1. Introduction & Scope
This privacy policy sets out the approach taken by Luna Arc Ltd (Company No. 15871805), a company incorporated in England and Wales with operations based in Harpenden, Hertfordshire, regarding the handling of personal data belonging to visitors, customers and enquirers.
We operate principally as a seller on the Amazon.co.uk marketplace. This document covers data collected both through our website and in connection with purchases made via Amazon. We are committed to meeting our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By accessing our website or purchasing our products, you acknowledge that you have read and understood this policy. We encourage you to revisit this page periodically, as the policy may be revised from time to time.
2. What Information We Collect
The categories of personal data we may gather depend on how you interact with us:
- Identity data: Your full name as provided when you contact us or place an order.
- Contact data: Email address, telephone number or postal address submitted through our contact form or associated with an Amazon order.
- Transaction data: Amazon order identifiers, product details, purchase amounts and dates relevant to orders involving Luna Arc products.
- Communication data: The content of emails, form submissions or other messages you send to us, along with any metadata such as timestamps.
- Technical data: IP address, browser type, operating system, referring URL, pages viewed and time spent on our website, gathered automatically when you browse our site.
We do not knowingly gather information from individuals under the age of 16. If you believe a child's data has been submitted to us, please get in touch so we can remove it without delay.
3. How We Use Your Information
We process personal data only where we have a valid legal basis under Article 6(1) of the UK GDPR. The grounds on which we rely are outlined below:
- Performance of a contract: To fulfil orders, process returns, handle warranty claims and deliver the products or services you have requested from us.
- Legitimate interests: To respond to customer enquiries, improve our product range, maintain the security of our website and analyse aggregate usage patterns to enhance the browsing experience. We ensure these interests do not override your fundamental rights.
- Legal obligation: To comply with applicable laws, tax regulations, or lawful requests from public authorities.
- Consent: Where you have opted in to receive promotional communications, we rely on your consent as the legal basis. You may withdraw this consent at any time by contacting us.
4. Disclosure to Third Parties
We do not sell, rent or trade your personal data. However, certain third parties may receive limited access to your information in the following circumstances:
- Amazon: As our primary sales channel, Amazon processes order and payment data in accordance with its own privacy policy. We recommend reviewing Amazon's privacy notice for details on how they manage buyer information.
- Service providers: We may engage trusted providers for website hosting, email delivery or analytics. These parties act only on our instructions and are contractually bound to protect your data.
- Legal and regulatory bodies: We may disclose personal data if required to do so by law, court order or regulatory authority, or where necessary to protect our legal rights.
Any third party we share data with is required to implement appropriate safeguards. We do not routinely transfer personal data outside the United Kingdom, but where such a transfer is necessary, we ensure suitable protections are in place in line with UK GDPR requirements.
5. Cookies & Tracking
Our website may use a small number of cookies and similar technologies to ensure the site functions correctly and to understand how visitors engage with our pages.
- Essential cookies: Required for basic site functionality such as page navigation and secure areas. These cannot be disabled without affecting the usability of the website.
- Analytics cookies: We may use tools such as Google Analytics to collect anonymised data about traffic patterns, popular pages and visitor demographics. This information helps us refine the website experience.
Most web browsers allow you to manage cookie preferences through their settings. Blocking certain cookies may reduce the functionality of parts of our site. We do not use cookies for targeted advertising purposes on this website.
6. Data Security & Retention
Protecting your information is a priority. We employ a range of organisational and technical measures to guard against unauthorised access, loss or misuse of personal data. These include encrypted connections (SSL/TLS), restricted access controls and regular reviews of our data handling procedures.
We retain personal data only for as long as is reasonably necessary to fulfil the purpose for which it was collected. Typical retention periods are as follows:
- Customer enquiry records: Retained for up to 24 months from the date of the last interaction, after which they are securely deleted.
- Order-related data: Kept for a minimum of six years to satisfy UK tax and accounting obligations, then disposed of securely.
- Website analytics data: Aggregated and anonymised data may be retained indefinitely; identifiable data is purged within 14 months of collection.
While no method of electronic storage is completely infallible, we take every reasonable precaution to keep your data safe.
7. Your Rights
Under the UK GDPR, you are entitled to a number of rights in relation to your personal data. We are committed to honouring each of these promptly and transparently:
- Right of access: You may request a copy of all personal data we hold about you, commonly known as a subject access request.
- Right to rectification: If any information we hold is inaccurate or incomplete, you have the right to ask us to correct it.
- Right to erasure: In certain circumstances, you may ask us to delete your personal data where there is no compelling reason for us to continue processing it.
- Right to restrict processing: You may request that we limit the way we use your data, for example while a complaint is being investigated.
- Right to data portability: Where processing is based on consent or contract, you may request your data in a structured, commonly used and machine-readable format.
- Right to object: You may object to processing carried out on the basis of our legitimate interests. We will cease processing unless we can demonstrate compelling lawful grounds.
To exercise any of these rights, please contact us using the details in Section 8. We will respond within one calendar month, as required by law. There is no fee for making a request in most cases.
If you are dissatisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Contact & Updates
If you have any questions about this privacy policy or wish to exercise your data rights, please reach out to us:
- Email: Luna-arcltd@outlook.com
- Phone: +44 7724 696041
- Post: Luna Arc Ltd, Harpenden, Hertfordshire, United Kingdom
We may update this policy from time to time to reflect changes in our practices, legal requirements or operational needs. When we do, the revised version will be posted on this page with an updated effective date. We recommend checking back occasionally to stay informed.
Last updated: January 2025