We only contact you when you have asked us to.
Lunaire Works sends marketing communications — newsletters, product updates, and promotional emails — only to people who have given us clear, informed consent. This policy explains exactly how we collect that consent, what we send, how you can change your preferences at any time, and the UK law that governs all of it.
Last updated & effective: 25 June 2026
Who this policy applies to
This policy applies to all marketing and commercial electronic communications sent by Lunaire Works — a trading name owned and operated by STERZEAL HATS LIMITED, a company registered in England and Wales (Company No. 13249070). Our registered address is 126 Newark Avenue, Peterborough, PE1 4NP England, United Kingdom.
We sell decorative MDF wall panelling — including shaker-style kits, tongue and groove panels, dado rail systems, mouldings, and accessories — exclusively within the United Kingdom. All marketing communications we send relate directly to these products, associated installation guidance, and relevant promotions for UK customers.
This policy covers: emails, SMS messages, and any other electronic message sent for marketing purposes. It does not cover transactional messages such as order confirmations, dispatch notifications, or replies to your enquiries — those are service communications, not marketing, and are sent regardless of your marketing preferences.
The UK laws that govern our marketing
Several pieces of legislation apply to how UK businesses send marketing communications. Here is what they require, and how we meet each requirement.
| Legislation | What it requires | How Lunaire Works complies |
|---|---|---|
| Privacy and Electronic Communications Regulations 2003 (PECR) | Requires opt-in consent before sending marketing emails or SMS to individuals. Sets rules for cookies, electronic mail, and live calls. Enforced by the ICO. | We send marketing emails only to subscribers who have actively ticked an opt-in box or submitted their email via an explicit marketing sign-up form. We do not use pre-ticked boxes. |
| UK General Data Protection Regulation (UK GDPR) | Governs how personal data — including email addresses — is collected, stored, processed, and deleted. Requires a lawful basis for all data processing. Provides individuals with rights including access, rectification, erasure, and objection. | Our lawful basis for marketing email processing is consent (Art. 6(1)(a) UK GDPR). Consent is freely given, specific, informed, and unambiguous. We maintain timestamped records of when and how consent was given for each subscriber. |
| Data Protection Act 2018 (DPA 2018) | The UK's domestic implementation of data protection law, sitting alongside UK GDPR. Establishes the ICO as the supervisory authority. | We register with the ICO as a data controller in accordance with DPA 2018 requirements. Our Privacy Policy sets out our data controller obligations in full. |
| Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 | Requires that pre-contract information provided to customers is clear and accurate, including any marketing communication terms. | Our checkout and sign-up forms clearly distinguish marketing consent from order completion. Marketing sign-up is always optional and never a condition of purchase. |
| Consumer Protection from Unfair Trading Regulations 2008 | Prohibits misleading or aggressive commercial practices, including deceptive marketing communications. | All our marketing emails accurately represent products, prices, and promotions. We do not use false urgency, misleading subject lines, or deceptive sender identities. |
| Companies Act 2006 / Trading Disclosures Regulations 2008 | Requires that electronic communications from a UK company include the registered company name, registered number, and registered address. | Every marketing email sent by Lunaire Works includes our full registered company details: STERZEAL HATS LIMITED, Company No. 13249070, 126 Newark Avenue, Peterborough, PE1 4NP England, United Kingdom. |
How we collect email addresses
We collect email addresses through four distinct routes. Each route is described below, including the consent mechanism used at the point of collection.
Newsletter sign-up form
We operate a newsletter sign-up form on our website, typically displayed in the site footer and on selected product and landing pages. This form collects an email address only. The form includes an unticked opt-in checkbox with the statement: "I agree to receive marketing emails from Lunaire Works about new products, offers, and wall panelling inspiration. I can unsubscribe at any time."
The checkbox is not pre-ticked. Submission of the form without checking the box does not result in marketing emails being sent. The form cannot be submitted without the checkbox being explicitly ticked by the user.
On submission, we record the date, time, IP address, and source URL of the consent. This consent record is stored in our Shopify email marketing system and can be produced on request.
Checkout — optional marketing opt-in
When a customer places an order on lunaireworks.com, their email address is collected as part of the transaction to send order confirmation and dispatch notifications. This is a service communication, not marketing, and does not require marketing consent.
During checkout, we present a separate, unticked checkbox: "Send me news, updates, and exclusive offers from Lunaire Works." Ticking this box constitutes valid marketing consent under PECR. Leaving it unticked means the customer's email address is used for transactional communications only. Completing a purchase is never conditional on ticking the marketing box.
