Privacy Policy

Last updated: November 9, 2025

Luna & Grace operates this online store together with the website and all related features, tools, products, and services to provide you with a personalized shopping experience (“Services”). We operate on the Shopify platform, which enables us to provide the Services. This Privacy Policy explains how we collect, use, and disclose your personal data when you use the website, make purchases, or contact us.

In the event of any inconsistency between the Terms and Conditions and this Privacy Policy, this document will take precedence in matters concerning the processing of personal data.

By using the Services, you confirm that you have read this Privacy Policy and understand the rules regarding the processing of your personal data.

Personal Data We Collect and Process

“Personal data” refers to information that identifies you or can be linked to you. It does not include anonymized data that cannot be used to identify an individual.

Depending on how you use the Services, where you live, and applicable laws, we may collect or process the following categories of data:

Contact details
Name, residential address, billing address, delivery address, phone number, email address.

Financial information
Payment card details, bank account information, payment confirmations, payment method.

Account information
Username, password, security questions, user preferences.

Transaction information
Products viewed, purchased, returned, or canceled, and purchase history.

Communication
Messages sent to customer support.

Device information
Device type, browser, network, IP address, and other identifiers.

Usage data
Information about how you interact with the Services.

Sources of Data

We may obtain your personal data from the following sources:

Directly from you
When you create an account, make purchases, use the Services, or contact us.

Automatically
Through technologies used on our website (such as cookies).

Service providers
Companies that process data on our behalf.

Business partners or third parties

How We Use Personal Data

The use of personal data depends on how you interact with our Services. Data may be processed for the following purposes:

1. Providing and improving Services

Processing orders, handling payments, maintaining user accounts, managing returns and exchanges, improving service quality, and personalizing shopping experiences (for example product recommendations).

2. Marketing and advertising

Sending marketing communications, running advertising campaigns, and displaying advertisements related to your activity on our website or previous purchases.

3. Security and fraud prevention

Protecting accounts, monitoring payments, detecting fraud, and preventing unauthorized activity.

If you have a Luna & Grace account, you are responsible for maintaining the confidentiality of your login credentials.

4. Communication

Responding to inquiries, providing customer support, and maintaining correspondence regarding orders or accounts.

5. Legal compliance

Meeting legal obligations, cooperating with law enforcement, managing legal claims, and enforcing our policies.

How We Disclose Personal Data

We may disclose personal data to third parties in the following situations:

Shopify and external service providers
IT services, payment processing, analytics, customer support, logistics, and data storage.

Marketing partners
For advertising and promotional activities. These partners operate under their own privacy policies.

At your request or with your consent
For example shipping services or integrations with social media platforms.

Affiliated entities
For internal operational purposes.

Business transactions
In case of mergers, acquisitions, or bankruptcy.

Legal requirements
For example requests from law enforcement authorities or to protect the rights of users or Luna & Grace.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal data to provide and improve its services. Data may be stored or processed in countries outside your country of residence.

Shopify may act as an independent data controller, particularly regarding analytics and advertising personalization.

More details can be found in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-Party Websites

The Services may contain links to third-party websites.

We are not responsible for their privacy practices, security, or content.
If you post content in public areas (such as social media), it may be visible to other users.

Children’s Data

The Services are not intended for individuals considered minors in their jurisdiction.

We do not knowingly collect personal data from children.

If you believe that a child has provided us with personal data, please contact us at:
info@luna-grace.com

We do not knowingly “sell” or “share” personal data of individuals under the age of 16.

Data Security and Retention

We implement security measures, however no system can guarantee complete protection.
Data transmitted electronically may be exposed during transmission.

The retention period for personal data depends on its type and purpose, including legal obligations, account management, dispute resolution, and enforcement of policies.

Your Rights

Depending on your location, you may have the following rights:

• Right to access personal data

• Right to delete personal data

• Right to correct inaccurate information

• Right to data portability

• Right to manage marketing communications (unsubscribe)

If you live in the European Economic Area (EEA) or the United Kingdom, you may also:

• Object to processing

• Restrict processing

• Withdraw consent (without affecting previous processing)

To exercise your rights, contact us at:
info@luna-grace.com

Information regarding data processed by Shopify can be found here:
https://privacy.shopify.com/en

Before processing requests, we may ask for identity verification. We respond according to applicable laws.

Complaints

If you have concerns about how your personal data is processed, please contact us.

Depending on your location, you may also file a complaint with the relevant supervisory authority.

International Data Transfers

Your data may be transferred outside your country of residence.

For transfers outside the EEA, we rely on Standard Contractual Clauses (SCC) unless the destination country ensures an adequate level of protection.

Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in practices, laws, or requirements.

The update date will always be adjusted accordingly.
If significant changes occur, we will inform you as required by law.

Contact Information

Company name: Luna & Grace (Trexa Group)
Online store: Luna & Grace

KVK Number: 98237047

Email: info@luna-grace.com

Phone: +31 6 20 37 82 66

Contact form: Contact form

Opening hours:
Monday – Friday: 08:00 – 18:00
Saturday – Sunday: 10:00 – 16:00

We respond to emails within 24 hours.