Privacy policy

Last Updated: December 30, 2025

Introduction

This Privacy Policy describes how Luna Vibras (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from lunavibras.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services. Your continued use of the Services following the posting of revised Privacy Policy means that you accept and agree to the changes.


1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide to us, including:

  • Account Registration Information: name, email address, password, and profile information when you create an account
  • Purchase Information: shipping and billing address, phone number, payment card information (processed securely by third-party payment processors), and order history
  • Communication Information: content of emails, messages, and inquiries you send us, including customer service requests and feedback
  • Survey and Preference Information: responses to surveys, questionnaires, and preference forms
  • Social Media Information: if you link your social media accounts to our Site, we may collect profile information with your permission

1.2 Information Collected Automatically

When you use our Services, we automatically collect certain information:

  • Device Information: browser type, operating system, device type, device identifiers, IP address, and mobile network information
  • Usage Information: pages visited, products viewed, search queries, referral source, and duration of visits
  • Location Information: city, state, and country derived from IP address (not precise GPS location without your consent)
  • Cookies and Tracking Technologies: information collected through cookies, web beacons, pixels, and similar tracking technologies to enhance your experience and understand how you use our Services
  • Transaction Information: details about purchases made, transaction dates, amounts, and product selections

1.3 Information from Third Parties

We may receive information about you from:

  • Service Providers: payment processors, shipping carriers, analytics providers, and marketing partners 
  • Social Media Platforms: if you connect your social media account
  • Public Sources: publicly available information to enhance our records
  • Other Users: when they provide your information in contact forms or revie

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Delivery

  • Processing and fulfilling orders, payments, and transactions
  • Providing customer service and responding to inquiries
  • Creating and managing user accounts
  • Sending transactional emails (order confirmations, shipping updates, receipts)
  • Improving and personalizing your shopping experience

2.2 Marketing and Communications

  • Sending promotional emails, newsletters, and marketing communications (with your consent)
  • Notifying you about product updates, special offers, and new features 
  • Conducting surveys and gathering feedback
  • Personalizing marketing content based on your preferences and browsing history

2.3 Analytics and Improvement

  • Analyzing trends, usage patterns, and user behavior
  • Improving Site functionality, design, and performance
  • Conducting research and statistical analysis
  • Testing new features and services
  • Preventing fraud and ensuring security

2.4 Legal and Compliance

  • Complying with applicable laws, regulations, and legal processes
  • Enforcing our Terms of Service and other agreements
  • Protecting our rights, privacy, safety, and property
  • Resolving disputes and claims

2.5 Legitimate Business Interests

We process your information based on our legitimate interests in:

  • Operating and improving our business
  • Ensuring the security of our Site and Services
  • Conducting marketing activities
  • Understanding customer needs and preferences
  • Protecting against fraud and liability

3. Legal Basis for Processing (GDPR Compliance)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information on the following legal bases: 

  • Consent: where you have given us explicit consent (e.g., marketing emails)
  • Contractual Necessity: to perform our contract with you (e.g., processing orders)
  • Legal Obligation: to comply with legal requirements
  • Legitimate Interests: to pursue legitimate business interests that do not override your rights (e.g., analytics, fraud prevention)
  • Vital Interests: to protect your vital interests or those of others

4. How We Share Your Information

4.1 Service Providers

We share information with third parties who perform services on our behalf, including:

  • Payment processors and financial institutions
  • Shipping and logistics providers
  • Email service providers and marketing platforms
  • Analytics providers (Google Analytics, etc.)
  • Customer service platforms
  • Website hosting and IT infrastructure providers
  • Cloud storage providers

These service providers are contractually obligated to use your information only as necessary to provide services to us and are required to maintain appropriate security measures.

