How we handle your data.

Purple Luna is a small AI studio in Brighton, UK. We build practical AI agents for service businesses. The company behind it, and the data controller for your information, is Purple Luna Ltd (company no. 13670033), run by Sam Erpik.

If you need to talk to a real person about your data, email hello@purpleluna.co.uk. That address goes straight to a human.

If you email hello@purpleluna.co.uk, we keep:

• Your name and email address (whatever's in the From header).
• The contents of your email and our reply.
• Any attachments you send.

If you fill in a sign-up form (for example our founding round): your name, business name, trade, and email. That goes to our forms inbox and to us by email. Nothing more.

If you give us your mobile number to chat with Luna on WhatsApp (either by entering it on the site or by messaging our WhatsApp number), we keep your number, your WhatsApp display name, and what you and Luna say to each other. More on that in the next section.

If you use the “Try Luna” demo on this site, the messages you type are sent to our AI provider, Anthropic (Claude), to generate the reply. We don't store that demo chat and it isn't used to train models, so please don't type anything personal into it.

We don't fingerprint your device or set anything until you choose. If you accept cookies, we run Google Analytics and the Meta advertising pixel (which measures our ads and helps us show them to the right salons elsewhere). Decline and neither loads. More in Cookies below.

So we can reply to you. So we can remember the conversation if you come back in a fortnight and pick up where we left off. Legal basis: legitimate interest in running a small business that replies to its own customers, and where you've started the conversation by writing to us or messaging Luna.

Luna is our AI assistant, not a person. When you message our WhatsApp number, or ask us to message you, you're talking to software. We'll always make that clear; we'd never pretend a bot is a human.

To make that work, a few things happen to your message:

• It travels over WhatsApp, which is run by Meta Platforms Ireland. Meta carries the message and passes us your WhatsApp number and name. Meta's own handling of it is covered by WhatsApp's privacy terms.
• Our server reads it and, to write a sensible reply, sends the conversation text to our AI provider, Anthropic (Claude), which generates Luna's response. Anthropic processes it to produce the reply and does not use it to train its models.
• We keep a record of the conversation so Luna remembers the context if you come back.
• If you ask us to follow up and share your name, business, or email so we can, we keep just those details to get in touch about Luna, nothing else, and you can ask us to delete them any time.

We use this only to answer you, show you how Luna works, and follow up about the product if you're interested, never to sell you to anyone else.

Want out? Reply STOP or “delete my data” in the chat, or email hello@purpleluna.co.uk. We'll stop messaging you and wipe the conversation.

Your email is stored inside Google Workspace (Google Ireland Limited acts as our data processor under Google's standard data-protection terms).

This website is hosted by Netlify, Inc. Netlify serves the site and runs the sign-up forms; the source code lives on GitHub in a private repository.

When you talk to Luna on WhatsApp, the conversation is carried by Meta Platforms Ireland (WhatsApp), processed by Anthropic (Claude) to generate replies, and stored in a Supabase database running on Railway. Each acts as our processor under standard data-protection terms.

If you accept cookies, Google Analytics (Google Ireland) gives us anonymised visit stats (page views, rough region, device type), and the Meta Pixel (Meta Platforms Ireland) measures which ads brought you here and helps us reach similar people. Both load only on Accept, never if you Decline.

We don't sell your data or hand it to data brokers. The one thing you opt into is that advertising pixel: accept cookies and it shares limited activity with Meta for the ads above. Decline and nothing goes to Meta.

While you're a customer, or a business that's shown interest. If we've had no contact for 12 months, we delete what we hold: emails, form entries and WhatsApp conversations alike. Records we're legally required to keep, like anything tied to an invoice, stay for 6 years.

Don't want to wait? Ask and it's gone the same day.

You can ask us to:

• Show you everything we hold on you.
• Correct anything that's wrong.
• Delete it all.
• Take it elsewhere (we'll send you what we have).
• Stop us using it.

Email hello@purpleluna.co.uk and we'll handle it within a week. Usually within a day.

If you think we've handled this badly, you can complain to the Information Commissioner's Office at ico.org.uk. We'd much rather you complained to us first.

We don't set any cookies until you say yes. If you click Accept on the banner, two things load: Google Analytics (anonymised visit stats) and the Meta Pixel (Meta Platforms Ireland), an advertising cookie that sets _fbp so we can measure our ads and show them to the right salons. Decline and neither loads, and no non-essential cookies are set.

Changed your mind? Cookie choices in the footer reopens the banner so you can switch from Accept to Decline (or back) any time. We don't sell the data we collect.

If we change anything material, we update this page and the “last updated” date at the top. We don't silently backdate.