Privacy Policy

Last updated: 15th January 2026

Data Controller Information

lunarcresters AS is the data controller responsible for your personal data. You can contact us using the contact information provided at the end of this policy.

Data Collection

The data we collect depends on how you interact with our website and services. We collect information that you provide directly to us, information we collect automatically when you use our services, and information from third-party sources where permitted by law.

Information You Provide to Us

• Contact Information: Name, email address, phone number, company name, and postal address
• Account Information: Username, password, and account preferences
• Business Information: Company details, VAT numbers, and business requirements
• Communication Data: Messages, enquiries, and correspondence with our team
• Service Data: Information related to your use of our fulfillment services

Information We Collect Automatically

• Technical Data: IP address, browser type, operating system, and device information
• Usage Data: Pages visited, time spent on our website, and interaction patterns
• Location Data: General geographic location based on IP address
• Cookie Data: Information collected through cookies and similar technologies

How We Use Your Information

We use the personal data we collect for various purposes based on legitimate business interests, legal obligations, and your consent where required. Our primary uses include providing and improving our services, communicating with you, and ensuring the security of our operations.

Service Provision

• Processing and fulfilling your orders and service requests
• Managing your account and providing customer support
• Communicating about your services and account status
• Processing payments and managing billing

Business Operations

• Improving our website, services, and customer experience
• Conducting business analysis and market research
• Ensuring security and preventing fraud
• Complying with legal and regulatory requirements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in specific circumstances and with appropriate safeguards in place.

Service Providers

We work with trusted third-party service providers who assist us in operating our business, including:

• Shipping and logistics partners
• Payment processing services
• Cloud hosting and IT services
• Analytics and marketing platforms

Legal Requirements

We may disclose your information when required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or that of others.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data and the purpose for processing.

Retention Periods

• Customer Data: Retained for the duration of the business relationship plus 7 years for accounting purposes
• Marketing Data: Retained until consent is withdrawn or for 3 years of inactivity
• Website Analytics: Retained for 26 months as per Google Analytics default settings
• Communication Records: Retained for 3 years for customer service purposes

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data. You can exercise these rights by contacting us using the contact information provided below.

Your Data Protection Rights Include:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in certain situations
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or transfers to countries with adequacy decisions.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us using the following contact information:

Supervisory Authority

If you believe we have not addressed your data protection concerns adequately, you have the right to lodge a complaint with the relevant supervisory authority. In Denmark, this is the Danish Data Protection Agency (Datatilsynet).