Privacy Policy

Privacy Policy

Last updated: 12/12/2025

This Privacy Policy explains how Ariluna collects, uses, stores, and protects personal data when you visit our website or make a purchase.

By using this website, you acknowledge and agree to the terms described in this policy.

1. Data Controller

The data controller responsible for your personal data is: Ariluna 

2. Personal Data We Collect

We may collect the following categories of personal data:

2.1 Data Provided Directly by the User

  • First and last name

  • Email address

  • Shipping and billing address

  • Payment information (processed securely by payment providers; we do not store card details)

  • Phone number

  • Account login information (if you create an account)

2.2 Automatically Collected Data

While browsing the website, we collect:

  • IP address

  • Device information

  • Browser type

  • Pages visited and browsing behaviour

  • Cookies and tracking technologies (see Cookie Policy below)

2.3 Data from Third Parties

  • Payment processors (PayPal, Stripe, etc.)

  • Analytics services

  • Social media platforms (if you choose to interact with our profiles)

3. How We Use Your Data

We process your data for the following purposes:

  • To process and deliver your orders

  • To manage payments and prevent fraud

  • To provide customer support

  • To create and manage your account

  • To send order updates and service communications

  • To improve website performance and user experience

  • To send marketing emails or promotions (only with your explicit consent)

  • To comply with legal obligations

We do not sell personal data to third parties.

4. Legal Basis for Processing

We process data based on:

  • Contract performance (orders, payments, account management)

  • Legitimate interest (website security, analytics, fraud prevention)

  • Legal obligations (tax laws, accounting)

  • Consent (newsletter, marketing cookies)

5. Data Sharing

We may share personal data with:

  • Payment processors

  • Shipping and logistics partners

  • IT and hosting providers

  • Marketing and analytics services

  • Legal or governmental authorities when required by law

All third parties operate under GDPR-compliant agreements.

6. Data Retention

We store your data only for the time necessary to fulfil the purposes for which it was collected:

  • Order and billing data: 10 years (legal requirement)

  • Account data: until account deletion

  • Marketing data: until you withdraw consent

  • Cookies: according to their specific lifespan (see Cookie Policy)

7. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

  • File a complaint with your local Data Protection Authority

Requests can be sent to: [email protected]

8. Data Protection and Security

We adopt technical and organisational measures to protect your data from:

  • Unauthorised access

  • Loss or misuse

  • Alteration or disclosure

However, no electronic transmission or storage system is completely secure.

9. International Data Transfers

If data is transferred outside the EU, we ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)

  • Transfers to countries deemed adequate by the European Commission

10. Changes to This Privacy Policy

Ariluna may update this policy at any time. The latest version will always be available on this page.