Privacy Policy

Last updated: 31 August 2026

Effective date: 31 August 2026

Deluna Style ("we", "us", or "our") operates delunastyle.com and any related mobile applications (together, the "Service"). We sell eyewear — frames, sunglasses, prescription and contact lenses, and accessories — and ship to customers in many countries.

This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to visitors, account holders, and customers wherever you are located.

By using the Service you accept the practices described here. If you do not agree, please do not use the Service.

1. Who we are

Data controller: Deluna Style

Registered address: Add your registered trading address here before publishing.

Commercial licence number: Add your commercial licence or trade registration number here before publishing.

Email: privacy@delunastyle.com

Customer service: support@delunastyle.com

Phone: Add your customer service phone number here before publishing.

We have not appointed a Data Protection Officer, as we are not required to do so. Privacy questions are handled directly by our management team at the email above. Customers in the European Economic Area and the United Kingdom may contact us at the same address.

2. Information we collect

2.1 Information you give us

Category	Examples
Identity and contact	Name, email address, phone number, date of birth where required
Delivery and billing	Shipping address, billing address, country, postal code, recipient name and phone for courier contact
Account	Username, password (stored in hashed form), saved addresses, wishlist, order history
Order	Products purchased, size and fit selections, engraving or personalisation text, gift messages
Payment	Payment method type, last four digits of a card, transaction reference. We do not store full card numbers — see section 6
Customer service	Messages, chat transcripts, photos you send us about a return or warranty claim
Marketing	Newsletter sign-up, communication preferences, competition entries, referral details
Reviews and content	Product reviews, ratings, photos, and any social media handle you connect

2.2 Prescription and eye-health information

If you order prescription lenses, contact lenses, or reading glasses, we may collect:

• Your spectacle or contact lens prescription (sphere, cylinder, axis, addition, prism, base curve, diameter)
• Pupillary distance and other fitting measurements
• The name and contact details of your optometrist or prescribing practitioner, where you supply them or where we need to verify a prescription
• A scan or photograph of a prescription document you upload
  

In several jurisdictions this counts as health data or a special category of personal data. We treat it accordingly:

• We collect it only to dispense and verify your order, to meet regulatory requirements, and to handle remakes, warranty claims and returns.
• Where the law requires it, we process it on the basis of your explicit consent, which you may withdraw at any time — though this may prevent us from fulfilling an open order.
• We do not use prescription or eye-health data for advertising, profiling, ad targeting, or sale to third parties.
• We share it only with the optical laboratory that produces your lenses, the practitioner verifying your prescription, and regulators where legally required.
  

2.3 Virtual try-on and fit tools

If you use a virtual try-on, face-measurement or frame-fit feature on our site, we process images of your face and derived facial measurements.

• Processing is on the basis of your consent, requested before your camera is accessed.
• Images are processed on your own device. They are not transmitted to our servers and we do not retain them.
• Facial data is never used for identification, advertising, or profiling.
• You can decline this feature and shop normally.
  

Some jurisdictions, including Illinois and Texas in the United States, impose specific rules on biometric identifiers. Where those rules apply, we obtain consent before processing, do not retain biometric data after your session ends, and never sell or profit from it.

2.4 Information collected automatically

IP address, approximate location derived from IP, device type, operating system, browser type and language, referring URL, pages viewed, time on page, search terms used on the site, products viewed and added to cart, and crash or diagnostic data.

2.5 Information from third parties

• Payment providers and fraud-screening services — authorisation results and risk scores
• Couriers and customs brokers — delivery status, address corrections, clearance issues
• Advertising and analytics platforms — aggregated campaign and audience data
• Social login providers, if you choose to sign in that way — name, email, profile image
• Marketplaces or retail partners, where you bought through them
  

3. Why we use your information, and our legal bases

Purpose	Legal basis for customers in the EEA and UK
Create and manage your account	Performance of a contract
Process orders, take payment, arrange delivery	Performance of a contract
Verify and dispense prescriptions	Explicit consent; compliance with a legal obligation
Clear customs and complete export and import formalities	Legal obligation; performance of a contract
Handle returns, exchanges, warranty and repairs	Performance of a contract; legal obligation
Customer support	Performance of a contract; legitimate interests
Fraud prevention and site security	Legitimate interests; legal obligation
Analytics and product improvement	Legitimate interests; consent where cookies require it
Marketing emails, SMS and WhatsApp messages	Consent, or legitimate interests for existing customers where permitted
Personalised advertising and remarketing	Consent
Accounting, tax and statutory records	Legal obligation
Defending legal claims	Legitimate interests

Where we rely on legitimate interests, we have assessed that our interest does not override your rights and freedoms. You can ask us for a summary of that assessment.

