Privacy Policy
Date: January 1, 2025
At Lua, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, purchase our products, or otherwise interact with us.
Who we are
Lua is an online store operated by Lua, registered at M. K. Ogińskiego 11 local nr 9, 03-318 Warsaw, with registration number 5243025327 (NIP). For questions about this Privacy Policy, please contact us at hello@yourlua.com.
Data we collect
We collect several types of personal data, including identity data such as your name, username, or other identifiers; contact data such as your email address, phone number, billing, and shipping address; and financial data such as payment card details and transaction history, which are processed securely through third-party payment processors. Additionally, we may collect technical data, such as your IP address, browser type and version, operating system, and other technology used to access our website. Usage data about how you interact with our website, products, and services, as well as marketing and communications data about your preferences for receiving marketing from us and your communication preferences, may also be collected.
How we collect your data
We collect personal data in several ways. First, we gather information directly through your interactions with us, such as when you create an account, make a purchase, subscribe to our newsletter, or contact us. Second, we use automated technologies like cookies to collect data when you interact with our website. Finally, we may receive personal data from third parties such as analytics providers, advertising networks, and payment processors.
How we use your data
We use your personal data to process and deliver your orders, including handling payments, shipping, and returns. It is also used to provide customer support and manage inquiries, to send marketing communications, promotions, or special offers when you have consented to receive them, and to personalize your experience on our website and improve our services. Additionally, we process your data to comply with legal obligations, such as tax and accounting requirements.
Legal basis for processing personal data
Under the GDPR, we process your personal data based on several legal grounds. To fulfill our contractual obligations, such as processing your order, we rely on the performance of a contract. For marketing communications and the use of cookies, we rely on your consent. We also rely on legitimate interests to improve our services and manage business operations, and on legal obligations to comply with applicable laws and regulations.
Sharing your data
We may share your personal data with service providers, such as payment processors, delivery partners, and IT support providers, as necessary to facilitate your transactions. Additionally, we may share your data with legal authorities if required by law or in response to legal requests. In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the business transaction. Rest assured, we do not sell your personal data to third parties.
International transfers
If your personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your data. These safeguards may include binding corporate rules, EU Standard Contractual Clauses, or transfers to countries that have been granted an adequacy decision by the European Commission.
Data retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. For example, order details are typically retained for [Insert Retention Period] to comply with tax and accounting regulations, while marketing data is retained until you unsubscribe or withdraw your consent.
Your rights
Under the GDPR, you have several rights regarding your personal data. You have the right to access your personal data and obtain a copy, to request correction of incomplete or inaccurate data, and to request deletion of your personal data ("right to be forgotten"). You may also request restriction of processing under certain conditions, request transfer of your personal data to another service provider, and object to processing based on legitimate interests or for direct marketing purposes. To exercise your rights, contact us at hello@yourlua.com. Please note that we may require additional verification to process your request.
Marketing and cookies
We may send you marketing emails or newsletters if you have opted in to receive them. You can unsubscribe at any time by clicking the "unsubscribe" link in our emails or contacting us directly. Our website also uses cookies and similar technologies to enhance your experience.
Data security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, or loss. While we strive to ensure the security of your data, no online platform can guarantee complete protection.
Complaints
If you believe that we have violated your privacy rights, you have the right to file a complaint with your local data protection authority. In the EU, you can contact your national supervisory authority for assistance.
Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page, and the effective date will be updated accordingly.
Contact information
If you have any questions or concerns about this Privacy Policy or how your personal data is handled, please contact us at hello@yourlua.com.