Privacy Policy
Last updated: 2 September 2026
This Privacy Policy explains how Luna Victoria Studio collects, uses and protects personal information when you visit lunavictoriastudio.com, place an order, create an account, submit an enquiry or subscribe to studio updates.
Who is responsible for your data
The data controller is:
Luna Victoria Studio
Saltoniskiu street 57, Vilnius 08105
Lithuania
Email: hello@lunavictoriastudio.com
Personal information we collect
Depending on how you use the website, we may collect:
- your name and contact details, including your email address and telephone number;
- billing and delivery addresses;
- order details, product selections and customisation requests;
- payment and transaction information;
- account information, if you create a customer account;
- messages, enquiries and other communications you send to us;
- newsletter subscription and marketing preferences;
- technical information, including your IP address, browser, device and website-usage information;
- cookie and analytics information; and
- photographs, flowers, materials or other information you provide for personalised commissions.
We do not directly store complete payment-card details. Payments are processed securely by the payment provider selected at checkout.
How we use your information
We process personal information to:
- process, make, deliver and manage orders;
- communicate with you about an order or enquiry;
- arrange delivery, returns, repairs and refunds;
- provide customer service;
- manage customer accounts;
- develop personalised and commissioned work;
- comply with accounting, tax, consumer-protection and other legal obligations;
- prevent fraud, misuse and security incidents;
- operate, maintain and improve the website;
- understand how visitors use the website; and
- send studio news or marketing communications when you have chosen to receive them.
Legal bases for processing
Depending on the circumstances, we process personal information because:
- it is necessary to fulfil a contract with you or take steps at your request before entering into a contract;
- it is necessary to comply with a legal obligation;
- you have given consent, for example when subscribing to marketing communications or accepting optional cookies;
- it is necessary for our legitimate interests in operating, protecting and improving the business and website, provided those interests do not override your rights; or
- it is necessary to establish, exercise or defend legal claims.
Where processing is based on consent, you may withdraw that consent at any time.
Orders and payments
When you place an order, we use the information provided to process payment, produce your item, communicate with you and arrange delivery.
Payments may be processed by third-party payment services, including Stripe and Google Pay where available. These providers process payment information under their own privacy policies and security procedures.
Certain information is required to complete an order. If you do not provide it, we may be unable to accept the order or arrange delivery.
Delivery
We share the information necessary to deliver your order with postal services, couriers, shipping partners and customs authorities where applicable. This may include your name, delivery address, telephone number, email address and information required for customs documentation.
Contact forms and enquiries
When you contact us through the website or by email, we use the information you provide to respond to your enquiry and, where relevant, prepare a quotation or discuss a commission.
Website forms may be operated through tools including SureForms and Contact Form 7.
Studio updates and marketing
If you subscribe to Studio Notes or other marketing communications, we use your email address to send the updates you requested. Subscription services may be provided through Hostinger Reach.
Marketing is based on your consent. You can unsubscribe at any time using the link in an email or by contacting hello@lunavictoriastudio.com. Withdrawing consent does not affect processing that occurred before withdrawal.
Cookies and website measurement
The website uses cookies and similar technologies.
Necessary cookies support functions such as the shopping basket, checkout, customer accounts, security and website operation. These cookies are required for the website to function properly.
Optional measurement technologies may be provided through Google services, including Google Site Kit and the Google tag. They may collect information about visits, interactions, devices and traffic sources to help us understand and improve website performance.
Where consent is required, optional cookies and similar technologies are controlled through the website’s cookie-consent settings. You can also control cookies through your browser settings, although blocking necessary cookies may prevent parts of the shop from functioning correctly.
Who receives your information
We may share personal information only where reasonably necessary with:
- website-hosting and technical-service providers, including Hostinger;
- payment processors;
- postal services, couriers, shipping partners and customs authorities;
- website form and email-subscription providers;
- Google and other website-measurement providers where enabled;
- accountants, legal advisers or other professional advisers;
- fraud-prevention and security providers; and
- public authorities where disclosure is legally required.
These recipients may act as independent data controllers or as processors acting on our instructions.
We do not sell personal information.
International data transfers
Some service providers may process information outside Lithuania or the European Economic Area.
Where personal information is transferred to a country that has not been recognised as providing an adequate level of protection, we rely on appropriate safeguards where required, such as European Commission standard contractual clauses or another lawful transfer mechanism.
How long we keep information
We retain personal information only for as long as necessary for the purpose for which it was collected, including:
- order, payment, invoice and transaction records for the period required by applicable tax, accounting and consumer-protection law;
- customer-service, return and dispute information for as long as reasonably necessary to resolve the matter or establish legal claims;
- enquiries for a reasonable period after the last communication;
- account information while the account remains active and for a reasonable period afterwards;
- commission details and customer-supplied materials for as long as necessary to complete and document the agreed work;
- newsletter information until you unsubscribe or withdraw consent; and
- technical and security records for a limited period necessary to protect and maintain the website.
Information may be retained for longer where required by law or necessary in connection with a dispute or legal claim.
Your data-protection rights
Subject to the conditions provided by applicable law, you may have the right to:
- receive information about how your personal data is used;
- request access to your personal data;
- correct inaccurate or incomplete information;
- request deletion of your information;
- restrict certain processing;
- object to processing based on legitimate interests;
- object to direct marketing;
- receive certain information in a portable format;
- withdraw consent at any time; and
- lodge a complaint with a data-protection authority.
These rights are not absolute. For example, we may need to retain certain information to comply with legal obligations or establish or defend legal claims.
To exercise your rights, contact hello@lunavictoriastudio.com. We may need to verify your identity before responding. We will respond within the period required by applicable law.
Complaints
If you have concerns about how your personal information is handled, please contact hello@lunavictoriastudio.com first so that we can try to resolve them.
You may also lodge a complaint with the Lithuanian State Data Protection Inspectorate:
State Data Protection Inspectorate
L. Sapiegos str. 17
LT-10312 Vilnius
Lithuania
Website: https://vdai.lrv.lt/en/
Security
We use reasonable technical and organisational measures to protect personal information. However, no website, transmission method or storage system can be guaranteed to be completely secure.
Children
The website is not directed at children, and we do not knowingly collect personal information from children for marketing purposes.
Changes to this policy
We may update this Privacy Policy when the website, services or legal requirements change. The latest version will be published on this page with its updated date.
Contact
For privacy-related questions or requests, contact: