Privacy Policy

When you place an order or interact with the Site, we collect:

• Order and contact details: name, email address, shipping and billing address, phone number, and the items you purchase.
• Payment information: processed directly by our payment providers (e.g. Shopify Payments, Klarna, PayPal). We do not store your full card number on our servers.
• Account and support communications: messages you send us by email or contact form.
• Marketing preferences: your email address if you sign up for our newsletter.
• Device and usage data: IP address, browser type, device identifiers, pages viewed, referring URL and general location, collected through cookies and similar technologies (see section 4).

• Fulfilling your order: to process payments, ship products, send order confirmations, and handle returns.
• Customer support: to respond to questions, issues, and warranty requests.
• Marketing: to send you newsletters, offers, and product updates (only if you have opted in), and to show relevant ads on platforms like Meta.
• Site improvement: to understand how our Site is used and to improve product pages, checkout, and performance.
• Fraud prevention and legal compliance: to protect against fraudulent transactions and to comply with accounting and consumer-protection laws.

We do not sell your personal data. We share it only with service providers that help us run our store, and only with the information they need:

• Payment providers (e.g. Shopify Payments, Klarna, PayPal, Stripe) to process your payment.
• Shipping and fulfillment partners to deliver your order.
• Email and marketing tools (e.g. Shopify Email, Klaviyo) to send transactional and marketing emails.
• Analytics and advertising providers (e.g. Google Analytics, Meta / Facebook) to measure Site performance and show ads.
• Authorities when required by law, court order, or to protect our rights.

We use cookies and similar technologies to keep your cart working, remember your preferences, measure traffic, and deliver personalized advertising. This includes the Meta Pixel, which helps us measure the effectiveness of our advertising on Facebook and Instagram and show you more relevant ads.

You can control cookies through your browser settings and opt out of personalized advertising via your device settings or via the preference tools offered by each ad network.

We keep order and invoice data as long as required by applicable accounting and tax law (typically 7 years). Marketing data is kept until you unsubscribe. Support conversations are kept for as long as needed to resolve your case and for a reasonable period after.

Depending on where you live (including under the EU GDPR), you have the right to access, correct, delete, or export the personal data we hold about you, and to object to certain kinds of processing such as marketing. To exercise any of these rights, contact us at the address below.

We use industry-standard security measures, including encrypted connections (HTTPS) and access controls, to protect your data. No method of transmission over the internet is 100% secure, but we work to protect your data using appropriate safeguards.

For any privacy-related question or data request, email us at privacy@sonalune.com.