4.2 Business Partners and Marketing

  • We may share non-identifying aggregated data with marketing partners 
  • If you opt in, we may share your information with selected third-party partners for targeted marketing
  • You can opt out of this sharing at any time

4.3 Legal Requirements

We may disclose your information when required by law or in response to: 

  • Valid legal process, court orders, or government requests 
  • Investigations into fraud, security, or safety concerns
  • Enforcement of our Terms of Service and other agreements

4.4 Business Transfers

If Luna Vibras is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.


5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device that help us recognize you and enhance your experience. We use:

  • Essential Cookies: required for Site functionality (shopping cart, login, security)
  • Performance Cookies: to understand how you use our Site and improve functionality
  • Marketing Cookies: to deliver relevant advertisements and track campaign effectiveness
  • Functional Cookies: to remember your preferences and personalization settings

5.2 Your Cookie Choices

  • Most web browsers automatically accept cookies, but you can typically modify your settings to decline cookies
  • Disabling cookies may affect Site functionality and your shopping experience
  • You can clear cookies from your device at any time
  • We honor "Do Not Track" signals sent by your browser, where applicable

5.3 Third-Party Tracking

Third-party service providers (Google Analytics, Facebook Pixel, etc.) may place cookies on your device to track your activity across websites for analytics and marketing purposes. You can opt out through their respective opt-out mechanisms.


6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, subject to applicable legal requirements:

  • Account Information: retained while your account is active and for a reasonable period afterward for record-keeping
  • Purchase Information: retained to fulfill warranty obligations, handle returns, and comply with tax laws (typically 7 years)
  • Marketing Communications: retained until you unsubscribe
  • Usage and Analytics Data: typically retained for 12-24 months 
  • Payment Information: retained only as long as necessary for transaction processing (not stored long-term)

You can request deletion of your personal information by contacting us, subject to legal requirements for record retention.


7. Security of Your Information

7.1 Security Measures

We implement appropriate technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

  • SSL/TLS encryption for data transmission
  • Secure payment processing through third-party providers
  • Regular security assessments and vulnerability testing
  • Access controls and authentication mechanisms
  • Employee training on data protection and privacy
  • Secure disposal of personal information

7.2 Limitations

While we strive to protect your information, no security system is completely impenetrable. We cannot guarantee the absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials.


8. Your Privacy Rights and Choices

8.1 California Consumer Privacy Act (CCPA/CPRA) Rights

If you are a California resident, you have the following rights:

  • Right to Know: you can request what personal information we collect, use, and share 
  • Right to Delete: you can request deletion of personal information we have collected (with certain exceptions)
  • Right to Correct: you can request correction of inaccurate personal information
  • Right to Opt-Out: you can opt out of the "sale" or "sharing" of your personal information
  • Right to Non-Discrimination: we will not discriminate against you for exercising your privacy rights

How to Submit Requests: Contact us using the information provided in Section 12. We will respond to your request within 45 days. You may designate an authorized agent to submit requests on your behalf.

Verification: We may verify your identity before fulfilling your request by requesting additional information or documentation.

8.2 General Data Protection Regulation (GDPR) Rights

If you are in the EEA, United Kingdom, or Switzerland, you have the following rights:

  • Right of Access: you can request a copy of your personal information
  • Right to Rectification: you can correct inaccurate or incomplete information
  • Right to Erasure: you can request deletion of your information (with certain exceptions)
  • Right to Restrict Processing: you can request that we limit how we use your information
  • Right to Data Portability: you can request your information in a portable format for transfer to another service provider
  • Right to Object: you can object to processing of your information, including for marketing purposes
  • Right to Withdraw Consent: you can withdraw consent for processing at any time
  • Right to Lodge a Complaint: you can file a complaint with your local data protection authority

8.3 Other US State Privacy Rights

Additional privacy rights may apply if you are a resident of Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, or other states with comprehensive privacy laws. These generally include the rights listed above.

8.4 Marketing Communications

You can opt out of receiving promotional emails and marketing communications by:

  • Clicking the "unsubscribe" link in any email we send
  • Updating your account preferences
  • Contacting us directly using the information in Section 12

Please note that even if you opt out of marketing emails, we may still send you transactional emails about your orders and account.