Account registration
Customers who create an account on lunaireworks.com provide their email address for account management purposes. Account creation does not automatically enrol customers in marketing communications. Marketing preferences are displayed separately within the account dashboard, and customers can opt in or out at any time from within their account settings.
The lawful basis for processing an account email address is contract performance (Art. 6(1)(b) UK GDPR) for account-related communications, and consent (Art. 6(1)(a) UK GDPR) for any marketing communications.
Direct enquiries and live chat
When you contact us by email, telephone, or live chat, your email address is used to respond to your enquiry. This is a service communication. We do not use email addresses collected via customer service enquiries to send marketing communications unless you have separately and explicitly consented via one of the routes described above.
If you contact us to request product information, and during that exchange express interest in receiving updates, we will direct you to our sign-up form to record proper consent rather than adding you to our list manually without a formal consent record.
The consent journey — step by step
This is the exact sequence from first visit to receiving a marketing email from Lunaire Works, and at each stage what controls you have.
You visit lunaireworks.com
Our privacy and cookie banner is displayed on your first visit. It explains what cookies we use and links to our full Privacy Policy. You can accept, customise, or decline non-essential cookies. No marketing email is sent as a result of visiting the site.
You choose to sign up or check out
You actively locate the newsletter form, create an account, or proceed to checkout. In each case, marketing sign-up is a separate, clearly labelled, unticked action. There is no automatic enrolment.
You tick the opt-in box (explicit consent)
By ticking the checkbox, you confirm you want to receive marketing emails from Lunaire Works. The consent statement displayed at this point is plain, specific, and not combined with any other agreement. We record the timestamp, source, and IP address of this consent event in Shopify.
You receive a confirmation email
We send a single confirmation email acknowledging your subscription. This email includes your unsubscribe link prominently, a plain-language summary of what to expect, and a link to this policy. We do not send marketing content in the confirmation email itself.
You receive marketing emails from us
Every email we send contains: our full legal identity, the reason you are receiving it, a prominent unsubscribe link, and a postal address. You can unsubscribe at any time, from any email, with a single click.
You unsubscribe — processed within 10 business days
On clicking unsubscribe, you are taken to a confirmation page. Your address is removed from our active marketing list. You may continue to receive transactional messages relating to any open orders. Your consent record is retained as evidence but marked as withdrawn.
What every marketing email contains
- Our legal sender identity: "Lunaire Works" with the reply address info@lunaireworks.com — we never use a misleading sender name or a no-reply address that blocks responses.
- Accurate subject line: the subject line reflects the actual content of the email. We do not use deceptive, misleading, or false urgency subject lines.
- Prominent unsubscribe link: a clearly labelled "Unsubscribe" link is included in the footer of every marketing email, above our company details.
- Registered company details: STERZEAL HATS LIMITED, Company No. 13249070, 126 Newark Avenue, Peterborough, PE1 4NP England, United Kingdom — included in the email footer as required by the Companies Act 2006.
- Reason for contact: a short note at the bottom states why you are receiving the email, e.g. "You are receiving this email because you subscribed at lunaireworks.com."
- No hidden charges or obligations: no marketing email creates a financial obligation or hidden charge. Any promotional offer includes full terms, expiry dates, and conditions in plain language.
Our privacy and cookie banner approach
Under PECR and UK GDPR, we are required to obtain consent before placing non-essential cookies on your device. Here is exactly how our privacy banner works.
What the banner displays
When you visit lunaireworks.com for the first time, a cookie consent banner is displayed at the bottom of the screen. It contains a plain-language summary of the cookies we use, divided into three categories:
- Essential cookies — required for the website to function (shopping cart, checkout, login session). Always active. No consent required under PECR Reg. 6(4).
- Analytics cookies — anonymous visitor data used to understand how customers use the website (e.g. which product pages are most visited). These require your consent and are off by default.
- Marketing cookies — used to show you relevant advertising on third-party platforms (if applicable). These require your consent and are off by default.
What choices the banner gives you
The banner presents three clearly labelled options:
Accept All
Consents to essential, analytics, and marketing cookies. Your choice is recorded with a timestamp in a first-party cookie on your browser.
Customise Settings
Opens a granular preference panel where you can enable or disable analytics and marketing cookies individually. Essential cookies cannot be deactivated.
Reject Non-Essential
Declines analytics and marketing cookies. Only essential cookies are placed. You can still browse, shop, and checkout without restriction.
