Privacy Policy

Last updated: May 2026

This Privacy Policy explains how LunaroKosta Ltd ("LunaroKosta", "we", "us" or "our") collects, uses, stores and protects your personal information when you visit lunarokosta.com, purchase books, subscribe to our newsletter, download our free checklist or contact us. We are committed to handling your data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

LunaroKosta Ltd is a UK-registered company operating an independent online bookshop specialising in personal finance and financial literacy titles. Our registered office is 14 Clerkenwell Green, London EC1R 5DP, United Kingdom.

For the purposes of data protection law, LunaroKosta Ltd is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your information, please contact us at hello@lunarokosta.com.

2. What personal data we collect

We may collect and process the following categories of personal data, depending on how you interact with our website and services:

• Identity and contact data — your name, email address, billing and delivery address, and telephone number when you place an order or contact us.
• Transaction data — details of books you have purchased, order history, payment status and delivery information. We do not store full payment card numbers on our servers; card processing is handled by our payment provider.
• Marketing and communications data — your email address, subscription preferences, consent records and whether you have opened or clicked links in our emails (where permitted by law and your preferences).
• Technical and usage data — your IP address, browser type, device identifiers, pages visited, time spent on pages and referral source. This is collected through cookies and similar technologies where you have given consent.
• Correspondence data — the content of messages you send us via contact forms, email or post, including any attachments you choose to provide.

We do not intentionally collect special category data (such as information about your health, ethnicity or political opinions). If you include such information in a message to us, we will only use it to respond to your enquiry and will delete it when no longer needed.

3. How we collect your data

We collect personal data in the following ways:

• Directly from you when you create an account, place an order, sign up to our newsletter, download the 30-Day Budget Checklist, complete our Money Quiz, submit a contact form or write to us.
• Automatically when you browse our website, through cookies, server logs and analytics tools (only where you have consented to non-essential cookies).
• From third parties such as payment processors (to confirm payment), delivery carriers (to provide tracking updates) and email service providers (to manage subscriptions).

4. How and why we use your data

We use your personal data only where we have a lawful basis to do so. The table below summarises our main purposes and legal bases:

• To fulfil orders and deliver books — performance of a contract with you.
• To process payments and prevent fraud — performance of a contract and our legitimate interests in protecting our business.
• To send order confirmations, dispatch updates and customer service replies — performance of a contract and, where relevant, our legitimate interests.
• To send marketing emails (newsletter, book recommendations, rate updates) — your consent, which you may withdraw at any time.
• To deliver the free 30-Day Budget Checklist — your consent and, where you also subscribe to weekly emails, your consent to marketing.
• To improve our website, products and customer experience — our legitimate interests, balanced against your rights, or your consent for analytics cookies.
• To comply with legal obligations — such as tax, accounting and consumer protection requirements.

We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

5. Marketing communications

If you subscribe to our newsletter or tick the consent box when downloading our checklist, we may send you weekly emails containing book recommendations, UK rate updates and practical money tips. Every marketing email includes an unsubscribe link. You can also opt out at any time by emailing hello@lunarokosta.com.

We will never sell your email address or personal data to third parties for their marketing purposes. We may share limited data with email delivery providers strictly to send communications you have agreed to receive.

6. Who we share your data with

We may share your personal data with trusted third parties who assist us in operating our website and fulfilling orders. These include:

• Payment processors to handle card and wallet transactions securely.
• Delivery and logistics partners (such as Royal Mail and courier services) to ship your orders.
• Email and marketing platforms to manage newsletter subscriptions and transactional emails.
• Website hosting, IT support and analytics providers (where you have consented to analytics).
• Professional advisers (accountants, lawyers) where necessary for our legitimate business interests.
• Regulators, courts or law enforcement if we are legally required to do so.

All service providers are required to process your data only on our instructions and to maintain appropriate security measures. We do not permit them to use your data for their own marketing.

7. International transfers

Your data is primarily stored and processed within the United Kingdom. Where any of our service providers process data outside the UK, we ensure appropriate safeguards are in place — such as UK adequacy regulations, Standard Contractual Clauses or equivalent mechanisms approved under UK GDPR — so that your data receives a similar level of protection.

8. How long we keep your data

We retain personal data only for as long as necessary for the purposes set out in this policy:

• Order and transaction records — up to seven years after the transaction, for tax, accounting and legal compliance.
• Marketing subscriptions — until you unsubscribe, plus a short period to record your preference and suppress future contact.
• Customer enquiries — typically up to two years after we resolve your query, unless a longer period is needed for a dispute.
• Website analytics — in aggregated or anonymised form, or according to the retention settings of our analytics provider.

When data is no longer required, we securely delete or anonymise it.

9. Cookies and similar technologies

Our website uses cookies to remember your preferences and, with your consent, to analyse site traffic. For full details of the cookies we use, how long they last and how to manage them, please read our Cookie Policy.

10. Your rights under UK GDPR

Under UK data protection law, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to ask us to delete your data in certain circumstances.
• Right to restrict processing — to ask us to limit how we use your data in certain situations.
• Right to object — to object to processing based on legitimate interests or for direct marketing.
• Right to data portability — to receive your data in a structured, commonly used format where processing is based on consent or contract.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email hello@lunarokosta.com. We will respond within one month, unless your request is complex, in which case we may extend by a further two months and will explain why.

11. Children's privacy

Our website and bookshop are intended for adults aged 18 and over who are UK residents. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

12. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include encrypted connections (HTTPS), access controls, secure payment processing and staff training. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at hello@lunarokosta.com so we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The "Last updated" date at the top of this page will indicate when the policy was last revised. We encourage you to review this page periodically. Where changes are significant, we may notify you by email or through a notice on our website.

15. Contact us

LunaroKosta Ltd
14 Clerkenwell Green
London EC1R 5DP
United Kingdom
Email: hello@lunarokosta.com