Privacy Policy

Luna Labs ("we," "us," or "our") operates this website and is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.

This policy applies to all visitors of lunalabs.co and anyone who submits information through our contact form or email subscribe feature. It does not cover data shared as part of a client project engagement — that is governed by the confidentiality clause in our Terms & Conditions.

We only collect information you actively provide to us. We do not buy data, scrape data, or collect data without your knowledge.

Contact form: When you fill out the contact form, we collect your name, email address, phone number (optional), brand name, social following range, and the message you write. This is used solely to respond to your inquiry.

Email subscribe: When you subscribe via the footer form, we collect your email address and add it to our mailing list, hosted by Resend. You can unsubscribe at any time.

Analytics: We use Google Analytics 4 (GA4) to understand how visitors navigate the site. GA4 collects anonymised data including pages visited, time on site, device type, and approximate location (city/country level). No personally identifiable information is passed to GA4.

Cookies: GA4 sets first-party cookies to distinguish sessions. No third-party advertising cookies are used on this site.

We use the data we collect for the following purposes only:

• To respond to enquiries — contact form submissions are emailed directly to our team and used solely to follow up with you. • To send marketing emails — if you subscribed, we may send occasional updates about our services, insights, or offers. Every email includes a one-click unsubscribe link. • To improve the website — anonymised analytics data helps us understand which content is useful and how to improve the experience.

We do not use your data for automated decision-making or profiling.

We do not sell, rent, or trade your personal data. We share data only with the third-party services that power this site, and only to the extent necessary:

• Resend — handles transactional email delivery (contact form notifications) and manages the email subscriber list. Resend is GDPR-compliant. Their privacy policy is available at resend.com/privacy. • Google Analytics — processes anonymised site usage data. You can opt out of GA tracking via the Google Analytics Opt-out Browser Add-on or by using a browser with tracking protection enabled. • Vercel — hosts this website. Vercel may log server-side request metadata (IP address, user agent) for security purposes. Their privacy policy is available at vercel.com/legal/privacy-policy.

All third-party processors are contractually required to handle your data in accordance with applicable privacy law.

• Contact form submissions are retained in our email inbox for as long as necessary to manage the business relationship, then deleted. • Email subscriber data is retained until you unsubscribe, at which point your address is marked unsubscribed in Resend. You may request full deletion at any time. • Analytics data is retained for 14 months within GA4, per Google's default retention setting.

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you. • Correction — request that inaccurate data be corrected. • Deletion — request that your data be deleted ("right to be forgotten"). • Opt-out of marketing — unsubscribe from our mailing list at any time via the link in any email, or by contacting us directly. • Data portability — request your data in a portable format.

California residents (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

EU/UK residents (GDPR): Our legal basis for processing contact form data is legitimate interest (responding to your enquiry). Our legal basis for email marketing is your explicit consent at the point of subscription.

To exercise any of these rights, email us at hello@bylunalabs.com. We will respond within 30 days.

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. The site is served over HTTPS. Access to contact form data is restricted to Luna Labs team members.

No method of internet transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

This website is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data through this site, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

For significant changes, we will make reasonable efforts to notify subscribers via email.

For any questions, requests, or complaints regarding this Privacy Policy or how we handle your data, please contact:

Luna Labs Orange County, CA hello@bylunalabs.com

If you are an EU resident and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority.