The short version
- We only collect the personal information we need to process your order, ship your products, answer your questions, and — only if you opt in — send you marketing emails.
- We never sell your personal information.
- We share information only with the service providers that help us run the store (payment processing, shipping, analytics, our AI shopping assistant), and only as needed.
- You can ask us what we hold about you, correct it, or ask us to delete it, at any time — see "Your Privacy Rights" below.
1. Who We Are
Luna Fresh ("Luna Fresh," "we," "us," or "our") is a small-batch, handmade skincare business based in Calgary, Alberta, Canada. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit lunafreshshop.com (the "Site"), place an order, subscribe to our newsletter, or otherwise interact with us.
This Policy is written to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA), which governs private-sector organizations operating in Alberta.
2. Information We Collect
Information you give us directly
- Order & shipping information: name, email address, shipping address, and order contents, when you place an order.
- Payment information: our payment processor, Stripe, collects your card details directly and securely. Luna Fresh does not store your full card number on our servers — see "Payment Processing" below.
- Newsletter sign-up: your email address, and optionally your name, if you subscribe for offers and updates.
- Messages you send us: through our contact email, our "Ask Luna" AI shopping assistant, or social media, including anything you choose to share in that conversation.
Information collected automatically
- Cookies & similar technologies: we use cookies to remember your cart, your language preference, and your cookie consent choice.
- Analytics data: we use Google Analytics and Microsoft Clarity to understand how visitors use our Site (pages viewed, time on site, general device/location information, and session recordings/heatmaps). This helps us improve the shopping experience. See "Cookies & Analytics" below.
3. How We Use Your Information
We use the personal information we collect only for the purposes we identify at or before the time of collection, including to:
- Process, fulfill, and ship your orders, and send order confirmations and receipts;
- Respond to customer service requests and questions asked through our "Ask Luna" assistant;
- Send you marketing emails and offers, but only if you have opted in — you can unsubscribe at any time (see "Marketing Emails" below);
- Maintain the security of our Site and prevent fraud;
- Understand and improve how our Site and products perform, using aggregated analytics; and
- Comply with our legal and tax obligations.
4. Cookies & Analytics
When you first visit our Site, we ask for your consent through a cookie banner before loading non-essential cookies. If you accept, we load:
- Google Analytics (GA4) — to measure site traffic and usage patterns.
- Microsoft Clarity — to generate anonymized heatmaps and session recordings that help us see how the Site is actually used, so we can fix confusing pages.
If you decline, we do not load these tools, and only strictly necessary cookies (like your shopping cart) are used. You can change your mind at any time by clearing your browser's cookies for this Site, which will show the consent banner again.
5. Payment Processing
All payments on lunafreshshop.com are processed by Stripe, Inc., a PCI-DSS certified payment processor. Your card number, expiry date, and security code are entered directly into Stripe's secure payment form and are never transmitted to or stored on Luna Fresh's own servers. Stripe's use of your information is governed by Stripe's Privacy Policy.
6. Our AI Shopping Assistant ("Ask Luna")
Our Site includes an AI-powered chat assistant that answers questions about ingredients, skin types, and product use. Messages you send to the assistant are processed by our automation platform and third-party AI service providers in order to generate a response. Please avoid sharing sensitive personal or medical information in the chat. Do not treat responses from the assistant as medical advice — see our Terms of Service for details.
7. How We Share Your Information
We do not sell, rent, or trade your personal information. We only share it with:
- Service providers who help us operate the Site and fulfill orders — our payment processor (Stripe), our hosting provider, our email/automation platform, and shipping carriers — each of whom is only given the information needed to perform their service;
- Analytics providers (Google Analytics, Microsoft Clarity), as described above; and
- Legal authorities, only if required by law, court order, or to protect the rights, property, or safety of Luna Fresh, our customers, or others.
8. Marketing Emails
In accordance with Canada's Anti-Spam Legislation (CASL), we only send marketing emails to people who have given express consent (for example, by subscribing through our newsletter sign-up). Every marketing email includes an unsubscribe link, and we honour unsubscribe requests within 10 business days. We keep records of consent as required by law.
9. Data Retention
We keep your personal information only as long as necessary to fulfill the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements (such as Canadian tax record-keeping rules). Order and transaction records are generally retained for the period required by Canadian tax law; newsletter subscriber information is kept until you unsubscribe.
10. Security
We use reasonable administrative, technical, and physical safeguards to protect your personal information against loss, theft, and unauthorized access, use, or disclosure. No method of transmission or storage is 100% secure, but we work to protect your information appropriately for its sensitivity, and we will notify affected individuals and, where required, the Office of the Information and Privacy Commissioner of Alberta, in the event of a breach that creates a real risk of significant harm.
11. Your Privacy Rights
Under PIPEDA and Alberta PIPA, you have the right to:
- Ask us what personal information we hold about you and how it is used;
- Request that we correct inaccurate or incomplete information;
- Withdraw your consent to our collection, use, or disclosure of your information at any time, subject to legal or contractual restrictions (for example, we cannot ship an order without a shipping address); and
- Ask us to delete personal information we no longer need to retain.
To exercise any of these rights, contact our Privacy Officer using the details below. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC) or the Office of the Privacy Commissioner of Canada.
12. Children's Privacy
Our Site and products are intended for adults and are not directed at children. We do not knowingly collect personal information from children under 13.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. We will post the updated version on this page with a new effective date. We encourage you to review this page periodically.