Privacy policy

Privacy Policy

LU NANI®

Last updated: March 12, 2026

1. General Information

This Privacy Policy explains how we collect, process, and use your personal data when you visit our website or use our online store.

Personal data refers to any information that can be used to personally identify you.

2. Data Controller

The entity responsible for data processing is:

 

Beate Katiela – Personal Stylist

Rothebach 9

59065 Hamm

Germany

 

Email: kontakt@lu-nani.com

VAT ID: DE312903769

 

3. Data Collection on This Website

3.1 Data We Collect

We may collect the following types of personal data:

 

  • Contact details (name, email address, postal address, phone number)
  • Order and payment information (credit card, PayPal, Klarna, Shopify Payments)
  • Account information if you create a customer account
  • Communication data from inquiries or customer support
  • Usage data (IP address, browser type, device information, visited pages, date and time of access, purchase behavior)

 

3.2 Purpose of Data Processing

We process personal data for the following purposes:

 

  • Processing and delivering orders
  • Customer service and responding to inquiries
  • Managing customer accounts
  • Improving our website and services
  • Marketing and advertising (where consent has been given)
  • Fraud prevention and website security
  • Compliance with legal obligations

 

3.3 Legal Basis

The legal basis for processing personal data includes:

 

  • Art. 6(1)(b) GDPR – processing necessary for the performance of a contract
  • Art. 6(1)(a) GDPR – consent
  • Art. 6(1)(f) GDPR – legitimate interest
  • Legal obligations under applicable tax and commercial laws

 

4. Hosting and E-Commerce Platform (Shopify)

Our online store is hosted on Shopify Inc. Shopify provides the e-commerce platform that allows us to sell our products and services.

Your data may be stored through Shopify’s data storage, databases, and the general Shopify application. They store your data on secure servers behind a firewall. 

Shopify may process personal data including:

 

  • IP address
  • device information
  • order information
  • payment data
  • browsing behavior within the store

 

More information can be found in Shopify’s Privacy Policy:

https://www.shopify.com/legal/privacy

 

5. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to ensure functionality, improve user experience, and analyze website usage.

Cookies may include:

 

  • Essential cookies (required for website functionality)
  • Analytics cookies (to understand how visitors use our website)
  • Marketing cookies (for advertising and remarketing)

You can manage or disable cookies through your browser settings. Some website features may not function properly if cookies are disabled.

Where legally required, cookies used for analytics or marketing will only be activated with your consent.

6. Analytics and Marketing Tools

We may use third-party tools for analytics and marketing purposes.

These services may collect information such as:

  • IP address
  • device information
  • browsing behavior
  • interactions with advertisements

 

Google Analytics

We use Google Analytics to analyze website traffic and improve our services.

Google Analytics uses cookies that allow analysis of how users interact with the website.

Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin, Ireland.

 

More information:

https://privacy.google.com/businesses/controllerterms/mccs/ 

Google Ads

We use Google Ads to display advertisements and measure marketing performance.

 

Facebook & Instagram (Meta Platforms)

Our website may use marketing technologies from Meta Platforms (Facebook and Instagram) to measure advertising performance and provide personalized advertising.

 

Privacy Policy:

https://www.facebook.com/privacy/explanation

 

Instagram Privacy Policy:

https://instagram.com/about/legal/privacy/

 

7. Payment Providers

To process payments, we work with external payment providers. Payment data is only transferred to the respective provider when necessary for payment processing. 

Possible payment providers include:

 

  • PayPal
  • Klarna
  • Shopify Payments
  • Mastercard
  • Visa

 

 

Privacy policies of payment providers:

PayPal:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Klarna:

https://www.klarna.com/de/datenschutz

Mastercard:

https://www.mastercard.de/de-de/datenschutz.html

Visa:

https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html

8. Contact Forms & Customer Communication

If you contact us via contact form, email, or other communication channels, the information you provide will be stored to process your request and for possible follow-up questions.

The processing is based on Art. 6(1)(b) GDPR (contract or pre-contractual communication) or Art. 6(1)(f) GDPR (legitimate interest).

 

9. Server Log Files

When you visit our website, technical information may automatically be collected by the hosting provider. This may include:

  • IP address
  • browser type and version
  • operating system
  • referrer URL
  • time of server request

This data is used to ensure website stability and security.

The processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure operation of the website).

 

10. Newsletter

If you subscribe to our newsletter, we will process the data required to send the newsletter.

You can unsubscribe from the newsletter at any time using the unsubscribe link in the email or by contacting us.

The legal basis is Art. 6(1)(a) GDPR (consent).

 

11. Data Retention

Personal data will only be stored for as long as necessary to fulfill contractual obligations or comply with legal requirements (e.g., tax and commercial law retention periods).

 

12. International Data Transfers

Some third-party providers may process personal data outside the European Economic Area (EEA), for example in the United States. 

Where this occurs, data transfers are based on legally recognized safeguards such as:

  • EU Standard Contractual Clauses (SCCs)
  • adequacy decisions by the European Commission

13. Your Rights

Under the GDPR, you have the following rights:

  • Right of access to your personal data
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a data protection authority

 

14. Small Business Regulation & International Shipping

  • We apply the German small business regulation according to §19 UStG, therefore no VAT is charged or shown on invoices.
  • For deliveries to non-EU countries (for example Switzerland), additional customs duties, taxes, or handling fees may apply, which must be paid by the buyer.