Privacy Opt-Out Request Form

Your Privacy Rights

Privacy Opt-Out & Data Rights Request

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have specific rights over how Lunaire Works — operated by STERZEAL HATS LIMITED — collects, uses and processes your personal data. Use this page to exercise any of those rights, including opting out of marketing, objecting to data processing or requesting erasure of your information.

Submit a Request Read Our Privacy Policy

Last updated & effective: 25 June 2026  ·  Applies to all personal data processed by STERZEAL HATS LIMITED (trading as Lunaire Works)

Who is responsible for your data?

Lunaire Works is a trading name of STERZEAL HATS LIMITED, the data controller responsible for any personal information you provide when shopping with us, subscribing to our communications, or visiting our website at lunaireworks.com.

Data controller contact details

Registered company details

STERZEAL HATS LIMITED is registered in England and Wales and trades under the name Lunaire Works.

  • Registered company nameSTERZEAL HATS LIMITED
  • Company registration no.13249070
  • VAT numberGB433989551
  • EORI numberGB084160128000
  • ICO registrationRegistered with the UK ICO
What data do we hold about you? Depending on how you have interacted with Lunaire Works, we may hold your name, delivery and billing address, email address, phone number, order history, payment reference, IP address, browsing behaviour on our website (via cookies), and any communications you have sent us. We do not store full payment card details — checkout is processed through Shopify's PCI-DSS-compliant payment system.

Your rights under UK law

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to the personal data we hold about you. This form allows you to exercise any of them.

Right to be Informed

You have the right to know what personal data we collect, why we collect it, how long we keep it, and who we share it with. This is explained in our Privacy Policy.

Right of Access (SAR)

You can request a copy of all personal data we hold about you — known as a Subject Access Request (SAR). We must provide this free of charge within one calendar month.

Right to Rectification

You can ask us to correct inaccurate personal data or complete incomplete data that we hold about you. We will act on this within one calendar month.

Right to Erasure

Also known as the "right to be forgotten." You can ask us to delete your personal data where there is no compelling reason for us to continue holding it, subject to legal retention obligations.

Right to Restrict Processing

You can ask us to pause the processing of your data in certain circumstances — for example, while we investigate the accuracy of data you have disputed.

Right to Data Portability

Where we process your data by automated means and with your consent or to fulfil a contract, you can ask us to provide your data in a structured, commonly used, machine-readable format.

Right to Object

You have an absolute right to object to direct marketing and profiling related to marketing. You can also object to processing based on our legitimate interests, unless we can demonstrate compelling grounds that override your rights.

Rights re: Automated Decisions

You have the right not to be subject to a decision made solely by automated processing — including profiling — that produces legal or similarly significant effects concerning you.

Right to Withdraw Consent

Where we rely on your consent to process your data — such as for marketing emails — you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

Legal basis: These rights are established under Articles 13–22 of the UK General Data Protection Regulation (UK GDPR) as retained in UK law by the European Union (Withdrawal) Act 2018, and further implemented through the Data Protection Act 2018 (DPA 2018). The Privacy and Electronic Communications Regulations 2003 (PECR) additionally govern your rights regarding electronic marketing and cookies.

What you can opt out of

The form below allows you to request any combination of the following opt-outs. Read each description carefully and select all that apply to your situation.

Marketing Opt-Out

You can unsubscribe from all marketing communications from Lunaire Works at any time, including promotional emails, product updates and newsletters. Under PECR 2003, we must obtain your explicit consent before sending direct marketing by electronic means, and you have an absolute right to opt out at any time without giving a reason.

Quickest method: Use the "Unsubscribe" link at the bottom of any marketing email we have sent you. You can also use the form on this page.

Personalised & Targeted Advertising Opt-Out

Our website may use cookies and tracking technologies — including those used by Shopify and third-party advertising platforms — to serve you targeted or personalised advertisements based on your browsing behaviour. You have the right to object to this processing under Article 21 UK GDPR.

