1. Who we are
LUNARRÁ Living is part of LUNARRÁ, the trading name of LUNARRÁ Group Ltd, a company registered in England and Wales, company number 16881159, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
We are the data controller for the personal information described here, which means we decide what is collected and why, and we are accountable for it. We are registered with the Information Commissioner's Office under registration number ZC216954.
For anything to do with your information, write to info@lunarra.co.uk. Data protection is the personal responsibility of the director, Ramón Wright. There is no separate Data Protection Officer, because we are not required to appoint one.
LUNARRÁ Performance, our sister service, has its own privacy notice, which covers its assessment. This notice covers LUNARRÁ Living.
2. What we collect, and why
If you make an enquiry
Your name and email address, and whatever you choose to tell us: who you are enquiring for, your organisation and role, where the home, property or site is, the type and stage of the project, timing, an indicative budget, and any message. If you are writing on someone else's behalf, we record that, and we ask you to share only what the person you act for is content for you to share.
We use this to reply to you and to decide, with you, whether and how we can help.
Please leave out personal health information when you enquire. If something like that matters to the work, we will talk about it separately, and ask for your explicit agreement before recording it.
If a project goes ahead
We collect what is needed to do the work: contact details for you and the people we deal with, details of the property or site, plans and photographs you share, and the preferences of the people the space is for. For a home, the reading at the start can include how you sleep, train and recover, and some of that can reveal health information, which the law protects more strongly. We ask for it only where the specification needs it, only with your explicit agreement, and we share it only with the people who need it to do the work.
If your reading is carried out through LUNARRÁ Performance, its own privacy notice applies to that reading, and you will see it before you answer anything.
If you email or meet us
Your name, email address and the content of what you send us. If we meet online we may use an automated notetaker. We tell you before it starts and turn it off if you ask.
What we do not do
- We do not sell personal information, to anyone, ever.
- We do not run advertising or analytics tracking on this website.
- We do not make automated decisions that produce legal effects for you.
- We do not knowingly collect information about children through this website.
3. Our lawful basis
UK data protection law requires a lawful basis for every use of personal information. Ours are these.
| What we do | Our basis | Why it applies |
|---|---|---|
| Reply to your enquiry and discuss whether we can help | Legitimate interests, or steps taken at your request before a contract | You came to us and asked. You can stop it with one reply. |
| Carry out a project you commission | Contract | We cannot do it without the details. |
| Record health-related information for a home reading | Your explicit consent | It is special category information, so we ask first and record only what is needed. |
| Run the business: invoices, records, tax | Legal obligation | Company and tax law requires us to keep them. |
| Record meetings with a notetaker | Legitimate interests | Accurate notes serve the work. You may ask that it is not used, at no cost to you. |
Where we rely on legitimate interests we have weighed our interest against yours and concluded that it does not override your rights. You can ask us for that assessment.
4. Who else sees your information
We are a small firm and use established suppliers. Each acts on our instructions only, and none may use your information for its own purposes.
| Supplier | What it does for us | What it sees |
|---|---|---|
| Netlify | Hosts this website and receives the enquiry form | Technical request data, such as your IP address, and the details you enter in the enquiry form |
| Namecheap Private Email | Our mailboxes | Anything you email us |
When you send the enquiry form, Netlify receives it on our behalf and passes it to our mailbox. Netlify is based in the United States; the safeguards described below apply.
When a project goes ahead we may need to share details with the architects, contractors, suppliers and operators who deliver it. We share only what each needs, and tell you who they are first. We will also disclose information where the law requires it, and to our professional advisers where necessary.
Information outside the UK
Some suppliers are based outside the UK, mainly in the United States. Where information is transferred we rely on the safeguards approved under UK law, normally the International Data Transfer Addendum to the European Commission's standard contractual clauses. You can ask us which safeguard applies to a particular supplier. Projects outside the UK will involve partners in those countries, and we will tell you about that before any details are shared.
5. How long we keep it
| Record | Kept for | Then |
|---|---|---|
| Enquiries that did not go ahead | 12 months | Deleted |
| Project details, plans and specifications | 6 years after the project ends, so we can support the work we specified | Deleted |
| Health-related information from a home reading | Until the specification is signed off, unless you agree to a longer period | Deleted |
| Contracts, invoices and financial records | 6 years after the end of the financial year | Deleted |
| Meeting recordings and transcripts | 12 months | Deleted, notes retained |
6. Cookies and browser storage
This website sets no advertising, analytics or third-party tracking cookies and does not store anything on your device. Our fonts are served from the website itself, not from a third party.
7. Your rights
You have the right to:
- See what we hold about you, and get a copy of it.
- Correct it if it is wrong or incomplete.
- Have it deleted, where we have no overriding reason to keep it.
- Restrict what we do with it while a dispute about it is resolved.
- Object to processing based on legitimate interests, including any marketing. If you object to marketing we stop, without exception.
- Receive your information in a portable format, where we rely on consent or contract.
- Withdraw consent at any time, where consent is what we relied on.
Ask by emailing info@lunarra.co.uk. We answer within one month and do not charge. We may ask you to confirm who you are first, so that we do not hand your information to somebody else.
8. Keeping it safe
- Access to enquiries and project details is limited to the people who need it to do the work.
- Accounts are protected with strong, unique passwords and two-factor authentication where the supplier offers it.
- If a breach happens and is likely to be a risk to you, we report it to the ICO within 72 hours and tell you directly where the risk is high.
9. Complaints
If you are unhappy with how we have handled your information, tell us first. We would rather fix it, and we will take it seriously.
You also have the right to complain at any time to the Information Commissioner's Office, the UK regulator: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113. ico.org.uk/make-a-complaint.
10. Changes
If we change this notice we update the version and date at the top of the page. If a change materially affects information you have already given us, we tell the people affected directly.