Privacy policy

Lunaria runs this shop and decides what happens to the personal data collected through it. If you want to reach the people who can actually answer a question about your data, write to hello@lunaria.id.

This policy covers lunaria.id and the orders placed through it. It does not cover other sites we link to.

When you place an order: your name, email address, phone number, delivery address and anything you write in the note field. When you create an account we also keep your password as a cryptographic hash, which cannot be turned back into the password itself.

When you pay: we record the payment reference you use so we can match your transfer to your order. We do not see or store card numbers or bank credentials.

When you browse: with your permission, Google Analytics records which pages you visited, roughly where in the world you are, and what kind of device you used. Without your permission it records nothing that identifies you.

Our hosting keeps short-lived technical logs of requests, including IP addresses, so we can keep the site working and spot abuse.

To perform the contract you entered when ordering: your name, address, order contents and payment reference. We cannot send you a parcel without them.

Because you consented: analytics cookies, and marketing email if you asked for it. You can take that consent back at any time, and doing so does not affect anything that happened before.

Because we have a legitimate interest: keeping the site secure, preventing fraud, and keeping records of what we sold.

Because the law requires it: sales and tax records we have to keep for a set number of years.

The shop needs a small number of cookies and similar storage to work at all — keeping you signed in and remembering what is in your bag. These are set because the site cannot function without them, and cannot be switched off separately from using the site.

Google Analytics is different. It loads with every category of storage denied and stays that way until you accept. If you decline, or simply never answer, no analytics cookie is written and no identifier is sent.

You can change your mind at any time by clearing this site's data in your browser, which brings the choice back.

The delivery company that carries your parcel receives your name, address and phone number, because it cannot be delivered otherwise.

Our hosting and infrastructure providers process data on our behalf, under contracts that stop them using it for their own purposes.

Google processes analytics data on our behalf when you have consented to it.

We do not sell your personal data, and we do not pass it to anyone for their own marketing.

Our servers and service providers are partly outside Indonesia, so your data may be processed abroad. Where that happens we rely on contractual protections requiring a level of protection comparable to the one you have here.

Order records: for as long as tax and accounting law requires us to keep them.

Account details: until you ask us to close the account, after which we delete what we are not legally required to retain.

Analytics: for the retention period set in Google Analytics, currently the shortest option available to us.

Technical logs: a short period, measured in weeks, then discarded.

You can ask for a copy of the data we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to stop a particular use, or ask for it in a portable form. You can withdraw consent to analytics or marketing whenever you like.

Write to hello@lunaria.id and we will answer. If you are in Indonesia and you are not satisfied with our answer, you can complain to the authority responsible for personal data protection. If you are in the European Union, you can complain to your national data protection authority.

This shop is not intended for children, and we do not knowingly collect data from them. If you believe a child has given us personal data, write to hello@lunaria.id and we will remove it.

If this policy changes we will update the date at the top of this page. Where a change materially affects you, we will say so more visibly than that.