You can also manage this directly via your browser cookie settings or via our Cookie Preferences banner when you first visit the website.

Data Erasure ("Right to be Forgotten")

Under Article 17 UK GDPR, you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, you withdraw consent, you object to processing and there is no overriding legitimate interest, or the data has been unlawfully processed.

Please note: we are required by law to retain certain records — such as financial and transactional data — for a minimum of 6 years under HMRC guidance. Such records cannot be erased upon request but will be restricted to the minimum necessary legal retention.

Object to or Restrict Processing

Under Article 18 UK GDPR, you can ask us to restrict how we use your data in certain circumstances — for example if you contest the accuracy of your data, or if processing is unlawful but you prefer restriction over erasure. Under Article 21, you can object to processing based on our legitimate interests.

Where you object to processing for direct marketing purposes, we must stop processing your data for those purposes with immediate effect — no balancing test applies.

Data Portability Request

Under Article 20 UK GDPR, where we process your data by automated means on the basis of consent or contract, you can request a copy of your data in a structured, machine-readable format (e.g. CSV or JSON), or ask us to transmit it directly to another controller where technically feasible.

Subject Access Request (SAR)

Under Article 15 UK GDPR, you can ask us to confirm whether we process your personal data, and if so, request a copy of all data we hold about you. This includes the purposes of processing, the categories of data, any recipients, and the retention period. We must respond within one calendar month at no charge.

Submit your privacy request

Complete the form below to submit your privacy opt-out or data rights request. We will acknowledge your request within 72 hours and fulfil it within one calendar month, as required by UK GDPR. All fields marked * are required.

Step 1 — Your Details

Your personal details

Step 2 — Type of Request

Select the request(s) you wish to make

Select all that apply. You may submit more than one request at a time.

Step 3 — Identity Verification

Verify your identity

Under UK GDPR, we are required to verify your identity before acting on a data rights request. This protects you — it prevents anyone else from requesting changes to your data without your knowledge. We may contact you to confirm your identity before processing your request.

How we verify your identity: For most requests, confirming your name and the email address linked to your account is sufficient. For erasure requests or Subject Access Requests (SARs), we may ask you to confirm an order number, delivery address, or another piece of information only you would know. We will never ask for your payment card details or bank account information for verification purposes.
Step 4 — Declarations

Please read and confirm the following

Your request will be acknowledged within 72 hours and fulfilled within one calendar month in accordance with UK GDPR.

Thank you — your privacy request has been received. We will acknowledge it within 72 hours and respond within one calendar month. Please check your email for a confirmation. If you do not receive it, contact us at info@lunaireworks.com.
Something went wrong submitting your form. Please try again, or send your request directly to info@lunaireworks.com with the subject line "Privacy Opt-Out Request".

What happens after you submit

Here is exactly what to expect after you submit your privacy request to Lunaire Works.

Immediate — submission confirmed

You will see a confirmation message on this page and receive an automated confirmation email to the address you provided.

Within 72 hours — acknowledgement

A member of our team will personally acknowledge your request by email, confirm what action we intend to take, and advise if we need any further information to verify your identity.

Identity verification (if required)

For erasure requests, SARs and correction requests, we may ask you to confirm a further piece of identifying information. This is required under UK GDPR to protect you.

Within 1 calendar month — full response

We will complete all action on your request and confirm this to you in writing within one calendar month of receiving your request. This is the maximum UK GDPR allows.

Extension (complex or multiple requests)

Where a request is particularly complex or you have made several requests, we may extend the response period by a further two months. We will inform you of any extension within the initial one-month period, along with the reason for the delay, as required by Article 12(3) UK GDPR.

