Privacy Policy

Last updated: October 5, 2026

1. Introduction

This Privacy Policy explains how GO STRATEGY s.r.o., Company ID: 22109781, registered at Kurzova 2222/16, 155 00 Prague, Czech Republic, operating under the brand "Lunula — Professional Nail Education" (hereinafter "we," "our," or "us"), collects, uses, and protects your personal information when you visit our website or purchase our products.

2. Information We Collect

We may collect the following types of information:

• Name and email address when you make a purchase
• Payment information processed securely through third-party payment providers (Stripe)
• Device and browser information collected automatically through cookies
• IP address and general location data
• Usage data such as pages visited and time spent on the website

3. How We Use Your Information

We use the information we collect to:

• Process and deliver your purchase
• Send order confirmations and product access details
• Generate and deliver your Certificate of Completion
• Provide customer support
• Improve our website and products
• Comply with legal obligations

4. Course Access, Exam Results and Certificate Verification

When you buy the course, we store your e-mail address and the Stripe payment reference so that we can give you access to the guide and the exam and send you access links. To keep you signed in on your device we set a strictly necessary cookie containing a random session identifier; it is not used for tracking or advertising.

We store your exam attempts and results to apply the exam rules. When you pass the exam, we record the name you enter, the date and a unique certificate ID in our certificate register. Anyone who enters a certificate ID on lunula.beauty/verify, or scans the QR code on the certificate, can see whether the certificate is valid, the program, the date of completion and the holder’s first name with initials. Your e-mail address is never shown there. Certificate records are kept for as long as the certificate should remain verifiable; you can ask us to delete yours, after which it can no longer be verified.

To protect the service against abuse we keep short-lived counters of requests per pseudonymized (hashed) IP address.

5. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contractual necessity: Processing is necessary for the performance of the contract (delivery of the digital product, certificate generation)
• Legitimate interest: Improving our services, cookieless measurement (see section 7), and fraud prevention
• Legal obligation: Compliance with applicable tax and accounting laws
• Consent: Analytics cookies (Google Analytics via Google Tag Manager), and any other processing where you have given explicit consent

6. Payment Processing

All payment transactions are processed through Stripe, a secure third-party payment processor. We do not store your credit card information on our servers. Stripe operates under its own privacy policy and PCI-DSS security standards.

7. Cookies

We use the following cookies and similar technologies:

• Strictly necessary: __Host-lunula_session keeps you signed in to your course page (up to 180 days), and __Host-lunula_claim links a payment to the browser in which it was made (24 hours). During the exam, your answers in progress are kept in your browser’s session storage until you submit them. These are required for the service and are not used for tracking or advertising.
• Analytics, only with your consent: Google Analytics 4, loaded through Google Tag Manager, uses cookies (such as _ga) to measure visits, traffic sources and purchases. These cookies are set only after you select “Accept” in the cookie banner.
• Without cookies: Cloudflare Web Analytics counts page views without cookies. Before you choose, or if you decline, Google tags may send cookieless measurement signals without identifiers (Google Consent Mode), for example to count a page view or a completed purchase.

We do not use advertising or personalization cookies. Your cookie choice is stored in your browser’s local storage for 12 months, and you can change it at any time with the “Cookie Settings” link at the bottom of every page.

8. Third-Party Services

We use third-party services for payment processing (Stripe), website hosting and cookieless statistics (Cloudflare), analytics with your consent (Google Analytics and Google Tag Manager, provided by Google), and email delivery (Resend). These services have access only to the information necessary to perform their functions and are obligated to maintain confidentiality. Some of them are based in the United States; such transfers rely on the EU–U.S. Data Privacy Framework where the provider is certified, or on the European Commission’s standard contractual clauses.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure.

10. Data Retention

Personal data is not sold or shared with third parties for marketing purposes.

11. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information ("right to be forgotten")
• Restrict or object to the processing of your data
• Request data portability
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a supervisory authority (Office for Personal Data Protection, Czech Republic)

To exercise any of these rights, please contact us at the address provided below.

12. Children's Privacy

Our products and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date.

14. Contact

If you have questions about this Privacy Policy or your personal data, please contact us:

GO STRATEGY s.r.o., Company ID: 22109781, Kurzova 2222/16, 155 00 Prague, Czech Republic.

Email: support@lunula.beauty