Privacy policy

 

LunaDreams operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). LunaDreams is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.

• Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.

• Account information including your username, password, security questions, preferences and settings.

• Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.

• Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.

• Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.

• Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

• Cookies and Tracking Technologies: We use the following categories of cookies on our website. (1) Strictly necessary cookies — essential for the website and checkout to function; no consent required. (2) Analytics cookies — help us understand how visitors interact with the site (e.g., Google Analytics); collected only with your consent. (3) Advertising/marketing cookies — used to show you relevant ads on and off our website; collected only with your consent. You can manage your cookie preferences at any time via the cookie banner on our website or by contacting us. Withdrawing consent for non-essential cookies will not affect your ability to shop with us.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;

• Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;

• From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;

• From our partners or other third parties.

How We Use Your Personal Information

For customers in the European Economic Area (EEA) and United Kingdom, the table below sets out the legal basis for each processing purpose under Article 6 of the GDPR / UK GDPR.

We use your personal information to: provide, tailor, and improve the Services; process payments and fulfil your orders; send notifications related to your account; arrange shipping; facilitate returns and exchanges; send marketing communications where you have given consent; prevent fraud and ensure security; communicate with you for customer support purposes; and comply with applicable legal obligations.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).

• With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites. .

• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.

• With our affiliates or otherwise within our corporate group.

• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

• We do not sell your personal data for monetary compensation. We may share personal data with advertising and marketing partners for the purpose of targeted advertising. Depending on your jurisdiction, you may have the right to opt out of such sharing. Please see the "Your Rights and Choices" section below, or contact us at helloluna@lunadreamsbaby.com to exercise this right.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit to the Services may be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside. To learn more about how Shopify uses your personal information and any rights you may have, please visit the 

Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Our inclusion of such links does not imply endorsement of the content on such platforms or of their owners or operators.

Children's Data

Our Services are not directed at children under 18 years of age. We do not knowingly collect personal data from anyone under the age of 18. If you are the parent or guardian of a child under 18 who has provided us with their personal information, you may contact us at helloluna@lunadreamsbaby.com to request that it be deleted. As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share personal information of individuals under 18 years of age.

Data Breach Notification

In the event of a personal data breach, LunaDreams will: (1) investigate the breach promptly upon becoming aware of it; (2) notify the Personal Data Protection Commission (PDPC) within 3 calendar days of assessing that the breach is notifiable (i.e., likely to result in significant harm to individuals or is of significant scale); (3) notify affected individuals without undue delay where the breach is likely to result in significant harm to them; and (4) take all reasonable steps to remediate the breach and prevent recurrence. Notification to affected individuals will include the nature of the breach, the personal data involved, the steps taken by LunaDreams to address the breach, and any steps individuals can take to protect themselves. If you believe your personal data may have been affected by a breach, please contact helloluna@lunadreamsbaby.com immediately.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable. We cannot guarantee "perfect security." We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

We retain your personal data for the following periods:

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights in relation to your personal data:

•  Right to Access / Know: You may request access to personal information that we hold about you.

•  Right to Delete: You may request that we delete personal information we maintain about you.

•  Right to Correct: You may request that we correct inaccurate personal information we maintain about you.

•  Right of Portability: You may request a copy of your personal information and ask us to transfer it to a third party.

•  Right to Opt Out of Targeted Advertising / Sale: Depending on where you reside, you may opt out of the sharing of your personal information for targeted advertising purposes. To exercise this right, please contact us at helloluna@lunadreamsbaby.com or use the opt-out link in any marketing email you receive from us.

If you reside in the UK or European Economic Area, you may additionally have the right to object to or restrict processing, and to withdraw consent where processing is based on consent.

Managing Communication Preferences: You may opt out of marketing emails at any time by using the unsubscribe option in any email. If you opt out, we may still send you non-promotional emails about your account or orders.

Response Timeframe: We will respond to your data rights request within 30 calendar days of receipt. If we require additional time to respond (e.g., due to the complexity or volume of requests), we will notify you within 30 calendar days with the reason for the delay and the expected response date. We will not discriminate against you for exercising your rights. We may need to verify your identity before processing your request.

Complaints

If you have complaints about how we process your personal information, please contact our DPO at helloluna@lunadreamsbaby.com. You may also have the right to lodge a complaint with your local data protection authority. For Singapore residents, this is the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg/. For EEA residents, you may contact your local supervisory authority.

International Transfers

We may transfer, store, and process your personal information outside the country you live in. If we transfer personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant authority of the UK, unless the transfer is to a country with an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at helloluna@lunadreamsbaby.com for the purpose of applicable data protection laws, we are the data controller of your personal information.

Singapore Personal Data Protection Act (PDPA)

LunaDreams operates in accordance with the Singapore Personal Data Protection Act 2012 (PDPA). We are committed to protecting the personal data of our customers and handling it responsibly.

Collection of personal data: We collect personal data that you voluntarily provide when placing an order, creating an account, signing up for our newsletter, or contacting us. This includes your name, email address, shipping address, and payment information.

Consent: By providing your personal data to LunaDreams, you consent to its collection, use, and disclosure in accordance with this policy. You may withdraw your consent at any time by contacting us at lunadreams@lunadreamsbaby.com. Please note that withdrawing consent may affect our ability to fulfil your orders or provide certain services.

Access and correction: You have the right to request access to your personal data and to request corrections to any inaccurate data. Contact us at helloluna@lunadreamsbaby.com. We will respond within 30 calendar days.

Disclosure to third parties: We do not sell your personal data for monetary compensation. We may share your data with trusted third-party service providers — including Shopify, payment processors, and shipping partners — solely for the purpose of operating our business and fulfilling your orders. These providers are contractually obligated to protect your data.

Marketing communications: If you have subscribed to our newsletter or marketing emails, you may unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us at helloluna@lunadreamsbaby.com.