You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the site footer. Your settings are stored for 12 months before the banner reappears.
What we send — and what we never send
All marketing communications from Lunaire Works relate to our wall panelling products, accessories, and associated offers for UK homeowners and tradespeople.
What we send
- New product announcements — when we add new panel styles, sizes, or product lines to lunaireworks.com.
- Seasonal and promotional offers — discounts, limited-time bundle pricing, or trade promotions, with full terms included in each email.
- Installation tips and project inspiration — practical DIY guidance, room transformation examples, and product advice relevant to our panelling range.
- Restock notifications — alerts when a previously unavailable product becomes available again (only to customers who have separately opted in to restock alerts for that product).
- Important policy updates — where a change to our Terms of Service, Privacy Policy, or this policy materially affects your rights or our service, we may notify active subscribers.
What we never send
- Third-party marketing — we do not sell, rent, or share your email address with any third-party business for their own marketing purposes.
- Misleading subject lines — we do not use false claims, manufactured urgency ("Your account will be suspended"), or deceptive previews to encourage opens.
- Hidden identity — all emails are sent from a clearly identifiable Lunaire Works address. We never disguise the commercial nature of a marketing communication.
- Post-unsubscribe marketing — once you unsubscribe, we do not send further marketing emails. We process unsubscribe requests within 10 business days and do not re-add you without a new, separate consent event.
- Unsolicited bulk email (spam) — we never purchase email lists, scrape email addresses from public sources, or send marketing to addresses where we do not hold a valid, recorded consent event.
How to opt out — all your options
You have the right to withdraw marketing consent at any time, with no negative consequences. Here are all the ways to do it.
Unsubscribe link in email
Every marketing email includes an "Unsubscribe" link in the footer. Clicking this link takes you to a confirmation page. No login or form-filling is required. This is the fastest method and is processed automatically. Your address is removed within 10 business days.
Account preferences
If you have a Lunaire Works account, log in and navigate to Account → Communication Preferences. You can toggle marketing emails off with a single click. Changes are applied to your next scheduled send. You will still receive transactional emails relating to open orders.
Email or call us
Email info@lunaireworks.com with the subject line "Unsubscribe" and your email address, or call us on +44 33 0043 9923 during business hours (Mon–Fri, 9:00 AM–5:00 PM GMT). We will process your request within 10 business days and confirm removal by email.
Data retention — how long we keep your email address
We do not keep data for longer than necessary. Here is exactly how long we retain email addresses collected for different purposes.
| Data type | Purpose | Lawful basis | Retention period |
|---|---|---|---|
| Marketing subscriber email | Sending marketing communications | Consent (Art. 6(1)(a) UK GDPR) | Until unsubscribe or withdrawal of consent, then deleted within 30 days. Consent record retained for 6 years as evidence. |
| Customer order email | Order confirmation, dispatch, returns, support | Contract performance (Art. 6(1)(b) UK GDPR) | 7 years from the date of the last order, in line with HMRC financial record-keeping requirements. |
| Account registration email | Account management and login | Contract performance (Art. 6(1)(b) UK GDPR) | Duration of account plus 2 years after account deletion request. |
| Customer service enquiry email | Responding to customer questions and complaints | Legitimate interests (Art. 6(1)(f) UK GDPR) | 3 years from date of last communication, unless the matter relates to a legal claim. |
| Consent event record (timestamp, IP, source) | Evidence of consent for regulatory purposes | Legal obligation / legitimate interests | 6 years from the date of consent, in line with the Limitation Act 1980 for civil claims. |
Your rights under UK data protection law
As a UK data subject, you hold the following rights in relation to the personal data we hold about you. All requests are free of charge and will be responded to within one calendar month.
Right of access (Subject Access Request)
You can request a copy of all personal data we hold about you, including your email address, any order history linked to your account, consent records, and communication history. Email us at info@lunaireworks.com with the subject line "Subject Access Request".
Right to rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. For account holders, most information can be updated directly from your account dashboard. For other corrections, contact us at info@lunaireworks.com.
Right to erasure
You can request deletion of your personal data where it is no longer necessary, where you withdraw consent, or where processing is unlawful. Subject to legal retention obligations described above, we will delete the data and confirm this in writing.
Right to object
You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. On receipt of an objection, we will cease all marketing communications immediately and update our records accordingly.
