Privacy Policy

1. About Lunelle Intimates

Lunelle Intimates is operated by an independent online retailer. Our website is lunelleintimates.com and we primarily serve customers in the United States. References to “we,” “our,” or “us” in this Privacy Policy refer to the operator of Lunelle Intimates.

If you have questions about this policy, contact us at [email protected].

2. Information We Collect

Information you provide directly:

• —Email address — when you subscribe to our newsletter or enter it during checkout
• —Full name and optional phone number — when you place an order
• —Shipping address — when you place an order for delivery within the United States
• —Order details — including product names, sizes, quantities, prices, and any notes you add
• —Communications you send to us by email

Information collected automatically:

• —IP address — our application uses IP addresses for security and rate limiting; this data is held in server memory only and is not written to our application database. Cloudflare, our hosting provider, and other infrastructure services may separately log IP addresses, request timestamps, browser information, and request metadata in accordance with their own data retention practices.
• —Cookie consent preferences— stored in your browser's local storage for up to one year.

Information handled by our payment processor:

Card details are entered directly on Stripe-hosted Checkout. We do not receive or store full payment card numbers, expiry dates, or security codes. Stripe provides us with a payment reference identifier only.

3. How We Use Your Information

• —Order fulfilment — to process and ship your orders and to send order confirmation, payment confirmation, shipping, and refund notifications
• —Payment processing — your payment details are handled by Stripe; we use Stripe's payment reference to record order payment status in our system
• —Email marketing — to send a welcome email and promotional communications, only when you have subscribed via our newsletter form; you may unsubscribe at any time using the link in any email we send
• —Security and fraud prevention — to detect and block abusive or fraudulent requests using IP-based rate limiting
• —Website analytics and advertising measurement — to understand how visitors use our site, improve our products and experience, and measure advertising performance; Google Analytics and the Google Ads tag are each loaded only after you consent to the relevant cookie category
• —Customer support — to respond to your enquiries and handle returns or refund requests
• —Legal compliance — to meet applicable record-keeping obligations and respond to lawful requests

4. Service Providers and Third Parties

We share certain data with the following third-party service providers in connection with operating our website. These providers process information according to their applicable terms, privacy notices, and our service arrangements with them.

We do not sell your personal information to any third party.

5. Cookies and Your Consent

We use cookies and similar technologies on our website. When you first visit, a banner will appear asking for your preferences. We use three categories of cookies:

• —Strictly Necessary — Required for the website to function (shopping cart, session security). These are always active and do not require your consent.
• —Analytics— We use Google Analytics to understand how visitors find and use our site, including page views, product interactions, cart activity, and completed purchases. Analytics cookies are only loaded after you click “Accept All” or enable Analytics in Cookie Preferences.
• —Advertising— We use the Google Ads tag to measure advertising performance and understand whether visitors who interact with our ads make purchases. Advertising cookies are only loaded after you click “Accept All” or enable Advertising in Cookie Preferences. This category is off by default.

Managing your preferences:

• —You can review or change your cookie choices at any time by clicking Cookie Settings in the footer of our website.
• —Clicking "Reject Non-Essential" prevents analytics cookies from being set.
• —If your browser sends a Global Privacy Control (GPC) signal, advertising cookies are automatically blocked regardless of any other setting you have selected.
• —Your consent choice is saved in your browser's local storage and remains valid for one year.

6. Data Security

We take reasonable steps to protect your personal information. Our website uses HTTPS to encrypt data in transit. Access to our server and application data is controlled through server-level permissions. Database backups are stored using an encrypted backup system. Card details are entered directly on Stripe-hosted Checkout and are not received or stored by us.

No method of internet transmission or electronic storage is completely secure, and we cannot guarantee the absolute security of your information.

7. Data Retention

We generally retain personal information for the periods described below, unless a longer period is required by applicable law or is reasonably necessary to resolve disputes, prevent fraud, enforce agreements, or protect the security of our services.

8. International Data Transfers

We and our service providers may process personal information in jurisdictions outside your state or country of residence. Privacy and data protection laws in those jurisdictions may differ from those in your place of residence.

Our third-party service providers — including Stripe, Resend, Klaviyo, Google Analytics, Google Ads, and Cloudflare — may operate servers in the United States and other countries. Your personal information may be transferred to and processed in countries other than your country of residence.

9. Your Privacy Rights

Regardless of where you live, you may contact us to:

• —Access the personal information we hold about you
• —Correct inaccurate or incomplete information
• —Delete your personal information (subject to the retention obligations in Section 7)
• —Withdraw consent to marketing emails at any time using the unsubscribe link in any email we send
• —Withdraw consent to analytics or advertising cookies at any time via Cookie Settings in our website footer

To submit a request, email [email protected]. We aim to respond within 30 days. We may need to reasonably verify your identity before fulfilling a request. Some requests may be subject to legal exceptions or the retention obligations described in Section 7.

10. U.S. State Privacy Rights

Depending on where you reside, applicable law may provide you with rights regarding your personal information, including rights to access, correct, delete, or obtain a copy of your data.

Regardless of your location, we commit to the following:

• —Lunelle Intimates does not sell personal information.
• —With your consent, we use the Google Ads tag for advertising performance measurement. You may withdraw this consent at any time via Cookie Settings in our website footer. Advertising cookies are blocked automatically if your browser sends a Global Privacy Control (GPC) signal.
• —We respect recognised browser privacy signals, including Global Privacy Control (GPC), where applicable.
• —You may withdraw consent to analytics or advertising cookies at any time via Cookie Settings in our website footer.

To submit a privacy request, email [email protected]. We may need to reasonably verify your identity before fulfilling a request. Rights may be subject to legal exceptions and the record-retention obligations described in Section 7.

11. Children's Privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us at [email protected] and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Where required by applicable law, we will provide additional notice or request consent before material changes take effect.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: