Privacy Policy

Last updated: 19 September 2026

Lunacarat operates this store and website, including all related content, features, tools, products and services (the “Services”). Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use, or make a purchase from us, or otherwise interact with us. By using the Services you acknowledge that you have read and understood this policy.

Personal information we collect or process

• Contact details — name, shipping and billing address, phone number, email address
• Payment information — card or other payment details, processed securely by our payment providers
• Account details — username, password and saved preferences
• Order information — items viewed, added to bag, purchased or returned
• Personalisation details — names, initials, dates or birthstones you supply for engraved pieces
• Customer support — messages and attachments you send us
• Device information — IP address, browser type, device and network data
• Usage data — pages visited, navigation paths and interaction times

Where your information comes from

• Directly from you, when you order, create an account or contact us
• Automatically through the Services, including cookies and similar technologies
• From service providers who help us operate the store
• From partners and other third parties, such as advertising and analytics providers

How we use your information

• To provide, personalise and improve the Services
• To process orders, payments, deliveries and returns
• To engrave and make personalised pieces to your specification
• To send order updates and, where you have opted in, marketing communications
• To prevent fraud and keep the store secure
• To answer your questions and provide customer support
• To meet our legal and regulatory obligations

Who we share it with

• Shopify and the service providers who power our store, payments and delivery
• Marketing and advertising partners, where you have not opted out
• Anyone you direct us to share it with, or where you have given consent
• Affiliates, or a buyer in connection with a merger, sale or other business transaction
• Authorities, where we are required to comply with a legal obligation

We do not sell your personal information for money.

Our relationship with Shopify

The Services are hosted by Shopify. Your information may be shared with Shopify and used by them for analytics, advertising and improving their services, including across the merchants they host. You can review their practices in the Shopify Privacy Policy.

Cookies

We use cookies and similar technologies to keep your bag working, remember your preferences, understand how the store is used and measure the performance of our marketing. You can control cookies through your browser settings, though disabling some of them will stop parts of the store working properly.

Third-party websites

Our Services may link to websites we do not operate. We are not responsible for their content or their privacy practices, and we encourage you to read their policies separately.

Children’s data

The Services are not intended for children under the age of majority in their place of residence, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will delete it.

Security and retention

We take reasonable steps to protect your personal information, but no method of transmission or storage is completely secure. We keep personal information only for as long as we need it for the purposes described in this policy, including to meet legal, accounting and reporting obligations.

Your rights

Depending on where you live, you may have the right to:

• Access, correct or delete the personal information we hold about you
• Receive a copy of your data, or ask us to transfer it
• Opt out of targeted advertising or the sharing of your data
• Manage your marketing preferences at any time
• Withdraw consent, or object to how we process your information

To exercise any of these rights, email us at support@lunacarat.com. We may need to verify your identity before we act on a request.

Complaints

If you are concerned about how we handle your data, please contact us first so we can put it right. Depending on where you live, you may also have the right to complain to your local data protection authority.

International transfers

Your personal information may be processed outside your country of residence. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, to protect it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. The revised version takes effect when posted here, and we will update the “last updated” date at the top of the page.

Contact us

For any question about this policy or your personal information, get in touch.