4. International shipping and cross-border transfers

We ship internationally, and this has direct privacy consequences you should be aware of.

Customs and carriers. To move a parcel across a border we must give the carrier, the customs authorities of the destination country, and sometimes a customs broker: recipient name, full address, phone number, email address, order contents, declared value, HS tariff codes, and — for some destinations — a national identity number, tax identification number, or personal customs code.

Destinations that currently require an identity or tax number for personal imports include Brazil (CPF), South Korea (personal customs clearance code), Turkey (TCKN), India (PAN or Aadhaar for some shipments), China (national ID for cross-border e-commerce), Taiwan, Chile (RUT), Saudi Arabia, Qatar, and Italy and Norway for certain tax registrations. We collect these numbers only where the destination country requires them, and pass them only to the parties handling clearance. This list changes as customs rules change.

Duties and taxes. Where duties and import taxes are calculated or collected at checkout, our tax and shipping vendors process your address and order data to work them out.

Where your data goes. Your information is stored and processed in the State of Kuwait and the United Arab Emirates, and in any country where our service providers operate — principally the European Economic Area, the United Kingdom, the United States, Canada, Ireland and India. Data protection laws in those countries may differ from those in your own.

Safeguards. For transfers out of the EEA, the UK or Switzerland to countries without an adequacy decision, we use the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where relevant, and appropriate technical and organisational measures. Where a transfer is strictly necessary to perform your contract — for example, sending your address to a courier in the destination country — we may also rely on that derogation. You can request a copy of the safeguards we use by writing to privacy@delunastyle.com.

5. Cookies and similar technologies

We use cookies, pixels, SDKs, local storage and similar tools.

• Strictly necessary — cart, checkout, login session, load balancing, fraud prevention. These cannot be switched off.
• Functional — language, currency, country, recently viewed products.
• Analytics — how the site is used, which pages fail, which products are found.
• Advertising — measuring campaigns and showing you relevant ads on other sites.
  

Where required by law, including the EU ePrivacy rules and similar regimes elsewhere, we ask for your consent before setting non-essential cookies. You can change your choices at any time through the Cookie settings link in our footer. You can also block cookies in your browser settings, though parts of the site may then stop working.

The tools we currently use include Google Analytics 4, Google Ads, Meta Pixel, TikTok Pixel, Snapchat Pixel, Klaviyo and Hotjar. A full, current list showing each cookie's purpose and lifespan is available in our cookie banner.

Do Not Track. Browsers send DNT signals in inconsistent ways and there is no agreed standard, so we do not respond to them. We do honour the Global Privacy Control (GPC) signal as an opt-out of sale or sharing where applicable law requires it.

6. Payments

Payments are handled by third-party processors, including KNET, Visa, Mastercard, American Express, Apple Pay, Google Pay, PayPal, Tabby and Tamara. Card details are entered directly into their environment. We receive only a token, the transaction result, and limited details such as card brand and the last four digits.

Our processors are PCI-DSS compliant. Their handling of your information is governed by their own privacy policies, which we encourage you to read.

Buy-now-pay-later providers may run their own eligibility or credit checks. Those checks are carried out by them as their own data controller, not by us.

7. Who we share information with

• Optical laboratories and lens manufacturers — to produce prescription lenses
• Couriers, freight forwarders and customs brokers — to deliver and clear your parcel
• Payment processors and fraud-screening providers
• IT, hosting, email, SMS and helpdesk providers
• Analytics and advertising platforms, subject to your cookie choices
• Review platforms, if you choose to leave a review
• Professional advisers, auditors, insurers and regulators
• A buyer or successor, in a merger, acquisition or restructuring
• Law enforcement or courts, where we are legally required to disclose or must defend legal claims
  

We require service providers to act only on our instructions and to keep your data secure. We do not sell your personal information for money. Some advertising cookies may count as "sharing" or "selling" under certain United States state laws — see section 10.

