GDPR & Data Rights
Last updated: 21 May 2026
If you are in the UK or EEA, the UK GDPR and EU GDPR give you the following rights over your personal data. LunaSync respects these rights worldwide.
Your Rights
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure ("right to be forgotten") — ask us to delete your account and personal data.
- Restriction — ask us to limit processing in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — for any processing based on consent, at any time.
- Lodge a complaint — with your supervisory authority (e.g. the UK ICO at ico.org.uk).
How to Exercise Your Rights
Most actions can be performed directly in your account settings — update your profile, export data, or delete your account. For anything else, email privacy@lunasync.live from the address on your account.
We respond to verified requests within 30 days, free of charge in most cases.
Data Controller
LunaSync is the controller for the personal data described in our Privacy Policy.
Data Processors
We rely on vetted sub-processors for hosting, authentication, payments and email delivery. A current list is available on request.
Automated Decision-Making
LunaSync uses algorithms to generate personalised insights. These produce recommendations, not legally significant decisions, and you can ignore or override them at any time.