Last updated: October 22, 2025

 

This Privacy Policy explains how LUNATIQUE UNICORN LTD (operating as Lunatique) processes and protects your personal data when you visit and interact with luna-tique.net (the “Website”). We are committed to maintaining your privacy and protecting your personal information in compliance with the General Data Protection Regulation (GDPR) and Scottish law.

By using our Website and making purchases, you agree to the collection, use, and processing of your personal data as described in this policy.

 

1. Information We Collect

1.1 Personal Data
When you interact with our Website, we may collect the following personal data:

• Contact Information: such as your name, email address, and phone number.
  
• Order Information: details of the products you purchase, your delivery address, and other transaction-related data.
  
• Account Information: if you create an account, we may collect your username, password, and preferences.
  
  

1.2 Non-Personal Data
We may also collect non-personally identifiable information, such as your browser type, operating system, device information, and browsing history for analytical and operational purposes.

 

2. How We Use Your Data

2.1 To Provide Our Services
We use your personal data to process and fulfill your orders, deliver products, and provide customer support. This includes:

• Processing payments via third-party providers.
  
• Communicating with you about your order status, shipping, and customer service inquiries.
  
  

2.2 For Marketing and Promotions
With your consent, we may use your contact information to send you promotional emails, updates on new products, and special offers. You can opt out of marketing communications at any time.

2.3 To Improve Our Website and Services
We may use your non-personal data for website analytics, understanding customer preferences, and enhancing user experience.

 

3. Data Security

3.1 Security Measures
We employ a variety of security protocols to safeguard your personal data when you make a purchase or interact with our Website. These measures include:

• Data Encryption: We encrypt your data during transmission to protect it from unauthorized access.
  
• Access Controls: We enforce strict internal controls to limit access to personal data only to authorized personnel.
  
• Ongoing Security Evaluations: We regularly evaluate our security measures to prevent unauthorized access, modification, disclosure, or destruction of your personal data.
  
  

4. GDPR and Data Protection

4.1 Compliance with GDPR
We adhere to the General Data Protection Regulation (GDPR) by implementing appropriate technical and organizational measures to ensure the confidentiality and security of your personal data. This includes:

• Conducting regular audits to verify our compliance.
  
• Staff Training to ensure that all personnel understand data protection obligations.
  
• Following the key data protection principles, such as data minimization and transparency.
  
  

5. Extra-EEA Transfers of Personal Data

5.1 Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure these transfers comply with applicable data protection laws by employing sufficient safeguards, such as:

• Standard Contractual Clauses (SCCs) or
  
• Other legal mechanisms to protect your data when it is transferred outside the EEA.

 

6. Strong Customer Authentication (SCA)

6.1 Security of Transactions
We meet the requirements of Strong Customer Authentication (SCA) to enhance the security of online transactions. SCA involves using two or more verification elements:

• Knowledge: something the customer knows (e.g., password).
  
• Possession: something the customer has (e.g., phone).
  
• Inherence: something the customer is (e.g., fingerprint).
  
  

This ensures that your identity is securely confirmed during payment, in line with PSD2 regulations.

 

7. PSD2 Requirements

7.1 Compliance with PSD2
We comply with the Payment Services Directive 2 (PSD2), which requires the implementation of SCA for most online card transactions. This two-factor authentication process must be completed before finalizing a payment, enhancing security and protecting your payment details.

 

8. Payment Data

8.1 Third-Party Payment Providers
We do not collect or store any of your payment data. All payments are processed by trusted third-party payment providers. These providers comply with their own privacy and security policies, which you should review before making a payment.

We are not responsible for how third-party providers handle your payment details but ensure they meet required security standards to protect your information.

 

9 Your Rights

9.1 Under GDPR, you have the following rights concerning your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
  
• Right to Rectification: You can ask us to correct any inaccuracies in your data.
  
• Right to Erasure: You can request that we delete your personal data, subject to certain conditions.
  
• Right to Restriction: You can request that we restrict the processing of your personal data under certain circumstances.
  
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used format.
  
• Right to Object: You can object to the processing of your personal data for certain purposes, such as direct marketing.
  
  

9.2 To exercise any of these rights, please contact us at [email protected].

 

10. Changes to This Privacy Policy

10.1 We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

 

11. Contact Us

If you have any questions or concerns about how we handle your personal data, please contact us:

[email protected]
LUNATIQUE UNICORN LTD
5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN