacy Policy

thelunesse (“we”, “us”, “our”) is the data controller for personal data collected through this website. Our registered details are set out in our Legal Notice. For any privacy request or question, contact privacy@thelunesse.com.

• — Contact & delivery details: name, email, phone and shipping address.
• — Order information: items purchased, order history, and payment method (bank transfer / cash on delivery).
• — Payment reconciliation data: the bank account or IBAN from which a transfer is made, used to match and, where needed, refund payments.
• — Technical data: device, browser, IP address and cookie identifiers.
• — Communications: the messages you send to Client Care.

We do not store card numbers. We currently accept bank transfer (IBAN) and cash on delivery only.

• — To process, produce and deliver your made-to-order pieces — performance of a contract.
• — To confirm and reconcile bank-transfer payments and issue refunds — contract and legal obligation.
• — To provide customer service and handle returns — contract / legitimate interests.
• — To secure and improve our site, and to prevent fraud — legitimate interests.
• — For analytics and any marketing — your consent, which you may withdraw at any time.
• — To meet tax, accounting and other legal duties — legal obligation.

We share personal data only with processors who help us operate — couriers and logistics partners, hosting and IT providers, and, where enabled with consent, analytics providers — each under a data-processing agreement that limits use to our instructions. We may also disclose data where required by law or to protect our rights. We never sell your personal data.

We operate from Türkiye and ship worldwide, so your data may be processed outside your home country, including outside the EEA/UK. Where that happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and equivalent measures to protect your data.

We keep personal data only for as long as necessary for the purposes described above. Order and transaction records are typically retained for the period required by applicable tax and accounting law (commonly several years), after which they are deleted or anonymised. Marketing data is kept until you withdraw consent or object.

Subject to the law, you may access your data and request a copy, and ask us to correct, delete, restrict or port it. You may object to processing based on legitimate interests and withdraw consent at any time. To exercise a right, email privacy@thelunesse.com. You also have the right to lodge a complaint with your local supervisory authority.

If you are a US resident, you may have the right to know what personal information we collect and why, to access, correct and delete it, and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. We do not sell personal information and do not use it for cross-context behavioural advertising. We will not discriminate against you for exercising any right. To make a request, email privacy@thelunesse.com; you may use an authorised agent, and we will verify requests before acting.

We use cookies as described in our Cookie Policy. You can accept or reject non-essential cookies through the consent banner and change your choice at any time.

Our site is intended for adults. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time and will post the current version here with its effective date. For any request or question, write to privacy@thelunesse.com.