Privacy Policy
Last updated: August 2026
Luna Statics is committed to protecting your personal data. This policy explains how we collect, use, store, and share your information when you use our website, customer portal, sell or buy a caravan through us, or take part in our referral programme. We act as the data controller for your personal information.
1. What Data We Collect
- Identity data: name, title
- Contact data: email address, phone number, postal address, postcode
- Caravan and enquiry data: make, model, year, location, condition information, photos, documents, expected price, and related valuation details
- Account data: customer portal login details, verification status, and account preferences
- Transaction and payment data: offers, purchase confirmations, deposits, balances, and payment records
- Bank details: account name, bank name, sort code, and account number where you provide them for seller payments or referral payouts
- Referral data: referral codes, link clicks, attribution records, conversion status, and fee amounts
- Technical data: IP address, browser type and version, operating system, device information
- Usage data: information about how you use our website and portal
- Marketing preferences: your preferences for receiving marketing communications
2. How We Collect Your Data
- Direct interactions (sell forms, contact forms, customer portal, newsletter sign-ups, purchases, referrals)
- Automated technologies (cookies, server logs — see our Cookie Policy). This includes a referral attribution cookie that may last up to 30 days when you use a personal referral link
- Third parties (such as finance providers, Sign in with Apple where you choose it, analytics providers, and payment or hosting providers)
3. How We Use Your Data
- Process and respond to valuations, offers, purchases, and transport arrangements
- Operate the customer portal and communicate about your enquiry or sale
- Run the referral programme (attribute referrals, calculate fees, and make payouts)
- Send marketing communications where you have consented or where otherwise permitted by law
- Improve our website, services, and fraud prevention
- Comply with legal, accounting, and tax obligations
4. Legal Basis for Processing
Contract (to handle your enquiry, sale, portal account, or referral payout); Legitimate interests (to run and improve our business, prevent fraud, and attribute referrals); Consent (for certain marketing and non-essential cookies); Legal obligation (for accounting, tax, and regulatory records).
5. Data Sharing
We do not sell your personal data. We may share data with: transport providers, finance lenders (where relevant), IT and hosting providers, email and analytics services, professional advisers, and (where required) law enforcement or regulators. All service providers are required to keep your data secure and use it only on our instructions where they act as processors.
If you are a referred seller, we may record that your enquiry was attributed to a referrer for programme administration. We do not publish your personal details to referrers beyond what is needed to operate the programme and our legitimate business records.
6. Cookies and Referral Attribution
We use cookies and similar technologies as described in our Cookie Policy. For referrals, we may set a cookie (for example luna_ref) for up to 30 days so we can attribute a later submission to the correct personal referral link.
7. Data Retention
We retain your data for as long as necessary for the purposes above. Transaction, referral, and payout records are typically kept for up to 6 years after the end of the relevant relationship to satisfy legal and accounting requirements, unless a longer period is required. Portal accounts may be retained while active and for a reasonable period afterwards.
8. Your Rights
Under UK GDPR, you have the right to: access, correct, or erase your data; object to or restrict processing; request data portability; and withdraw consent at any time where processing is based on consent. To exercise these rights contact us via our Contact page. You also have the right to complain to the ICO at ico.org.uk.
9. Security
We have implemented appropriate security measures to protect your data from unauthorised access, alteration, or disclosure. Bank details and portal credentials are treated as sensitive and access is restricted.
10. International Transfers
If we use providers that process data outside the UK, we will ensure appropriate safeguards are in place as required by UK data protection law.
11. Changes to This Policy
We may update this policy from time to time. Changes will be published on this page with an updated revision date.
12. Contact
For any questions please contact us via our Contact page.