Privacy policy
Last updated: 19 February 2026
This Privacy Policy explains how we collect, use, disclose and protect your personal data when you visit or make a purchase from aquamaluna.com (the “Website”).
For the purposes of data protection law, the data controller is:
Solytra Company Limited
167–169 Great Portland Street, Fifth Floor
London, England, W1W 5PF
Company Number: 16928195
Email: info@aquamaluna.com
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Personal Data We Collect
a) Information You Provide to Us
When you place an order or interact with us, we may collect:
- Full name
- Billing and delivery address
- Email address
- Telephone number
- Payment details (processed securely via payment providers)
- Order details and purchase history
- Communications you send to us
This information is necessary to fulfil your order. Without it, we cannot enter into or perform a contract with you.
b) Information Collected Automatically
When you visit our Website, we may automatically collect:
- IP address
- Browser type and version
- Device type
- Time zone
- Pages viewed and products browsed
- Referral source (e.g., search engine, advert)
- Website interaction data
We collect this data using:
- Cookies
- Log files
- Analytics tools
- Pixels and tracking technologies
Further details are provided in our Cookie Policy.
2. Legal Bases for Processing
We process personal data under the following lawful bases:
Contract (Article 6(1)(b) UK GDPR)
To process and deliver orders, handle payments, provide customer support and manage returns.
Legal Obligation (Article 6(1)(c))
To comply with accounting, tax and regulatory requirements.
Legitimate Interests (Article 6(1)(f))
For fraud prevention, website security, improving our services and managing business operations. We ensure our interests do not override your fundamental rights.
Consent (Article 6(1)(a))
For email marketing and non-essential cookies. You may withdraw consent at any time.
3. How We Use Your Personal Data
We use personal data to:
- Process and fulfil orders
- Arrange shipping and delivery
- Send order confirmations and updates
- Respond to enquiries
- Prevent fraud and unauthorised transactions
- Improve website functionality
- Provide marketing communications (with consent)
- Comply with legal obligations
4. Sharing Your Personal Data
We share personal data only where necessary.
E-commerce Platform
Our store is hosted by Shopify, which processes data on our behalf.
Shopify Privacy Policy:
https://www.shopify.com/legal/privacy
Payment Providers
We use secure third-party payment processors, including:
- Stripe
- PayPal
- Klarna Bank AB
These providers process payment data in accordance with their own privacy policies.
Analytics and Advertising Partners
We may share limited data with:
- Google Analytics
- Meta Platforms (Meta Pixel)
- TikTok
- Klaviyo / Shopify Email
These services help us analyse traffic and deliver advertising. Non-essential tracking is only activated with your consent via our cookie banner.
Logistics and Fulfilment
To deliver your order, we share necessary shipping information with:
- Courier and postal services
- Third-party fulfilment partners (including outside the UK where applicable)
Only the minimum required data is shared.
Legal Requirements
We may disclose personal data if required by law, court order, or regulatory authority.
5. International Data Transfers
Your personal data may be transferred outside the UK, including to:
- The United States (e.g., Shopify, Google, Meta)
- Asia (fulfilment partners)
Where data is transferred internationally, we ensure appropriate safeguards are in place, such as:
- UK International Data Transfer Agreements (IDTA), or
- UK Addendum to EU Standard Contractual Clauses
6. Cookies & Tracking Technologies
We use:
- Strictly necessary cookies
- Analytics cookies
- Marketing cookies
Under PECR and UK GDPR:
- Necessary cookies are used under legitimate interest.
- Analytics and marketing cookies require consent.
You may manage your cookie preferences through our cookie banner or browser settings.
7. Data Retention
We retain personal data only as long as necessary.
- Order and transaction data: 6 years (UK accounting requirements)
- Customer service communications: up to 12 months
- Marketing consent records: until withdrawn
- Analytics data: up to 26 months
- Cookies: 30 days to 12 months depending on type
After this period, data is deleted or anonymised.
8. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Request correction
- Request erasure
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time
To exercise your rights, contact:
info@aquamaluna.com
We may request proof of identity before responding.
We will respond within one month.
9. Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office
https://www.ico.org.uk
10. Children
Our Website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.
11. Automated Decision-Making
We do not carry out automated decision-making that produces legal or similarly significant effects under Article 22 UK GDPR.
Fraud screening tools may be used to prevent unauthorised transactions.
12. Data Security
We implement appropriate technical and organisational measures including:
- SSL/TLS encryption
- Access controls
- Secure hosting infrastructure
No online transmission can be guaranteed 100% secure.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, technical or operational changes. The latest version will always be available on our Website.
14. Contact – Data Protection & Privacy
Solytra Company Limited
167-169 Great Portland Street, Fifth Floor
London, England, W1W 5PF
E-post: info@aquamaluna.com