Privacy Policy

Last updated: 19 October 2026

1. Data controller

The controller is SIA Lunvia, registration number 40203628301, VAT number LV40203628301, Stabulu iela 65, Medemciems, LV-2127, Latvia. Privacy enquiries can be sent to hello@luflosoaps.shop.

2. Data we may collect

• Contact and identity data, such as name, email address and telephone number.
• Order and delivery data, such as billing and shipping addresses, selected products, messages and personalization details.
• Payment status and transaction references. Lu.Flo should not receive or store complete payment-card details when payment is handled by a payment provider.
• Communications, support requests, returns and complaint information.
• Newsletter consent, subscription source, date and preference records.
• Technical data needed for security, website operation and consent preferences.

3. Why we process data and our legal bases

• Contract: to process orders, take payment, arrange delivery, send confirmations and invoices, provide customer support and handle returns.
• Legal obligation: to keep accounting and tax records, respond to lawful requests and meet consumer-protection duties.
• Consent: to send newsletters and marketing messages, and to use non-essential cookies or analytics where applicable.
• Legitimate interests: to protect the website, prevent fraud, maintain records of customer service and improve operations where these interests do not override individual rights.

4. Who may receive data

Data may be shared only as needed with payment providers, delivery companies, hosting and technical providers, email and newsletter services, accounting providers, professional advisers and public authorities where required by law. Providers acting for us must process data under appropriate instructions and safeguards.

5. International transfers

If a provider processes data outside the European Economic Area, we will use an applicable lawful transfer mechanism, such as an adequacy decision or approved contractual safeguards. Specific providers will be listed when the production services are selected.

6. Retention

We keep order, invoice and accounting data for the period required by Latvian law. Support and complaint records are kept only as long as needed to resolve the matter and establish or defend legal claims. Newsletter data is kept until consent is withdrawn or the list is no longer used, subject to a limited suppression record where needed to respect an unsubscribe request.

7. Newsletter and promotional discount

Newsletter signup is voluntary and separate from placing an order. We record consent and use the supplied email address to send Lu.Flo news, gift ideas and offers. A signup discount may be subject to stated conditions. Every marketing email will provide an unsubscribe option, and consent can also be withdrawn by contacting us.

8. Your rights

Subject to the GDPR and applicable law, you may request access, correction, deletion, restriction, objection or data portability, and may withdraw consent at any time. You may also lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or the supervisory authority in your country.

9. Security and automated decisions

We use proportionate technical and organisational measures to protect personal data. Lu.Flo does not intend to make decisions producing legal or similarly significant effects based solely on automated processing.

10. Cookies

Information about cookies and consent controls is available in our Cookie Policy.