Privacy
Privacy Policy.
Last updated: 15 January 2026
1. Information We Collect
„ЛЕВЕЛ 8" ЕООД collects personal information when you place an order, subscribe to our newsletter or contact us. This information may include:
- First and last name
- Email address
- Phone number
- Shipping address
2. LURA Navigator (PWA) data
If you use the LURA Navigator app (luralab.eu/app), we collect additional health-related data:
- Menstrual cycle data (length, phases)
- Self-assessed stress levels (1–10 scale)
- Sleep quality (1–10 scale)
- Symptoms (bloating, headache, fatigue, etc.)
Important: This data is stored locally on your device(localStorage) and only synced to the server if you explicitly consent. Under GDPR this falls under "health data" (Article 9) and is processed only with your explicit consent.
3. How We Use Information
We use your information to:
- Process and ship your orders
- Communicate about your orders
- Send marketing messages (only with your consent)
- Improve our products and services
- Personalize recommendations in LURA Navigator
4. Data Protection
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss or destruction.
5. Your Rights
You also have the right to:
- Deletion of health data from LURA Navigator
- Data portability (Article 20 GDPR)
6. Referral program
On your first successful order we automatically generate your personal referral code (e.g. "MARIA") you can share with friends. We use this code for:
- Applying a 5% discount for a customer who orders with your code
- Crediting your account on a successful referral
- A 30-day session cookie that records visits via your shared link
What the referrer sees: You only see how many times your code was used — never other customers' names, email addresses or orders.
Fraud prevention: We store the phone number only as a salted SHA-256 hash to prevent self-referrals from a secondary account. Plain phone numbers are not matched across accounts.
You can deactivate your referral code at any time — email us at support@luralab.eu.
7. Right to lodge a complaint
Under Article 77 of the GDPR you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., www.cpdp.bg.
8. Data processors
To run the service we use trusted providers that process data on our behalf. Each of them processes data only for the stated purpose and under a data processing agreement:
- Supabase — database hosting (EU/US)
- Stripe — payment processing (US/EU)
- Resend — email delivery (US)
- Vercel — hosting and content delivery (US/global edge)
- Clerk — account authentication (US)
- Google (GA4) — traffic analytics, only with consent (US)
- Meta Platforms (Pixel) — ads/remarketing, only with consent (US)
- euShipments and the couriers Speedy, ExpressOne and SAMEDAY — delivery (Bulgaria/EU)
We do not sell your personal data and do not share it with third parties beyond those listed, unless required by law.
9. International data transfers
Some processors are established outside the European Economic Area (in the US). Data transfers are protected by Standard Contractual Clauses (SCCs) under Article 46 of the GDPR and additional technical measures; where applicable — through the EU-U.S. Data Privacy Framework.
10. Retention periods and legal bases
We keep personal data only as long as needed for the purpose it was collected for (Article 6 of the GDPR):
- Orders, invoices and accounting documents — up to 10 years (accounting and tax law; legal basis: legal obligation, Art. 6(1)(c)).
- Account data — while the account is active (performance of a contract, Art. 6(1)(b)).
- Newsletter email — until you unsubscribe (consent, Art. 6(1)(a)).
- Health data in LURA Navigator — locally on your device; if synced — until the account is deleted (explicit consent, Art. 9(2)(a)).
- Analytics and advertising data — only with consent; until it is withdrawn (for GA4 — up to 14 months).
- Security and fraud-prevention data — legitimate interest (Art. 6(1)(f)).
11. Contact
For questions about this policy, please contact us:
„ЛЕВЕЛ 8" ЕООД
гр. Варна, 9000, р-н Младост, ж.к. Възраждане, бл. 28, вх. 1, ет. 5, ап. 10