Privacy Policy
Privacy Policy
Effective date: 20 September 2026
Last updated: 20 September 2026
1. Introduction
Lunavix Interiors (“Lunavix”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal data entrusted to us.
This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you:
visit our website or showroom;
contact us by telephone, email, WhatsApp or social media;
request information about our furniture or interior products;
ask for a quotation;
place an order or make a payment;
arrange delivery, installation, collection, repair or after-sales support;
subscribe to marketing communications;
participate in a promotion or customer survey;
interact with our employees, contractors or delivery personnel; or
otherwise engage with Lunavix.
This Policy applies to customers, prospective customers, website visitors, showroom visitors, authorized recipients of deliveries, suppliers, contractors and other individuals whose personal data we process.
We process personal data in accordance with the Nigeria Data Protection Act 2023, the Nigeria Data Protection Act General Application and Implementation Directive 2025, and other applicable privacy and data-protection requirements.
2. Who Is Responsible for Your Personal Data?
For the purposes of applicable data-protection law, Lunavix Interiors acts as the data controller when it determines why and how your personal data is processed.
Our contact details are:
Lunavix Interiors
No. 1 Prince Adelowo Adedeji Street
Lekki Phase 1, Lagos, Nigeria
Telephone: +234 906 673 1149
Email: hello@lunavix.co
Questions, complaints and requests concerning this Policy or your personal data should be directed to the contact details above.
3. Our Data-Protection Principles
When processing personal data, we aim to ensure that it is:
processed lawfully, fairly and transparently;
collected for specified, explicit and legitimate purposes;
adequate, relevant and limited to what is reasonably necessary;
accurate and kept up to date where necessary;
retained only for as long as reasonably necessary;
protected against unauthorized or unlawful processing, loss, destruction or damage; and
processed in a manner that demonstrates accountability and respect for your rights.
4. Personal Data We May Collect
Depending on how you interact with us, we may collect the following categories of personal data.
4.1 Identity and contact information
This may include your:
full name;
telephone number;
email address;
residential, billing or delivery address;
company or business name;
job title;
social-media username; and
preferred method of communication.
4.2 Order and transaction information
This may include:
products purchased or requested;
product reference codes;
quotations, invoices and receipts;
order dates and values;
applicable discounts;
payment status;
delivery notes;
delivery and installation instructions;
customer signatures;
information about an authorized recipient;
complaints, returns, repairs or warranty requests; and
correspondence relating to an order.
4.3 Payment information
When you make a payment, we may process information such as:
payment amount;
payment date;
payment method;
bank or transaction reference;
proof of payment;
account name; and
payment confirmation.
Where a bank, payment gateway or other payment service provider processes your payment, that provider may process additional financial information under its own privacy policy. Lunavix does not intend to collect or retain complete payment-card security details unless this is necessary and permitted by law.
4.4 Communications and customer-service information
We may retain communications you send to us through:
email;
telephone;
WhatsApp;
website forms;
Instagram or other social-media platforms;
showroom enquiries; and
customer-service or after-sales channels.
This information may include the content of your enquiry, product preferences, photographs, room measurements, delivery instructions, complaints and other information you voluntarily provide.
4.5 Website and device information
When you use our website, we or our authorized technology providers may automatically collect:
internet protocol address;
device and browser type;
operating system;
approximate location derived from your IP address;
pages viewed;
referring website;
time and date of visits;
actions performed on the website;
cookie identifiers; and
diagnostic, security and performance information.
4.6 Showroom and security information
Where security cameras operate at a Lunavix showroom, office, warehouse or collection point, we may record images of visitors for safety, security, loss prevention and incident investigation.
Appropriate notices should be displayed in areas where CCTV operates. We do not use CCTV in private areas.
4.7 Supplier, contractor and business-contact information
When dealing with suppliers, designers, installers, delivery providers, consultants or other business partners, we may process names, work contact details, contractual information, payment details and related correspondence.
4.8 Information relating to another person
You may provide information about another person, such as an authorized recipient, interior designer, contractor, family member or person receiving a delivery.
You should provide another person’s personal data only where you have authority to do so and have informed the person that their information will be shared with Lunavix.
5. How We Collect Personal Data
We may collect personal data:
directly from you;
through our website and online forms;
when you visit our showroom;
through WhatsApp, email, telephone or social media;
when you request a quotation or place an order;
when you make or confirm a payment;
when a delivery note is completed;
from a person acting on your behalf;
from payment providers and financial institutions;
from delivery, installation and logistics providers;
from our website, customer-management and business software;
from cookies and similar technologies;
from publicly available sources where lawful; and
from security systems operating at our premises.
