1. Scope and responsible entities
This Privacy Policy applies to lunaxstudios.com, the public Luna x Studios website, and general inquiries sent through the contact details shown on it. The website is operated within the Luna x Studios group by L'Una Music Group LLC in the United States, with support from L'Una Studios LTDA in Brazil.
The Luna x Studios ecosystem links to distinct products and services, including publishing, distribution, design, funding, royalty, record-label, marketing, and playlist services. When another website, dashboard, application, order, agreement, or invoice provides a separate privacy notice, that notice governs the relevant service and processing.
This policy does not control independent websites, digital service providers, social networks, streaming platforms, or other third parties linked from our pages.
2. Information we collect
Information you provide
If you email us or otherwise contact us, we may receive your name, email address, company, artist or project name, role, country, message, attachments, and any other information you choose to provide. Please do not send passwords, financial account credentials, government identification, unreleased recordings, or other sensitive information unless we have requested it through an appropriate secure channel.
Technical and usage information
Our hosting, network, and security providers may automatically process standard technical data needed to deliver and protect the website. This can include IP address, browser and device type, operating system, requested URL, referring page, timestamps, response status, approximate location derived from IP address, and security or error logs.
Remote resources and external links
The website loads font resources across its pages and homepage presentation resources from Google Fonts and Tailwind CSS's content-delivery service. Those providers receive the network information required to return a resource, such as IP address, user agent, requested file, and timestamp. Playlist covers on the homepage and Playlists page are stored locally; a Spotify player is requested from Spotify only after you select a cover. Spotify may then receive technical and usage information and apply its own technologies under its policies. The site also links to Instagram, YouTube, LinkedIn, and other Luna x Studios properties, which may collect information after you choose to visit them.
Information from business relationships
If you represent an artist, writer, label, publisher, vendor, partner, or other organization, we may receive ordinary business contact and relationship information from you, your organization, referrals, public professional sources, or another person authorized to introduce you. Service-specific data is governed by the relevant service notice and agreement.
3. How and why we use information
We use personal information only for relevant business and operational purposes, including to:
- deliver, maintain, secure, troubleshoot, and improve the website;
- respond to inquiries, route a request to the appropriate Luna x Studios team, and maintain a record of the conversation;
- evaluate potential projects, partnerships, service requests, and business opportunities;
- protect our websites, systems, users, rights, and property from fraud, abuse, unauthorized access, or other security risks;
- comply with law, enforce agreements, maintain corporate records, and establish, exercise, or defend legal claims; and
- send requested or legally permitted business communications and manage preferences.
Where a legal basis is required, we rely on steps requested before entering a contract, performance of a contract, compliance with legal obligations, legitimate interests in operating and protecting our business, consent where required, and the establishment or defense of legal claims. We do not use consent as the basis for processing where another lawful basis more accurately applies.
5. Retention and security
We keep information only for as long as reasonably needed for the purpose described, the relationship concerned, security, legal obligations, accounting, dispute resolution, and enforcement. Website logs are generally retained for a limited operational or security period. Business correspondence may be retained for the relationship and applicable legal limitation periods. Protected backups may remain until their scheduled deletion or overwrite cycle completes.
We use reasonable administrative, organizational, and technical safeguards appropriate to the nature of the information. No internet transmission or storage system can be guaranteed completely secure. If you believe an interaction with Luna x Studios has been compromised, contact [email protected].
6. Your privacy rights
Depending on where you live and how we process your information, you may have rights to request confirmation of processing, access, correction, deletion, anonymization, restriction, portability, information about disclosures, objection, withdrawal of consent, or review of certain automated decisions. You may also have the right to appeal a response or complain to a competent privacy authority.
Brazilian data subjects may exercise applicable rights under the LGPD. People in the EEA, United Kingdom, or Switzerland may exercise applicable GDPR or local data-protection rights. Residents covered by United States state privacy laws may have rights to know, access, correct, delete, obtain a portable copy, and opt out of regulated sale, sharing, targeted advertising, or profiling. These rights are subject to applicable definitions and exceptions.
We may verify your identity and authority before completing a request. If information is controlled by another Luna x Studios service, a customer organization, or a third party, we may direct the request to the appropriate controller and assist where required.
Children
This general corporate website is not directed to children, and we do not knowingly use it to collect personal information from children. A parent or guardian who believes a child has provided information through this website may contact us to request review and appropriate action.
7. Changes and contact
We may update this policy when our website, providers, operations, or legal obligations change. The date above identifies the current version. Material changes will receive additional notice where required.
Privacy and legal requests
[email protected]
General contact
[email protected]
Entity addresses and registration details are listed in the Imprint.
Current website features and legal references
The contact form collects name, email, optional organization, area of interest, subject, message, and acknowledgement of this policy. When configured, Cloudflare Turnstile verifies submissions and Google SMTP delivers inquiries to [email protected]. Security processing can include IP addresses, device signals, tokens, and temporary rate-limit records. Submission is not a newsletter subscription or automated funding decision.
Team portraits and partner logos are hosted locally. Social links to LinkedIn, Facebook, Instagram, and X take you to independently operated services. Instagram on the CEO letter and Spotify in the footer load when requested. Google Fonts is requested across the website. Providers receive network information needed to deliver those resources.
Inquiries are retained as needed to respond, manage resulting relationships, satisfy recordkeeping obligations, or resolve claims. Ask us about the period applicable to your record. Do not send sensitive HR, identity, or banking documents through the general form.
Where applicable, the GDPR addresses lawful bases (Article 6), transparency (Articles 12–14), rights (Articles 15–22), security (Article 32), and transfers (Chapter V). Brazil's LGPD addresses bases (Article 7), rights (Article 18), transfers (Article 33), and security (Article 46). Applicability depends on the processing, not simply your nationality.
Requests may be sent to [email protected]. You may complain to the competent authority, including Luxembourg's CNPD where relevant. See also Cloudflare's Privacy Policy.
Optional Google Analytics
With your permission, Google Analytics measures page visits and usage for property G-3EBNSH1H9C. Google processes network and device information and analytics identifiers under its own policies. We do not intentionally send contact form contents or personal identifiers. Our page-view configuration excludes query strings and URL fragments. Advertising consent remains denied and Google signals are disabled in the website configuration. Consent is stored locally for up to 180 days; rejection leaves the site available. Changing the choice cannot erase data already received by Google.
Provider details: Google Privacy Policy. Analytics collection is disabled for local file previews and non-production hosts. Retention and enhanced-measurement settings must also be reviewed in the Analytics account.