Right to restriction of processing
You can request that we restrict how we process your data in certain circumstances — for example, if you contest the accuracy of the data we hold while we verify it. During a restriction, we will store the data but not actively process it for marketing purposes.
Right to data portability
Where processing is based on consent and carried out by automated means, you can request your data in a structured, commonly used, machine-readable format (such as CSV). This allows you to transfer it to another service if you choose. Request this by contacting info@lunaireworks.com.
Third-party tools and data processors
We use a small number of trusted third-party services to operate our website and send marketing communications. Here is who they are and what they do with your data.
Shopify (platform and email marketing)
Our website is hosted on Shopify. Shopify processes order data, customer accounts, and — where we use Shopify Email — marketing subscriber data. Shopify is our data processor for these activities, operating under a Data Processing Agreement (DPA) that requires them to handle your data in compliance with UK GDPR.
Shopify stores data in data centres located in the United States, under Standard Contractual Clauses (SCCs) that provide an appropriate safeguard for international data transfers from the UK, in accordance with the ICO's guidance on restricted transfers post-Brexit.
For Shopify's own privacy practices, see shopify.com/legal/privacy.
Analytics and advertising tools
Where you have consented to analytics cookies, we may use tools such as Google Analytics 4 to collect anonymised, aggregated data about how visitors use our website. This data does not identify you personally. We do not use this data to target you individually with marketing messages.
Where you have consented to marketing cookies, we may use third-party advertising pixels (such as Meta Pixel or Google Ads conversion tracking) to understand the effectiveness of our advertising campaigns. These tools may use anonymised identifiers to match website visits to ad interactions.
In all cases, these tools are only active after you have given explicit cookie consent. If you withdraw cookie consent, these tools are disabled for your browser session.
Received an email you didn't expect? Here's what to do.
If you have received a marketing email from Lunaire Works that you did not consent to, or if you believe an email purporting to be from us is fraudulent, please act using the steps below.
Check whether you opted in
If you have previously shopped with us, you may have ticked the marketing opt-in checkbox at checkout without recalling doing so. Your consent record — including the date and source page — is available on request by emailing info@lunaireworks.com.
Unsubscribe using the link in the email
Every legitimate Lunaire Works marketing email contains a clearly visible "Unsubscribe" link at the bottom of the email. Click this and your address is removed from our list. This is the fastest route to stopping further emails.
Contact us directly if the email looks suspicious
If you received an email claiming to be from Lunaire Works that looks fraudulent — unusual sender address, requests for payment or personal details, suspicious links — do not click any links in that email. Forward it to info@lunaireworks.com as an attachment. We will investigate and, if it is fraudulent, report it to the appropriate authorities.
Report spam to the ICO or Action Fraud
If you believe you have received unsolicited marketing email from us in breach of PECR, you can report this to the ICO at ico.org.uk/make-a-complaint. For fraudulent emails (phishing), report to Action Fraud at actionfraud.police.uk or by calling 0300 123 2040. You can also forward suspicious emails to the NCSC's reporting service at report@phishing.gov.uk.
How to identify a genuine Lunaire Works email
- Sent from @lunaireworks.com — we will never send from a Gmail, Yahoo, or generic address.
- Contains our full registered name — STERZEAL HATS LIMITED — and company number 13249070 in the footer.
- Never asks for your password, full card number, or bank account details by email.
- Links go to lunaireworks.com only — hover over any link before clicking to verify the destination.
- Relates to wall panelling, MDF products, or installation guidance — we do not send emails about unrelated products.
- Contains a visible "Unsubscribe" link — any genuine Lunaire Works marketing email will always include one.
Data controller, contact details & company information
For all data protection, unsubscribe, and marketing-related queries, contact us directly. We aim to respond to all requests within 5 working days.
Contact us
- Phone+44 33 0043 9923
- Emailinfo@lunaireworks.com
- Live ChatAvailable on the website during business hours
- Business HoursMon–Fri, 9:00 AM–5:00 PM (GMT, UK)
Data controller — registered details
The data controller for all personal data processed by Lunaire Works is STERZEAL HATS LIMITED, registered in England and Wales.
- Registered company nameSTERZEAL HATS LIMITED
- Company registration no.13249070
- VAT numberGB433989551
- EORI numberGB084160128000
- Registered address126 Newark Avenue, Peterborough, PE1 4NP England, United Kingdom
- ICO registrationRegistered with the ICO as a data controller under DPA 2018
Questions about how we handle your data?
We are a small UK team and we handle all data enquiries personally. Email us directly and we will respond within 5 working days.