6. How We Use Personal Data
We may process personal data to:
respond to product enquiries;
provide information about products, dimensions, materials, prices and availability;
prepare quotations;
create and manage customer accounts and records;
process and fulfil orders;
verify and record payments;
issue invoices and receipts;
arrange delivery, installation, collection or repair;
confirm that goods were delivered and received;
communicate about orders or services;
provide customer support and after-sales assistance;
manage returns, defects, warranties, complaints and disputes;
maintain accurate sales, inventory and accounting records;
communicate approved discounts and promotional offers;
improve our website, showroom experience, products and services;
conduct customer surveys and obtain feedback;
send marketing communications where permitted;
prevent fraud, theft, misuse and security incidents;
protect customers, employees, visitors and business property;
establish, exercise or defend legal claims;
comply with tax, accounting, regulatory and legal obligations; and
enforce our contracts, policies and terms of sale.
We will not use personal data for a materially different purpose without providing appropriate information and establishing a lawful basis.
7. Lawful Bases for Processing
Depending on the circumstances, we may rely on one or more of the following lawful bases.
7.1 Contract
We process personal data where it is necessary to take steps at your request before entering into a contract or to perform a contract with you.
This may include preparing a quotation, processing an order, issuing a receipt, arranging delivery or responding to a warranty request.
7.2 Consent
We may rely on your consent for activities such as:
optional marketing communications;
non-essential cookies;
certain photographs or testimonials; and
other processing where consent is appropriate.
You may withdraw consent at any time. Withdrawal will not affect processing that occurred lawfully before consent was withdrawn.
7.3 Legal obligation
We may process personal data to comply with obligations relating to taxation, accounting, consumer protection, regulatory requests, court orders and other applicable laws.
7.4 Legitimate interests
We may process personal data where reasonably necessary for our legitimate business interests or those of another person, provided those interests do not override your rights and freedoms.
These interests may include:
managing and improving our business;
maintaining customer and transaction records;
protecting our premises and products;
preventing fraud and misuse;
understanding customer preferences;
responding to enquiries;
managing disputes;
securing our website and systems; and
communicating with existing customers about related products where permitted.
We assess the necessity and potential impact of processing before relying on legitimate interests.
7.5 Vital interests and other lawful grounds
In limited situations, we may process personal data to protect someone’s life or physical safety, perform a task in the public interest, establish or defend a legal claim, or rely on another lawful ground recognized under applicable law.
8. Marketing Communications
We may use your contact information to send you information about Lunavix products, new collections, showroom events, approved offers or related services where:
you have consented;
applicable law otherwise permits the communication; or
we have another valid lawful basis.
Marketing messages may be sent by email, SMS, WhatsApp or another communication channel you have used with us.
You may stop receiving marketing communications at any time by:
using the unsubscribe option included in the message;
replying with a request to opt out; or
contacting support@lunavix.co.
Opting out of marketing will not stop essential communications relating to an enquiry, order, payment, delivery, warranty or customer-service matter.
We do not sell personal data to third parties for their independent marketing.
9. Cookies and Similar Technologies
Our website may use cookies and similar technologies to:
make the website function correctly;
remember preferences;
maintain security;
understand how visitors use the website;
measure website performance;
improve content and navigation; and
support advertising or social-media features where enabled.
Some cookies are necessary for the operation and security of the website. Where required, we will request your consent before placing analytics, advertising or other non-essential cookies.
You may manage cookies through the cookie controls provided on the website or through your browser settings. Blocking certain cookies may affect website functionality.
Where third-party services place cookies, their use of information may also be governed by their own privacy policies.
10. When We Share Personal Data
We may share personal data with trusted recipients where reasonably necessary, including:
delivery and logistics providers;
installers, technicians and repair personnel;
banks and payment service providers;
website hosting and technology providers;
customer-management, accounting and enterprise software providers;
email, messaging and communications providers;
professional advisers, including lawyers, accountants and auditors;
insurers;
security and fraud-prevention providers;
regulators, law-enforcement agencies, courts and government authorities;
prospective purchasers, investors or advisers in connection with a business restructuring or transaction; and
other parties where you instruct or authorize us to share the information.
Service providers may process personal data only for authorized purposes and should provide appropriate confidentiality, privacy and security safeguards.
We may also disclose information where required by law, necessary to enforce an agreement, needed to protect rights or safety, or required to establish or defend a legal claim.
11. International Transfers
Some of our technology, hosting, communications, payment or software providers may store or access personal data outside Nigeria.
Where personal data is transferred internationally, we will take reasonable steps to ensure the transfer complies with applicable data-protection law. Depending on the circumstances, safeguards may include:
transferring data to a jurisdiction recognized as providing adequate protection;
using approved contractual protections;
obtaining required regulatory authorization;
relying on an applicable legal exception; or
obtaining explicit consent after communicating relevant risks where legally appropriate.
You may contact us for further information about the safeguards used for a particular transfer.
