Privacy Policy

Last updated: August 16, 2025

Privacy Policy
We, Serelune (operated by DSJ NETWORK LLC, 6965 Piazza Grande Avenue, 32835 Florida, United States) (“we”, “us”, “our”) operate this online store and website, including all associated information, content, features, tools, products and services (the “Services”).
This Privacy Policy explains how we collect, use, disclose and retain your personal data — in compliance with applicable U.S. federal and state laws (including the California Online Privacy Protection Act (“CalOPPA”) and other state laws), Canadian federal and provincial laws (including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and related legislation), and UK law (including the Data Protection Act 2018 and the UK General Data Protection Regulation) (“UK GDPR”). DLA Piper Data Protection+3ISA Cybersecurity Inc.+3uk.practicallaw.thomsonreuters.com+3
By using our Services you agree to this Privacy Policy.

1. Personal data we collect or process

Depending on your use of our Services, we may collect and process personal data including, but not limited to:

  • Contact details (your name, address, e-mail address, telephone number)
  • Payment and transaction data (credit card or debit card number, banking details, order history)
  • Account information (login credentials, settings, preferences)
  • Communication data (customer inquiries, support requests)
  • Device and usage data (IP address, browser type, click behaviour)

2. Sources of data

We may obtain personal data from the following sources:

  • Directly from you (for example, when you create an account, place an order or contact us)
  • Automatically through cookies, pixels, tracking technologies used on our site
  • From service providers (e.g., payment processors, fulfilment/shipping providers, hosting providers)
  • From marketing or business partners (for example: Google, Meta/Facebook) if you have given consent

3. Legal bases for processing (where applicable)

Depending on the jurisdiction and the nature of your interaction with us, we rely on one or more of the following legal grounds:

  • Performance of a contract: processing is necessary for the fulfilment of your order, payment and delivery.
  • Consent: when you have given your clear consent for particular processing (for example, marketing communications, cookies, certain tracking).
  • Legitimate interests: where processing is necessary for our legitimate business interests (for example, fraud prevention, analytics, improvements to our Services), and such interests are not overridden by your rights and interests.
  • Compliance with legal obligations: where we are required by applicable laws (for example tax, accounting or regulatory obligations).

4. Purposes of use

We process your personal data for the following purposes:

  • To handle orders and returns (including payment, delivery, customer support)
  • To personalise and improve our Services (for example product recommendations, website optimisation)
  • For marketing & advertising purposes (e-mail, social media, personalised adverts) subject to your consent or other applicable rights
  • To ensure security of our Services and prevent fraud
  • To comply with legal obligations (e.g., tax retention rules)

5. Cookies & Tracking Technologies

  • We use cookies, pixels and similar technologies on our website.
  • Essential cookies (e.g., shopping basket, checkout, site functionality) are based on our legitimate interests.
  • Analytics and marketing cookies (e.g., tracking user behaviour, targeting adverts) will only be used with your consent where required by law.
    You can withdraw your consent at any time via the “Cookie Preferences” link in the footer of our website. Please see our separate Cookie Policy for more details.

6. Disclosure of personal data

We may disclose your personal data to:

  • Our hosting and infrastructure provider (e.g., Shopify)
  • Payment service providers (e.g., Stripe, PayPal)
  • Shipping and fulfilment partners (e.g., DHL, Hermes)
  • Marketing partners (e.g., Google, Meta/Facebook/Instagram), if you have consented
  • Authorities, courts or other bodies where legally required to do so

7. Relationship with Shopify

Our Services are hosted by Shopify Inc. (Canada, USA, Ireland). Shopify may process your personal data internationally and employs EU Standard Contractual Clauses (SCCs) for transfers.

8. International data transfers

Your personal data may be transferred to countries outside your home jurisdiction (for example, from Canada or the UK to the U.S.). Where required by law, we employ appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

9. Data retention

We retain personal data for the following periods (or such longer period as required by law):

  • Contract/invoice data: 10 years (for tax/retention purposes)
  • Communication data (customer support): 3 years
  • Marketing data: until you withdraw your consent
  • Analytics/tracking data: up to 24 months

10. Your rights

Depending on your jurisdiction (U.S., Canada, UK) you have the following rights:

  • Access: you may request a copy of personal data we hold about you.
  • Correction: you may ask us to correct inaccurate or incomplete personal data.
  • Deletion: you may request deletion of your personal data (“right to be forgotten”), subject to legal exceptions.
  • Data portability: you may request that we provide your personal data in a commonly-used format.
  • Restriction or objection: you may ask us to restrict processing or object to our processing of your personal data.
  • Withdraw consent: where processing is based on consent, you can withdraw that consent for future processing.

11. Complaints

If you are located in Canada, the U.S. or the UK and believe your privacy rights have been violated, you may lodge a complaint with the relevant supervisory authority (e.g., Canada’s Office of the Privacy Commissioner, the UK’s Information Commissioner’s Office (ICO), or the U.S. state Attorney General or the Federal Trade Commission (FTC)).

12. Security

We implement technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no transmission over the Internet or data storage can be guaranteed 100% secure.

13. Children

Our Services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child under 16 has provided us with personal data, please contact us so we can delete it.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available on our website. If we make material changes that affect your rights, we will notify you accordingly.

15. Responsible party / Contact information

Responsible entity:
DSJ NETWORK LLC
6965 Piazza Grande Avenue
32835 Florida
United States

Represented by: Yuri Almeida, Jonatas Soares
Contact: E-mail: contact@serelune.com