Policies
Privacy policy
Last updated 9 October 2026
Covers
Juunam operates this store to provide a curated shopping experience. This policy describes what personal data we collect, why, who processes it on our behalf, and what you can require of us.
1. Data controller. Juunam, rue des Aubépines 29, Luxembourg. VAT LU37624340. Contact: info@juunam.com. We answer privacy requests ourselves, at that address.
2. What we collect. Account data when you register: email address, and a password we never see in readable form. If you sign in with Apple or Google we receive your email address and name from them, and nothing else; we do not receive your password. Order data: delivery name and address, the items you bought, and the order history shown in your account. Correspondence: what you write to us through the contact and personal-shopping forms. Technical data: the usual server logs, which include IP address and browser, kept for security.
3. What we do NOT collect. We never receive or store your card number, expiry, or security code. Those go directly to our payment provider and never reach our servers.
4. Who processes data for us. Supabase hosts the database and accounts, in the EU (eu-west-1). Revolut processes payments and is the party that handles card details. Brevo sends order confirmations and account email. Vercel hosts and serves the site. Each acts on our instructions under a data processing agreement. We do not sell your data, and we do not share it for anyone else's advertising.
5. Why we are allowed to hold it. Performing our contract with you, for orders, delivery, accounts, and returns. Legal obligation, for invoicing and tax records. Legitimate interest, for security, fraud prevention, and keeping the site working.
6. How long we keep it. Order and invoice records for as long as Luxembourg tax law requires. Account data until you delete the account, after which it is removed except where a record must be retained by law. Server logs are kept short-term.
7. Your rights under the GDPR. You can download a portable copy of your data any time from your account, and close your account there to erase your name and saved addresses (order and invoice records are kept only as long as the law requires, then anonymised). For correction, restriction, objection, or to withdraw consent where processing rests on consent, write to info@juunam.com and we will respond within one month.
8. Complaints. If you believe we have handled your data wrongly you may complain to the Commission nationale pour la protection des données (CNPD) in Luxembourg, or to the supervisory authority where you live.
10. Collaborator submissions. If we invite you to contribute to juunam.com, we process the name, intro, story, links, photos and contact email you send, on the basis of your consent, to review and publish your profile. Photos are re-encoded and stripped of location and camera data. Photos waiting for review are stored privately and are only visible to us. Your email is used only for questions about your submission and is never shown. Photos we do not use are deleted when a submission is rejected. You can withdraw consent and ask for removal at any time at info@juunam.com.
Governed by Luxembourg law and the GDPR.
