Privacy Policy

Last updated: June 30, 2026

Lunastri is a space built on trust. That extends to how we handle your information. This policy explains, in plain language, what we collect, why, and what control you have over it.

1. Who we are

Lunastri is operated by Astri Hernandez Lanza, an individual based in France, trading as Lunastri. We are the data controller for the personal information described in this policy.

You can reach us directly at hello@lunastri.com for any question or request related to your data.

2. What data we collect

If you join the waitlist

• Your email address

If you apply to become a practitioner

• First and last name
• Email address
• Date of birth (used to generate your numerology profile as part of our review process)
• Country and city of residence
• Practice details: specialty, years of experience, languages, session formats, a description of your practice, and your responses to our application questions
• Optional: website and social media links you choose to share

If you use the numerology calculator

Your name and date of birth are used to calculate your reading entirely within your own browser. This information is not sent to our servers, not stored by us, and not visible to us in any way, unless you separately choose to join the waitlist or apply as a practitioner using the same details.

Automatically collected technical data

We use privacy-focused analytics (see Section 8) that does not use cookies and does not collect personally identifiable information such as your name, email, or IP address.

3. Why we collect it

• Waitlist email: to notify you when new features, practitioners, or content become available
• Practitioner application data: to personally review your application, verify your suitability to join our curated community of practitioners, and contact you about the outcome
• Date of birth (practitioners): specifically and only to generate a numerology profile as part of our review, consistent with the spiritual nature of the platform

We do not use your data for advertising, and we do not sell your data to anyone, ever.

4. Our legal basis for processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Consent — by submitting the waitlist form or the practitioner application, you actively choose to give us your information for the stated purpose
• Legitimate interest — reviewing practitioner applications to maintain a trustworthy, curated platform is a legitimate interest of our business, balanced against your rights as described in this policy

5. Who we share data with

We use a small number of trusted service providers to operate Lunastri. We do not sell, rent, or trade your data.

Each provider only receives the minimum data necessary to perform its function, and is contractually bound to handle it securely.

6. How long we keep your data

We keep waitlist and practitioner application data for as long as your relationship with Lunastri is active or until you ask us to delete it — whichever comes first. We do not currently apply an automatic deletion schedule.

7. Your rights

Under GDPR, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data (see Section 6)
• Restriction — ask us to limit how we use your data
• Objection — object to our processing of your data on legitimate interest grounds
• Portability — request your data in a portable, machine-readable format
• Withdraw consent — at any time, with no effect on the lawfulness of processing before withdrawal

To exercise any of these rights, email hello@lunastri.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority — in France, this is the CNIL.

8. Cookies and analytics

Lunastri does not use cookies for tracking or advertising. We use Umami, a privacy-first analytics tool that:

• Does not use cookies
• Does not collect or store your IP address
• Does not track you across other websites
• Cannot identify you personally

Umami tells us anonymous, aggregate information such as how many people visited a page or used the calculator — never who any individual visitor is. Because no personal data or tracking cookies are involved, a cookie consent banner is not required under GDPR for this analytics setup.

9. How we protect your data

We take the security of your information seriously. Measures in place include:

• Encrypted data transmission (HTTPS) across the entire site
• Database access restricted by Row Level Security — submitted data cannot be read, edited, or deleted by anyone outside our team, including other website visitors
• Strict input sanitisation on all forms to prevent malicious data submission
• Two-factor authentication on all administrative accounts
• No sensitive credentials are ever exposed in the website's public code

10. Children's privacy

Lunastri is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will remove it promptly.

11. Changes to this policy

We may update this policy as Lunastri grows. Any changes will be posted on this page with an updated date at the top. If changes are significant, we will make reasonable efforts to notify waitlist subscribers and applicants directly.

12. Contact us

For any question about this policy or your data, reach us at hello@lunastri.com.