Privacy Policy

Effective Date: July 10, 2025

At Lunaya, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and relevant guidelines issued by the National Privacy Commission (NPC) of the Philippines.

🔍 1. Information We Collect

We may collect and process the following personal data:

• Full name
• Email address
• Phone number
• Shipping and billing address
• Order history and preferences
• IP address, device, and browser information
• Payment method (processed securely via third-party processors; we do not store card details)

We collect this information directly from you through forms, account registration, checkout process, or when you contact us.

🛒 2. Purpose of Data Collection

Your data is collected for the following legitimate purposes:

• To process and deliver your orders
• To manage your account and provide customer support
• To improve our website and product offerings
• To send order updates, promotions, or newsletters (with your consent)
• To comply with legal and regulatory requirements

🔐 3. How We Protect Your Data

We implement appropriate technical and organizational measures to protect your data against:

• Unauthorized access
• Disclosure
• Loss
• Destruction
• Alteration

All data is stored on secure servers. Payment transactions are encrypted via SSL and processed through trusted third-party providers.

✅ 4. Your Rights Under Philippine Law

Under the Data Privacy Act of 2012, you have the following rights:

• Right to be informed about how your data is processed
• Right to access your personal data
• Right to correct or update your information
• Right to object to certain data processing activities
• Right to data portability
• Right to file a complaint with the National Privacy Commission
• Right to erasure or blocking of unlawful data processing

To exercise any of these rights, you may contact us at:
📧 [email protected]

👥 5. Sharing of Information

We do not sell or rent your personal data. We may share data only with:

• Trusted logistics and delivery partners
• Payment processors
• IT or customer service providers who act on our behalf
• Authorities if legally required (e.g., fraud investigations, customs)

All third parties are required to follow strict data confidentiality agreements.

🌐 6. Data Retention

We retain your personal data only for as long as necessary:

• To fulfill the purposes stated in this policy
• To comply with legal or regulatory obligations
• Or until you request deletion

Inactive accounts and order data may be anonymized or deleted after a reasonable period.

🍪 7. Cookies and Tracking

We use cookies and similar technologies to improve your browsing experience, analyze traffic, and personalize content.
You may configure your browser to block or delete cookies at any time.

📬 8. Contact Us

If you have questions or concerns about your privacy or this policy, contact our Data Protection Officer (DPO):

Email: [email protected]
Subject Line: Data Privacy Request

📄 Policy Updates

We may update this policy from time to time to reflect changes in our practices or the law. The latest version will always be available on our website.