8. How long we keep information

Data	Retention
Order and transaction records	10 years, for tax and accounting law
Prescription records	7 years from the date of the last order using that prescription
Account data	While your account is active, then 24 months after closure
Marketing consents and opt-outs	Until you withdraw consent; opt-out records kept indefinitely so we do not contact you again
Customer service correspondence	24 months
Website analytics	14 months
Virtual try-on images	Not retained — processed on your device and discarded when your session ends
Fraud and security logs	12 months

After these periods we delete or irreversibly anonymise the data.

9. Your rights

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data, sometimes called the right to be forgotten
• Restrict or object to processing, including profiling and direct marketing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time, without affecting processing already carried out
• Not be subject to a decision based solely on automated processing that has legal or similarly significant effects
• Non-discrimination for exercising any of these rights
  

To exercise any of them, email privacy@delunastyle.com or write to us at the address in section 1. We respond within 30 days, or the shorter period your local law requires, and may ask you to verify your identity first. There is no charge unless a request is manifestly unfounded or excessive.

You can unsubscribe from marketing at any time using the link in any email, by replying STOP to an SMS, or by updating your account preferences.

Complaints. If you are in the EEA or UK you may complain to your national data protection authority. Wherever you are, we would appreciate the chance to resolve the issue first.

10. Region-specific notices

European Economic Area and United Kingdom. Sections 3, 4 and 9 set out our legal bases, our transfer safeguards, and your rights under the GDPR and UK GDPR.

California (CCPA and CPRA). We collect the categories of personal information listed in section 2, for the purposes in section 3, and disclose them to the categories of recipients in section 7. You may request to know, delete, or correct your information, and to opt out of the sale or sharing of personal information and of targeted advertising, using the Your Privacy Choices link in our footer or by emailing privacy@delunastyle.com. We honour Global Privacy Control signals. We do not knowingly sell the personal information of consumers under 16. You may use an authorised agent, and we will not discriminate against you for exercising your rights.

Other United States states, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and Delaware: you have comparable rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising and profiling. If we refuse a request you may appeal by writing to privacy@delunastyle.com with "Privacy appeal" in the subject line.

Gulf Cooperation Council. Where the personal data laws of Kuwait, the United Arab Emirates (Federal Decree-Law No. 45 of 2021), Saudi Arabia (PDPL), Qatar, Bahrain or Oman apply, we process personal data in line with those requirements, including consent, purpose limitation, and restrictions on cross-border transfer.

Other jurisdictions. Where they apply, we honour the equivalent rights of access, correction, deletion and objection under Canada's PIPEDA, Australia's Privacy Act, Brazil's LGPD, India's Digital Personal Data Protection Act, Japan's APPI, South Korea's PIPA, Switzerland's revised FADP, and Turkey's KVKK.

If there is a conflict between this policy and a mandatory local law, the local law prevails for residents of that jurisdiction.

11. Security

We use TLS encryption in transit, encryption at rest for sensitive fields, access controls granted on a need-to-know basis, hashed passwords, activity logging, and regular reviews of our service providers. No system is completely secure, so we cannot guarantee absolute security.

Please keep your password confidential and tell us immediately at privacy@delunastyle.com if you suspect unauthorised access to your account. Where a breach is likely to result in a risk to your rights, we will notify you and the relevant authority within the timeframes the law requires.

12. Children

The Service is intended for people aged 18 and over. We do not knowingly collect personal information from children under 16, or the minimum age set by the law of your country, without verifiable parental consent. Children's eyewear is purchased by an adult, and we ask that the adult provide any information required. If you believe a child has given us personal data, contact privacy@delunastyle.com and we will delete it.

13. Links to other sites

The Service contains links to third-party sites, including brand partners, social platforms and payment providers. We are not responsible for their content or their privacy practices. Please read their policies before providing information.

14. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will change, and the revised version will be posted on this page. If the changes are significant, we will notify you by email or by a prominent notice on the site before they take effect. Please review this page periodically.

15. Contact us

Deluna Style

Privacy: privacy@delunastyle.com

Customer service: support@delunastyle.com

Website: delunastyle.com