8.5 Cookies and Tracking Opt-Out

You can manage your cookie preferences through your browser settings. Many third-party marketing platforms offer opt-out mechanisms on their websites.


9. Children's Privacy

9.1 Age Restriction

Our Services are not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13.

9.2 Parental Involvement

If we discover that we have collected personal information from a child under 13 without parental consent, we will delete such information promptly. Parents who believe their child has provided information to us can contact us immediately using the information in Section 12.

9.3 Teens and Minors

For users under 18, we limit our collection and use of personal information to what is necessary to provide our Services. We do not share information from minors with third parties for marketing purposes without appropriate consent.


10. International Data Transfers

10.1 Cross-Border Transfers

Luna Vibras is based in the United States. If you access our Services from outside the US, your information will be transferred to, stored in, and processed in the United States, which may have different data protection laws than your country of origin.

By using our Services, you consent to the transfer of your personal information to the United States and other countries for processing as described in this Privacy Policy.

10.2 Standard Contractual Clauses

For users in the EEA and similar jurisdictions, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure adequate protection of your personal information during international transfers.


11. Third-Party Links and Services

11.1 External Links

Our Site may contain links to third-party websites, applications, and services that are not operated by Luna Vibras. This Privacy Policy does not apply to these external services, and we are not responsible for their privacy practices.

11.2 Your Responsibility

We encourage you to review the privacy policies of any third-party services before providing your personal information. Your use of third-party services is subject to their terms and policies.

11.3 Social Media

If you connect your social media account to our Services, information may be shared between Luna Vibras and the social media platform in accordance with their respective privacy policies.


12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Luna Vibras
Privacy and Compliance Team
Email: privacy@lunavibras.com
Website: lunavibras.com
Mailing Address: Springfield, Illinois
Response Time: We will respond to privacy requests within 45 days

California Privacy Rights: If you are a California resident with questions about your privacy rights, you can also contact the California Attorney General at privacy@oag.ca.gov

GDPR Data Protection Officer: For EU residents with data protection inquiries, you can reach our DPO team at privacy@lunavibras.com


13. Updates to This Privacy Policy

13.1 Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Privacy Policy on our Site with a revised "Last Updated" date.

13.2 Your Responsibility

It is your responsibility to review this Privacy Policy periodically for updates. Continued use of our Services after changes are posted constitutes your acceptance of the updated Privacy Policy.

13.3 Material Changes

If we make material changes that affect how we handle your personal information, we will notify you by email or through prominent notice on our Site.


14. Compliance with Specific Regulations

14.1 California Online Privacy Protection Act (CalOPPA)

We maintain this Privacy Policy in a conspicuous location on our Site and provide clear information about our data collection and use practices in accordance with CalOPPA requirements.

14.2 Virginia Consumer Data Protection Act (VCDPA) and Similar Laws

For residents of Virginia and other states with comprehensive consumer privacy laws, this Privacy Policy provides the disclosures required by those laws regarding the collection, use, disclosure, and consumer rights related to personal information.


Appendix: Definitions

Personal Information: Information that identifies you as an individual or relates to an identifiable individual, including name, email address, postal address, phone number, payment information, and device identifiers.

Sensitive Personal Information: A subset of personal information that includes information about race, ethnicity, religion, union membership, genetic data, biometric data for identification, health information, and precise geolocation.

Processing: Any operation performed on personal information, including collection, use, storage, disclosure, or deletion.

Data Controller: The entity (Luna Vibras) that determines the purposes and means of processing personal information.

Data Processor: A third party that processes personal information on behalf of the data controller.

Sale or Sharing: Under CCPA/CPRA, the disclosure of personal information to third parties in exchange for value or for cross-context behavioral advertising.


© 2025 Luna Vibras. All Rights Reserved.

This Privacy Policy is provided for informational purposes. For questions or concerns, please contact our privacy team using the contact information provided in Section 12.