Privacy policy

Last updated: March 21, 2026

Luna Books operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Luna Books is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Luna Books is an independent Indian bookstore. We are committed to complying with the Digital Personal Data Protection Act, 2023 (DPDPA) of India. Where this Policy describes your rights and our obligations, these are framed with Indian law in mind. Our customers are primarily based in India.

PERSONAL INFORMATION WE COLLECT OR PROCESS

When we use the term “personal information”, we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, depending on how you interact with the Services and as permitted or required by applicable law:

  • Contact details including your name, shipping address, billing address, phone number, and email address.
  • Financial information including payment details processed through Razorpay (our payment gateway). Luna Books does not store your card or bank account numbers — these are handled exclusively by Razorpay in accordance with PCI-DSS standards. We retain transaction confirmation details and order values.
  • Transaction information including the items you view, add to your cart, or purchase, and your past orders.
  • Account information including your registered email address or mobile number, which returning customers may use to log in via a one-time password (OTP). We also retain your order history and any preferences associated with your account.
  • Communications with us including the information you include in emails, messages, or enquiries sent to us.
  • Device and usage information including information about your device, browser, IP address, and how you interact with and navigate the Services. This is collected automatically through Shopify and any analytics tools we use.

PERSONAL INFORMATION SOURCES

We may collect personal information from the following sources:

  • Directly from you when you place an order, contact us by email, or otherwise provide us with your personal information.
  • Automatically through the Services from your device when you use our website, through the use of cookies and similar technologies managed by Shopify.
  • From our service providers including Shopify (platform and hosting), Razorpay (payment processing), and Shiprocket or other courier partners (order fulfilment and shipping).

HOW WE USE YOUR PERSONAL INFORMATION

We use personal information for the following purposes:

  • Fulfilling your orders. We use your contact and payment information to process orders, confirm payment via Razorpay, arrange dispatch, and coordinate delivery through Shiprocket or other chosen courier partners. This is the primary purpose for which we collect your data.
  • Customer communications. We use your email address and phone number to send you order confirmations, shipping updates, and to respond to your enquiries.
  • Security and fraud prevention. We use your information to detect and prevent fraudulent or unauthorised activity on the Services.
  • Legal compliance. We may use your information to comply with applicable Indian law, including tax and accounting obligations, or to respond to lawful requests from authorities.
  • Service improvement. We may use anonymised or aggregated information to understand how customers use the Services and to improve our website and offerings.

We do not use your personal information for targeted advertising or sell your data to third-party marketers. Any marketing communications we send (such as newsletters) will give you a clear option to opt out.

HOW WE DISCLOSE PERSONAL INFORMATION

We may share your personal information with third parties only in the following circumstances:

  • Service providers. We share your information with Shopify (platform), Razorpay (payment processing), and Shiprocket or other chosen courier partners (shipping and fulfilment) to the extent necessary to provide the Services to you. These providers process your data on our behalf and are bound by their own privacy policies.
  • With your consent. When you direct us to share your information with a third party (for example, to ship to a recipient address you specify)
  • Legal obligations. To comply with applicable law, legal process, or lawful requests from government or regulatory authorities in India.
  • Business transfers. In connection with a merger, acquisition, or sale of business assets, your information may be transferred as part of that transaction.

We do not sell, rent, or share your personal data with advertisers or data brokers.

RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than India, in order to provide and improve the Services for you. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. You may also exercise rights related to Shopify’s processing of your data through the Shopify Privacy Portal.

THIRD-PARTY WEBSITES AND LINKS

The Services may contain links to third-party websites (including Razorpay’s payment portal and Shiprocket’s tracking pages). We are not responsible for the privacy or security practices of any third-party site. We encourage you to review the privacy policies of any third-party site before providing your personal information to them.

CHILDREN’S DATA

The Services are not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with their personal information, please contact us and we will delete it promptly.

SECURITY AND RETENTION OF YOUR INFORMATION

We take reasonable measures to protect your personal information from unauthorised access, loss, or disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure. We recommend that you do not communicate sensitive information to us through unsecured channels. Returning customers who log in using OTP authentication should keep their registered email address and mobile number secure, and should never share an OTP with any third party. We will never ask you for your OTP.

We retain your personal information for as long as necessary to fulfil the purposes described in this Policy, including to comply with our legal and accounting obligations under Indian law, and to resolve any disputes. When your data is no longer required, we will delete or anonymise it.

YOUR RIGHTS AND CHOICES

Under the Digital Personal Data Protection Act, 2023 (DPDPA) of India, you have the following rights in relation to your personal information:

  • Right to access. You may request access to the personal information we hold about you.
  • Right to correction. You may request that we correct inaccurate or incomplete personal information we hold about you.
  • Right to erasure. You may request that we delete your personal information, subject to our legal obligations to retain certain records.
  • Right to grievance redressal. You have the right to raise a complaint with us about how we handle your personal data (see Complaints below).
  • Managing marketing communications. If you have opted in to receive marketing emails from us, you may opt out at any time by using the unsubscribe link in our emails or by contacting us directly. We may still send you transactional emails related to your orders.

To exercise any of these rights, please contact us at mybooks@lunabooks.in. We will respond to your request within a reasonable time as required under applicable law. We may need to verify your identity before processing your request.

COMPLAINTS

If you have a complaint about how we handle your personal information, please contact us at mybooks@lunabooks.in. We will investigate and respond to your complaint as soon as reasonably practicable. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India, once established under the DPDPA, 2023.

INTERNATIONAL TRANSFERS

Some of our service providers (including Shopify) may store or process your personal information outside India. Where this occurs, we rely on appropriate safeguards as required under applicable law. By using the Services, you acknowledge that your information may be transferred to and processed in countries other than India.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or operational reasons. We will post the revised Policy on this website and update the “Last updated” date. Where required by law, we will provide additional notice of material changes.

CONTACT

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Luna Books

mybooks@lunabooks.in

1263A Road Number 63A, Jubilee Hills, Hyderabad, Telangana 500033, India

We aim to respond to all privacy-related queries within 5 business days.