Lunarion Labs / Privacy policy
Privacypolicy.
In short
We collect the minimum: what you write to us. No cookies, no analytics, no advertising, nothing sold. You stay in control of your data at all times.
Who is responsible
The data controller is Lunarion Labs, 1178 Broadway, 3rd Floor #1249, New York, NY 10001, USA. For any question about your data: hello@lunarionlabs.com.
The data we process
When you contact us or request an audit: your name, email, company, role, phone number if you give it, and what you tell us about your project (website, tools, budget, timing).
When you become a client: the information needed for the engagement and billing (billing details, correspondence, project documents, technical access you entrust to us).
When you browse the site: Lunarion Labs collects no data. The hosting server keeps technical logs (IP address, page requested, date) for security and to keep the site running.
We never ask for sensitive data (health, opinions, origin) and ask you not to send any.
How the forms work
The forms on the site send nothing to our servers and store nothing. They prepare an email that you review and then send yourself from your own mail app. Nothing leaves without your action.
Why, and on what legal basis
Answering your request, preparing an audit or a quote: pre-contract steps taken at your request.
Delivering the engagement, invoicing, providing support: performance of the contract.
Meeting our accounting and tax obligations: legal obligation.
Securing the site and preventing abuse (technical logs): legitimate interest.
We do not use your data for automated marketing, profiling or advertising.
How long
Requests that go no further: no more than 3 years after the last contact.
Engagement and billing data: the length of the relationship, then the legal retention period for accounting records.
Server technical logs: no more than 12 months.
Technical access entrusted for an engagement (credentials, keys): deleted or handed back at the end of the engagement.
Who has access
Only the Lunarion Labs team working on your request, and our technical providers (hosting, email, payment), each limited to what they need and bound to confidentiality.
We never sell, rent or share your data for commercial purposes. It is disclosed to an authority only when the law requires it.
Where it is processed
The site is hosted on servers located in the European Union. Lunarion Labs is based in the United States, so some data (emails, engagement documents) may be processed there. We apply the same protection rules wherever the data sits.
Security
Encrypted connection (HTTPS) across the site, access limited to the people who need it, passwords and keys stored encrypted, client access revoked at the end of an engagement. Should a breach affecting your data ever occur, we would inform you within the time required by law.
Your rights
You can ask at any time to access, correct, delete, restrict or port your data, and object to its processing. Write to hello@lunarionlabs.com: we reply within 30 days. We may ask you to prove your identity.
If you live in the European Union, you can also contact the data protection authority of your country.
California residents: you have the right to know, delete and correct your personal information and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context advertising.
Children
Our services are for businesses. We do not knowingly collect data about anyone under 16.
Changes
This policy may change. The date of the last update is shown at the bottom. If a change is significant, we will let you know if you are a client.