Privacy Policy

Effective Date: July 18, 2025

At Lunandbag, your privacy is our priority. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our Services. By accessing or using lunandbag.com, you agree to the practices outlined below and consent to our handling of your information as described. This policy is part of our Terms of Use.

We may update this policy to reflect changes in our practices or legal requirements. We’ll notify you of significant updates via our website, email, or other means. Continued use of our Services after updates indicates your acceptance. If you opt out of legal notice emails or haven’t provided an email, you’re still responsible for reviewing changes.

Table of Contents

• • What This Policy Covers

• • Personal Data We Collect

• • Sources of Personal Data

• • Why We Collect and Share Data

• • How We Share Your Data

• • Cookies and Tracking

• • Data Security and Retention

• • Children’s Privacy

• • California Privacy Rights

• • Virginia Privacy Rights

• • Other State Privacy Rights

• • EU and UK Privacy Rights

• • Contact Us

What This Policy Covers

This Privacy Policy applies to personal data collected when you use lunandbag.com or our Services. “Personal Data” means information that identifies or relates to an individual, as defined by applicable privacy laws. This policy does not cover practices of entities we don’t own or control.

Personal Data We Collect

Below are the categories of personal data we’ve collected in the past 12 months, with examples and who we may share it with:

Category	Examples	Shared With
Profile/Contact	Name, email, phone, address	Service Providers, Ad Partners, Analytics, Authorized Parties
Payment	Card type, last 4 digits, billing details	Payment Processors (Shopify, PayPal, Afterpay)
Commercial	Purchase history, profiles	Service Providers, Ad Partners, Analytics, Authorized Parties
Device/IP	IP address, device/browser type	Service Providers, Ad Partners, Analytics
Web Analytics	Page interactions, referring sites, search history	Service Providers, Ad Partners, Analytics
Social Media	Email from social accounts	Service Providers, Ad Partners, Analytics, Business Partners, Authorized Parties
Demographics	Age, zip code, gender	Service Providers, Ad Partners, Analytics, Business Partners, Authorized Parties
Professional	Resume, job title, work history	Service Providers
Geolocation	IP-based location	Service Providers, Ad Partners, Analytics
Photos/Videos	Images or recordings of you	Service Providers, Ad Partners, Authorized Parties
Inferences	User attributes, behavior insights	Service Providers, Ad Partners, Analytics, Business Partners, Authorized Parties
Other Info	Emails, texts, or communications you send	Service Providers, Ad Partners, Analytics, Business Partners, Authorized Parties

Sources of Personal Data

We collect data from:

• • You: When you create an account, use our Services, fill out forms, respond to surveys, or contact us. We also collect data automatically via cookies or location-enabled browsers.

• • Third Parties: Analytics providers, ad partners, data brokers, or social networks (e.g., when you sign in via third-party accounts).

Why We Collect and Share Data

We collect and share personal data to:

• • Deliver Services: Manage accounts, process orders, and provide support.

• • Personalize Experiences: Tailor content and communications to your preferences.

• • Market Services: Promote lunandbag.com and show relevant ads.

• • Ensure Security: Protect against fraud and maintain safety.

• • Meet Legal Needs: Comply with laws, enforce terms, and resolve disputes.

We won’t use your data for significantly different purposes without notice.

How We Share Your Data

We share personal data with:

• • Service Providers: For hosting, payments (e.g., Shopify, PayPal, Afterpay), support, and delivery.

• • Ad and Analytics Partners: For marketing and usage insights.

• • Business Partners: For joint promotions or services.

• • Authorized Parties: Third parties you access via our Services or social media.

• • Legal Requirements: To comply with laws or protect rights.

• • Business Transfers: During mergers, acquisitions, or similar events.

We may share anonymized or aggregated data for business purposes, ensuring it cannot identify you.

Cookies and Tracking

We use cookies, pixel tags, and similar tools to enhance your experience, analyze usage, and deliver ads:

• • Essential Cookies: Enable core features like logins.

• • Functional Cookies: Save your preferences.

• • Performance/Analytics Cookies: Track site usage (e.g., Google Analytics).

• • Advertising Cookies: Show relevant ads.

Manage cookies via your browser or our Cookie Settings tool. We don’t support “Do Not Track” signals.

Data Security and Retention

We use robust security measures to protect your data, but no method is 100% secure. Protect your account by securing your credentials and signing out after use. We retain data only as long as needed for our Services or legal obligations, e.g.:

• • Profile data: Kept while your account is active.

• • Order history: Retained for business and reporting needs.

Children’s Privacy

We do not knowingly collect data from children under 16. If we discover such data, we’ll delete it promptly. Contact us at support@lunandbag.com if you believe a child under 16 has provided data.

California Privacy Rights

Under the California Privacy Rights Act (CPRA), California residents can:

• • Access: Learn about the data we collect, use, or share.

• • Delete: Request deletion, subject to exceptions.

• • Correct: Fix inaccurate data.

• • Opt-Out: Stop data sales or sharing for ads via our Do Not Sell/Share form, email (support@lunandbag.com), or Global Privacy Control signals.

We may have shared data like Profile, Commercial, or Device/IP with ad networks for analytics and ads. We do not sell data of minors under 16.

Virginia Privacy Rights

Under the Virginia Consumer Data Protection Act (VCDPA), Virginia residents can:

• • Access: Confirm and view your data.

• • Correct: Fix inaccuracies.

• • Delete: Remove your data.

• • Portability: Get data in a machine-readable format.

• • Opt-Out: Stop targeted advertising via our form or browser settings.

To appeal a denied request, email support@lunandbag.com with “VCDPA Appeal”

Other State Privacy Rights

• • California: Prevent third-party marketing disclosures by emailing support@lunandbag.com.

• • Nevada: Opt out of data sales by emailing support@lunandbag.com with “Nevada Do Not Sell Request.”

EU and UK Privacy Rights

Under the GDPR, EU, UK, and related residents have rights to:

• • Access: View your data.

• • Rectify: Correct inaccurate data.

• • Erase: Delete your data.

• • Portability: Get data in a machine-readable format.

• • Object/Restrict: Limit data use.

• • Withdraw Consent: Revoke consent.

• • Complain: Contact your supervisory authority.

Data is hosted in the U.S., and we comply with EU-U.S. and Swiss-U.S. Data Privacy Frameworks. For DPF complaints, contact support@lunandbag.com

Contact Us

For questions or to exercise your rights, reach us at:

Website: www.lunandbag.com

Email: support@lunandbag.com