GDPR Compliance

Last Updated: July 21, 2026

lunar-iris is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable United Kingdom data protection legislation.

Data Controller

For the purposes of GDPR, lunar-iris acts as the data controller for personal information collected through this website and during service delivery.

Contact details:
lunar-iris
42 Kensington Gardens
London W2 4RU
United Kingdom
[email protected]

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: Where you have explicitly agreed to processing for specific purposes
• Contractual necessity: To fulfill obligations under service agreements
• Legitimate interests: To operate our business, improve services, and communicate effectively
• Legal compliance: To meet regulatory requirements and legal obligations

Your GDPR Rights

Under GDPR, you have comprehensive rights regarding your personal data:

Right of Access

You may request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information in a structured, commonly used format within one month of your request.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction. We will make necessary amendments and notify relevant third parties where applicable.

Right to Erasure

You may request deletion of your personal data under specific circumstances:

• Data is no longer necessary for the purposes collected
• You withdraw consent and no other legal basis exists
• You object to processing and no overriding legitimate grounds exist
• Data has been unlawfully processed
• Deletion is required for legal compliance

Right to Restriction of Processing

You may request that we limit how we use your data when:

• You contest the accuracy of the data
• Processing is unlawful but you oppose deletion
• We no longer need the data but you require it for legal claims
• You have objected to processing pending verification of legitimate grounds

Right to Data Portability

Where technically feasible, you may receive your personal data in a structured, machine-readable format and transmit it to another controller without hindrance.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data Transfers

Personal data is stored within the European Economic Area. Any transfers outside the EEA will be protected by appropriate safeguards such as standard contractual clauses approved by the European Commission.

Data Breach Notification

In the event of a personal data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay. We maintain documented procedures for detecting, reporting, and investigating data breaches.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: ico.org.uk

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to requests within one month, with possible extension to three months for complex requests. We may require identity verification before processing requests.

Data Protection by Design

We implement data protection principles throughout our systems and processes, incorporating privacy considerations into technology design and operational procedures.