72 hoursAcknowledgement of your request
1 calendar monthMaximum response time (UK GDPR)
Free of chargeNo fee for exercising your rights
In writingAll responses confirmed by email

When we may decline a request

  • The request is manifestly unfounded or excessive (e.g. repetitive). We may charge a reasonable administrative fee or refuse, but will explain why.
  • We cannot verify your identity to our satisfaction, even after requesting further information.
  • An erasure request conflicts with a legal obligation to retain data (e.g. HMRC requires 6 years of financial records).
  • An objection to processing based on legitimate interests is overridden by compelling legitimate grounds that outweigh your interests, rights and freedoms.

If we decline all or part of your request, we will always explain the reason in writing and advise you of your right to complain to the ICO.

Alternative contact methods: If you prefer not to use this form, you may also submit your privacy request by emailing info@lunaireworks.com with the subject line "Privacy Opt-Out / Data Rights Request", by calling us on +44 33 0043 9923 (Mon–Fri, 9:00 AM–5:00 PM GMT), or by writing to us at STERZEAL HATS LIMITED, 126 Newark Avenue, Peterborough, PE1 4NP England, United Kingdom.

Cookies & tracking technologies

Our website uses cookies and similar tracking technologies. Under PECR 2003 (which implements the EU Cookie Directive in UK law), we are required to obtain your informed consent before placing non-essential cookies on your device.

Strictly Necessary Cookies

Essential for the website and checkout to function. These include your shopping basket, session authentication and security tokens. They cannot be opted out of while using the site. No consent is required.

Analytics Cookies

We use anonymised analytics (e.g. Shopify Analytics) to understand how visitors use our site and to improve it. These are only placed with your consent and do not identify you personally.

Marketing & Targeting Cookies

Used to serve you personalised advertisements on third-party platforms (e.g. Meta, Google). Only placed with your consent. You can withdraw consent at any time by updating your cookie preferences below.

How to manage your cookie preferences: You can withdraw or amend your cookie consent at any time by using our Cookie Preferences tool (accessible via the link in our website footer), or by adjusting your browser settings to block or delete cookies. Please note that blocking strictly necessary cookies may prevent the website from functioning correctly.

You may also opt out of interest-based advertising by Google via adssettings.google.com and by visiting youronlinechoices.com (the IAB's industry opt-out tool, available in the UK).

Your right to complain to the ICO

If you are not satisfied with how we handle your privacy request, or believe we have mishandled your personal data, you have the right to lodge a complaint with the UK's supervisory authority for data protection.

Information Commissioner's Office (ICO)

The ICO is the UK's independent body set up to uphold information rights. You may contact them at any time, but we encourage you to contact us first so we have the opportunity to resolve your concern.

Before contacting the ICO

We ask that you try to resolve any concerns with us directly in the first instance. Here is our escalation process:

  • 1 Step 1: Submit your request via this form or by emailing info@lunaireworks.com
  • Step 2: We acknowledge within 72 hours and respond fully within one calendar month.
  • Step 3: If you are unsatisfied with our response, escalate to us in writing. We will review at a senior level.
  • Step 4: If still unresolved, you have the right to contact the ICO at any time without further obligation to us.
Your rights are protected by law: As a UK-registered business, STERZEAL HATS LIMITED is bound by the UK General Data Protection Regulation, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003. Violation of these rights is enforceable by the Information Commissioner's Office, which has the power to issue fines of up to £17.5 million or 4% of annual global turnover (whichever is higher) for serious breaches under the DPA 2018.
Privacy Policy Terms of Service Shipping Policy Refund Policy Contact Us ICO Website

Questions about your privacy?

We're a small UK team and we reply to privacy requests directly — no automated responses, no chatbots. If you have any question about how we handle your data, please get in touch.

Submit a Request Email Us Directly

STERZEAL HATS LIMITED  ·  Company No. 13249070  ·  VAT No. GB433989551  ·  126 Newark Avenue, Peterborough, PE1 4NP England, United Kingdom  ·  +44 33 0043 9923  ·  info@lunaireworks.com