Privacy Policy

Effective Date: November 12, 2026

Last Updated: November 12, 2026

1. Information Has a Purpose, Not a Single Rule

A website can need a network identifier to load a page without needing a visitor's postal address. A seller can need shipping details to deliver an order without needing permission to send advertisements. At Lunvito, we explain personal information by the decision that makes it relevant. This notice applies to https://lunvito.com and communications connected with the store. Separate websites and organizations may publish privacy notices for their own activities.

2. Controller Identification and Contact

Data Controller: Wuhan Zhanglixin Trading Co., Ltd.

Unified Social Credit Code (USCC): 91420114MAKDQF163T

For retail operations where our company determines the purposes and essential means of using personal information, Wuhan Zhanglixin Trading Co., Ltd. acts as the Data Controller. These decisions include administration of customer purchases, how customer inquiries are resolved, and which business records are needed for legal or operational duties. Direct questions or applicable rights requests to service@lunvito.com. Other organizations may make independent decisions for particular activities; their privacy notices explain those decisions.

3. What Happens Without a Form Submission

Loading a webpage can result in IP addresses, device and browser characteristics, session markers, requested pages, timestamps, network-derived approximate location, and technical error or security records. This information helps systems respond to requests, maintain essential features, recognize abusive traffic, and investigate failures. Some identifiers can be personal information even where a visitor never supplies a name. The details actually generated depend on the technology used for the visit.

4. A Cart Is Not an Order

If a shopping-cart function is available, selected items, quantities, variations, and a session reference may be processed to preserve the basket. Where a customer-account feature is offered, information provided for that feature may help maintain access and relevant order history. Saving a cart does not necessarily create a purchase contract, and information necessary for cart continuity is not, by itself, authorization to send marketing.

5. The Details Needed to Deliver a Purchase

A completed checkout can provide a customer or recipient name, email, telephone number, billing and shipping details, selected items, price, delivery choice, and order identifier. As fulfillment proceeds, the transaction may also accumulate confirmation of payment, dispatch status, carrier tracking events, and any refund or complaint record. We use information relevant to fulfilling and administering that purchase, communicating essential updates, and complying with applicable seller obligations. Certain fields are necessary to complete the requested transaction.

6. Payment Credentials and the Store's Record

Your selected checkout payment service handles payment credentials required by its interface. The store may obtain a transaction reference, result, amount, or status sufficient to administer the sale and any charge dispute or refund. We do not ask for complete card numbers, card security codes, or banking passwords through support messages. A payment organization may independently process data for legal, fraud-prevention, or financial obligations under its own notice.

7. A Customer-Service Conversation

If you contact us, the message and its reply address become part of a support record. We may also need an order number, a tracking reference, or images you voluntarily supply to explain damage or an incorrect item. This information is used to investigate the request, decide on the appropriate response, and document the outcome when necessary. Please omit sensitive or unrelated details from attachments and correspondence.

8. The Grounds Behind Different Decisions

Where required under the law applying to a person, our processing relies on a ground suited to the particular purpose. Contract performance or steps requested before purchasing may support transaction handling. A legal obligation can require retention of tax, accounting, and consumer records. Legitimate interests, when permitted and appropriately balanced, may support proportionate security and service administration. Optional marketing or nonessential technologies may need consent or another valid basis. Withdrawing consent affects activities dependent on it, but does not cancel separate contractual or legal requirements.

9. Instructions to Service Providers

Our store uses Shopify ecommerce infrastructure. Other categories of provider may assist with payments, parcel delivery, order fulfillment, communications, hosting, and security when a feature or transaction calls for their work. We share information appropriate to that task: for example, a carrier needs recipient details, while a payment service needs transaction information. Service providers do not all receive identical records, and they do not necessarily have the same data-protection role. For processing where a provider decides its own purposes, it may act as an independent controller.

10. Disclosures Beyond Routine Services

Information may be provided to competent authorities where a valid legal requirement applies, to professional advisers working on a legitimate legal matter, or to parties involved in a lawful business transfer with relevant safeguards. A disclosure should be connected to an appropriate purpose and limited in accordance with the applicable requirements. A website visit alone does not mean all customer information is distributed to every provider.

11. Essential Browser Storage and Optional Measurement

Cookies and similar mechanisms can help preserve a session, retain cart selections, apply technical preferences, or prevent misuse. Separate technologies may support analytics or advertising if those functions are enabled. Browsers and any consent or privacy-preference controls presented by the site can offer ways to manage relevant technologies. Blocking essential tools may impair site functions. Where nonessential technology requires consent under the applicable law, that consent governs its use.

12. Marketing Requests and Advertising Objections

If optional promotional subscriptions are offered, the email address and preference you provide may be used to administer the messages you requested. Promotional email can be stopped using an unsubscribe instruction or by writing to service@lunvito.com. Necessary communications about a purchase or support request remain separate.

Some laws give people a right to opt out of data disclosures characterized as a sale, sharing, or targeted advertising. If such processing takes place and the right applies, use any relevant website privacy controls or contact the Data Controller. Legally recognized preference signals, including Global Privacy Control, are handled where required for the activity at issue. This notice does not assert that any particular optional advertising integration is active.

13. International Operations

Information may be accessed or processed in more than one country when ecommerce infrastructure, payment services, communications, or delivery services operate internationally. Where the relevant privacy law requires a lawful transfer arrangement or safeguard, the appropriate legal mechanism applies. The location of a provider does not remove the responsibilities we have for processing decisions under our control.

14. Choosing an Appropriate Retention Period

An order record can remain necessary for fulfillment, customer remedies, financial reporting, or legal claims. A support exchange may need to be kept while a case is open. Technical logs may serve a different security or troubleshooting purpose, while records of communication choices can help honor opt-outs. Retention is therefore based on purpose and legal duties rather than a universal period. Information no longer needed for a valid purpose is deleted, de-identified, or otherwise handled lawfully.

15. Security and Internal Access

We apply reasonable technical and organizational precautions appropriate to the activities and information involved. Access should be connected to a legitimate operational need, including tasks performed by relevant providers. No internet service or electronic storage method eliminates every risk. Keep any account credentials private and tell us if you believe your information has been misused.

16. Requests From Individuals

Depending on your jurisdiction, you may be entitled to access information about you, correct it, request deletion, receive portable data, restrict particular uses, object to processing, withdraw consent, or opt out of defined advertising disclosures. Some laws also provide an appeal route or the ability to complain to a privacy authority. Legal exceptions can apply, including requirements to preserve transaction records.

Send a request to service@lunvito.com describing the information or right concerned. We may ask for reasonable verification before releasing or changing records. We will respond within legally required periods and explain an applicable limitation when required.

17. Children, External Sites, and Changes

Lunvito is intended for general retail use and is not directed toward knowingly collecting children's information contrary to applicable law. Contact us if you believe such information has been submitted improperly. Independently operated sites reached by links may use their own notices. We may update this policy when practices or legal obligations change, displaying the revised version and giving additional notice when legally required.

18. Contacting the Controller

For a question concerning this notice, a rights request, or a concern about information handled for our retail purposes, contact service@lunvito.com.