How we handle your data.

Purple Luna is a small AI studio in Brighton, UK. We build practical AI agents for service businesses. The studio is a sole trader run by Sam Erpik.

If you need to talk to a real person about your data, email hello@purpleluna.co.uk. That address goes straight to a human.

If you email hello@purpleluna.co.uk, we keep:

• Your name and email address (whatever's in the From header).
• The contents of your email and our reply.
• Any attachments you send.

If you fill in a sign-up form (for example our founding round): your name, business name, trade, and email. That goes to our forms inbox and to us by email — nothing more.

If you give us your mobile number to chat with Luna on WhatsApp — either by entering it on the site or by messaging our WhatsApp number — we keep your number, your WhatsApp display name, and what you and Luna say to each other. More on that in the next section.

We don't track you across the web, and we don't fingerprint your device. The only analytics is Google Analytics, and only if you accept cookies (see Cookies below).

So we can reply to you. So we can remember the conversation if you come back in a fortnight and pick up where we left off. Legal basis: legitimate interest in running a small business that replies to its own customers — and where you've started the conversation by writing to us or messaging Luna.

Luna is our AI assistant — not a person. When you message our WhatsApp number, or ask us to message you, you're talking to software. We'll always make that clear; we'd never pretend a bot is a human.

To make that work, a few things happen to your message:

• It travels over WhatsApp, which is run by Meta Platforms Ireland. Meta carries the message and passes us your WhatsApp number and name. Meta's own handling of it is covered by WhatsApp's privacy terms.
• Our server reads it and, to write a sensible reply, sends the conversation text to our AI provider, Anthropic (Claude), which generates Luna's response. Anthropic processes it to produce the reply and does not use it to train its models.
• We keep a record of the conversation so Luna remembers the context if you come back.

We use this only to answer you, show you how Luna works, and follow up about the product if you're interested — never to sell you to anyone else.

Want out? Reply STOP or “delete my data” in the chat, or email hello@purpleluna.co.uk. We'll stop messaging you and wipe the conversation.

Your email is stored inside Google Workspace (Google Ireland Limited acts as our data processor under Google's standard data-protection terms).

This website is hosted by Netlify, Inc. Netlify serves the site and runs the sign-up forms; the source code lives on GitHub in a private repository.

When you talk to Luna on WhatsApp, the conversation is carried by Meta Platforms Ireland (WhatsApp), processed by Anthropic (Claude) to generate replies, and stored in a Supabase database running on Railway. Each acts as our processor under standard data-protection terms.

If you accept cookies, Google Analytics (Google Ireland) gives us anonymised visit stats — page views, rough region, device type. Decline and it never loads.

We don't share anything with advertisers, data brokers, or anyone you didn't choose to talk to.

Forever, unless you ask us to delete it. We don't run automatic deletion — honestly, a quiet inbox is easier to manage than a busy purge schedule.

Ask and it's gone the same day — emails, form entries, and WhatsApp conversations alike.

You can ask us to:

• Show you everything we hold on you.
• Correct anything that's wrong.
• Delete it all.
• Take it elsewhere (we'll send you what we have).
• Stop us using it.

Email hello@purpleluna.co.uk and we'll handle it within a week. Usually within a day.

If you think we've handled this badly, you can complain to the Information Commissioner's Office at ico.org.uk. We'd much rather you complained to us first.

We don't set any cookies until you say yes. The only cookies on this site are Google Analytics, and they load only if you click Accept on the banner. Decline, and nothing analytics-related runs and no analytics cookies are set.

We don't use advertising or marketing pixels, and we don't sell or share the analytics we do collect.

If we change anything material, we update this page and the “last updated” date at the top. We don't silently backdate.