Last updated: [Insert date]
This Privacy Policy explains how Lunar Retail Ltd ("we", "us", or "our") collects, uses, shares, and protects personal data when you visit this website, contact us, or otherwise interact with our business. We are committed to handling your personal data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
On this page
1. Who we are
Lunar Retail Ltd is the "data controller" responsible for your personal data. Our details are:
- Company name: Lunar Retail Ltd
- Registered in: United Kingdom
- Company registration number: 12893149
- Registered address: 19 Harley Street, London, W1G 9QJ, United Kingdom
- Email: info@lunarretail.com
- ICO registration number (if applicable): [Add ICO number]
2. What data we collect
We only collect personal data that we need. Depending on how you interact with us, this may include:
- Identity and contact data — such as your name, company name, and email address when you complete our contact form or email us.
- Communication data — the content of messages and correspondence you send to us, and our replies.
- Technical and usage data — such as your IP address, browser type, device information, and how you use our website, collected where applicable through server logs and cookies (see our Cookie Notice).
We do not knowingly collect special category data (such as health, ethnicity, or political opinions) through this website, and we ask that you do not send such information to us.
3. How and why we use your data
We use personal data to:
- respond to your enquiries and provide the information you request;
- communicate with you about partnership, supplier, or business matters;
- operate, maintain, and improve our website and its security;
- keep records of our communications and business relationships; and
- comply with our legal and regulatory obligations.
We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.
4. Lawful bases for processing
Under UK GDPR, we rely on the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiries and correspondence | Legitimate interests (to respond to people who contact us) and/or steps prior to entering a contract |
| Managing supplier, partner, and business relationships | Legitimate interests and/or performance of a contract |
| Website operation, security, and improvement | Legitimate interests (to run a safe, functional website) |
| Non-essential cookies and analytics (if used) | Consent |
| Meeting legal and regulatory obligations | Legal obligation |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can ask us about this balancing test at any time.
5. Who we share data with
We may share personal data with:
- Service providers who help us operate our business and website (for example, hosting, email, and IT providers), acting as our processors under appropriate agreements;
- Professional advisers such as accountants, insurers, and legal advisers where necessary;
- Authorities or regulators where we are required to do so by law.
We do not sell or rent your personal data to third parties for their own marketing.
6. International transfers
We aim to keep personal data within the UK or European Economic Area (EEA). If any personal data is transferred outside the UK or EEA — for example, because a service provider stores data abroad — we will ensure appropriate safeguards are in place, such as an adequacy decision or the UK International Data Transfer Agreement (IDTA) or addendum to the EU Standard Contractual Clauses.
7. How long we keep data
We keep personal data only for as long as necessary for the purposes set out in this policy, after which it is securely deleted or anonymised. For example:
- Enquiry and correspondence data — typically kept for up to [e.g. 24 months] after our last contact, unless an ongoing relationship requires otherwise.
- Records required for legal or accounting purposes — kept for the period required by law (for example, up to 6 years for certain financial records).
8. Your rights
Under UK data protection law, you have the right to:
- be informed about how your data is used;
- access a copy of the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data ("right to be forgotten") in certain circumstances;
- restrict or object to our processing in certain circumstances;
- data portability, where applicable; and
- withdraw consent at any time where we rely on consent.
To exercise any of these rights, please contact us using the details below. We will respond within one month, as required by UK GDPR. Exercising your rights is free of charge in most cases.
9. Cookies
Our website may use cookies and similar technologies. Please see our separate Cookie Notice for full details and your choices.
10. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. While no online transmission can be guaranteed as fully secure, we take reasonable steps to keep your data safe.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page shows when it was last revised. We encourage you to review it periodically.
12. How to contact us & complaints
If you have any questions about this policy or wish to exercise your rights, please contact us at info@lunarretail.com or via our contact page.
If you are unhappy with how we have handled your personal data, you have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
We would, however, appreciate the chance to address your concerns before you approach the ICO, so please consider contacting us first.
This document is a general template provided for convenience and does not constitute legal advice. Please review it with a qualified adviser and complete all placeholders before publishing.