Privacy policy

Last updated: 3 November 2026

1. Who processes your data

Data controller: LUNA BLU di Buonocore Raffaella & C. snc, Via Antonio Gramsci 11/3, 43126 Parma, Italy, VAT no. 02265450342, email lunabluparma@gmail.com, phone 0521 995173.

2. What data we collect

Only what you write in the website forms: name, phone, email, date, time and number of guests of your booking, notes, birthday (day and month only, optional). We also record the page you write from, the language, where you came from (for example Google or Instagram) and the date and time you accepted this privacy policy.

If you write allergies or intolerances in the notes, we use them only to serve you at the table, never for marketing.

For the agreement lunch: name, mobile number, delivery point or pick-up, the dishes chosen, your Blu Be card number (optional) and notes. For the Luna Blu Family: name, mobile, email, birthday (optional), your gift card code and the days you check in with the QR code at the till. For the gift card to give: your details, the recipient’s name and the message.

If you tick «Remember my details» in the agreement lunch form, your name, mobile, card and delivery point are saved only on your phone (browser storage), to fill in the form next time. You can delete them by unticking the box at your next order or clearing the site data in your browser.

3. Why we use it

• To answer your booking, quote and contact requests (pre-contractual measures, art. 6.1.b GDPR).
• To prepare and deliver your agreement lunch, to give you the Family gift card and gifts and to handle the gift card you give (performance of the service you request, art. 6.1.b GDPR).
• To send you news, offers and greetings by email, WhatsApp and SMS, only if you tick the consent box (consent, art. 6.1.a GDPR). You can withdraw it at any time.

4. For how long

Requests for the time needed to handle them; marketing data for 24 months from the last contact or until you withdraw your consent. Agreement lunch orders are deleted automatically after 12 months, Family visits after 24 months, gift cards 12 months after they expire. Backup copies of the forms on the website are deleted automatically after 90 days.

5. Who sees it

Our staff and the technical providers who help us, appointed as data processors: the company hosting the website, GoHighLevel (LeadConnector, the software we use to manage contacts) and, when active, the online booking system. We never sell your data.

6. Transfers outside the European Union

GoHighLevel is based in the United States: the transfer takes place with the safeguards provided by the GDPR (Data Privacy Framework or standard contractual clauses).

7. Your rights

You can ask us at any time to access, correct or delete your data, to restrict its use, to receive a copy or to object to processing (arts. 15-22 GDPR): write to lunabluparma@gmail.com. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it). To stop receiving messages just use the link at the bottom of our emails or reply «STOP».