12. Data Security
We use reasonable administrative, physical and technical measures designed to protect personal data against:
unauthorized access;
unlawful use or disclosure;
accidental loss;
alteration;
destruction;
damage; and
other forms of misuse.
These measures may include access controls, authentication procedures, confidentiality obligations, secure storage, software safeguards, staff awareness and controlled access to customer records.
No system or method of transmission is completely secure. You should protect your passwords, devices and account information and notify us promptly if you suspect unauthorized use of your information.
Where a personal-data breach occurs, we will assess the incident, take appropriate containment and remediation steps, and make notifications required by applicable law.
13. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, security and dispute-resolution requirements.
The period will depend on the type of information and why we process it. Our indicative retention periods include:
Enquiries that do not result in an order: generally up to 24 months after the last meaningful interaction;
Customer, order, invoice, receipt and payment records: generally up to seven years after the transaction or the end of the customer relationship;
Delivery notes and proof-of-delivery records: generally up to seven years after delivery;
Warranty, complaint and dispute records: for the duration of the matter and any applicable limitation period;
Marketing information: until you withdraw consent, object or the information is no longer reasonably required;
Website and security logs: for a period appropriate to security, diagnostic and operational requirements;
CCTV recordings: ordinarily up to 30 days unless an incident requires longer retention; and
Data-subject request records: for as long as reasonably necessary to demonstrate compliance and manage related claims.
We may retain information for longer where required by law, a regulator, litigation, an investigation or another legitimate reason.
When personal data is no longer required, we will delete, anonymize or securely destroy it, subject to technical and legal limitations.
14. Your Data-Protection Rights
Subject to applicable law and any lawful limitations, you may have the right to:
receive clear information about how we process your personal data;
request confirmation that we process your personal data;
obtain access to your personal data and receive a copy;
request correction of inaccurate or incomplete data;
request deletion of personal data in appropriate circumstances;
request restriction of processing;
object to processing, including certain direct-marketing activities;
withdraw consent where processing relies on consent;
request portability of eligible personal data in a structured, commonly used and machine-readable format;
object to decisions based solely on automated processing where such decisions have legal or similarly significant effects;
request human intervention where applicable; and
lodge a complaint with the Nigeria Data Protection Commission.
These rights are not absolute. We may decline or limit a request where permitted or required by law, but we will explain our decision where appropriate.
Lunavix does not currently intend to make decisions with legal or similarly significant effects based solely on automated processing.
15. How to Exercise Your Rights
To exercise a data-protection right, contact:
Email: hello@lunavix.co
Telephone: +234 906 673 1149
Address: No. 1 Prince Adelowo Adedeji Street, Lekki Phase 1, Lagos, Nigeria
Please describe your request clearly and provide sufficient information to help us locate the relevant records.
We may request reasonable proof of identity before fulfilling a request. This protects your information from unauthorized disclosure. If someone submits a request on your behalf, we may ask for evidence of their authority.
We will respond within the period required by applicable law. We will ordinarily handle a request without charge, although a reasonable fee may apply where permitted for a manifestly unfounded, excessive or repetitive request.
16. Complaints
Please contact us first if you have concerns about how we process personal data. We will investigate and attempt to resolve the matter fairly.
You also have the right to complain to the:
Nigeria Data Protection Commission
Website: www.ndpc.gov.ng
You may also pursue other remedies available under applicable law.
17. Children’s Privacy
Our products and services are intended primarily for adults. We do not knowingly solicit personal data directly from children.
Where information about a child is necessary for a legitimate transaction or service, we will seek authorization from a parent, guardian or other person legally responsible for the child, unless another lawful basis applies.
If you believe a child has provided personal data to us without appropriate authorization, contact us so that we can investigate and take appropriate action.
18. Social Media and Third-Party Platforms
When you communicate with Lunavix through Instagram, WhatsApp or another third-party platform, that platform may process information under its own privacy policy.
Information you publish publicly on social media may be visible to other users. Avoid sending sensitive or confidential information through public comments or unsecured channels.
Our use of information received through a third-party platform remains subject to this Policy, while the platform’s collection and independent use of information remains subject to its own terms and privacy practices.
19. Links to Other Websites
Our website may contain links to websites, payment pages, social-media services or other platforms operated by third parties.
Lunavix does not control those third parties and is not responsible for their independent privacy practices. Review the relevant privacy policy before submitting personal data to another website or service.
20. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business, technology, processing activities or legal obligations.
The revised version will be published with an updated effective date. Where a change materially affects how we process personal data, we will take reasonable steps to provide additional notice where required.
We encourage you to review this Policy periodically.
21. Contact Us
For enquiries, complaints or requests concerning personal data, contact:
Lunavix Interiors
No. 1 Prince Adelowo Adedeji Street
Lekki Phase 1, Lagos, Nigeria
Telephone: +234 906 673 1149
Email: hello@lunavix.co