Last updated: July 2026
lunar-leaf is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page explains how we comply with GDPR requirements and what rights you have regarding your personal information.
We process your personal data under the following legal bases:
Under GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.
You have the right to request correction of any inaccurate or incomplete personal information we hold about you.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a portable format and to request transfer of that data to another service provider where technically feasible.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Where processing is based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. In the UK, the relevant authority is the Information Commissioner's Office (ICO).
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
Please provide the following information when making a request:
For questions specifically related to data protection and GDPR compliance, you may contact our team at [email protected] with the subject line "Data Protection Enquiry."
We primarily process data within the United Kingdom and European Economic Area. If we need to transfer your data outside these regions, we will ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to your rights, we will also notify you directly.
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
We do not knowingly process personal data of children under 16 years of age without parental consent. If you believe we have inadvertently collected such data, please contact us immediately.
We may update this GDPR compliance information periodically. Any changes will be posted on this page with an updated revision date.
For questions or concerns about GDPR compliance or to exercise your rights:
lunar-leaf
47 Buchanan Street
Glasgow G1 3HL
Scotland, United Kingdom
Email: [email protected]