Skip to content

Last updated: 2026-09-20

Privacy Notice

This notice describes how Luna Tea Shoppe (“we,” “us”) handles personal information on bobaluna.com, including from California residents. It covers this website. In-person purchases at the shop are processed separately.

We operate at 1830 W 8th Street, Suite B, Los Angeles, CA 90057.

Information we collect

When you visit the site. Our hosting environment may record ordinary server logs: IP address, date and time, requested URL, referrer, and browser user-agent. We do not run advertising cookies, analytics pixels, or social-media tracking pixels.

Cookies. The only first-party cookie this site sets is web_order_token. It is httpOnly, SameSite=Lax, lasts about one hour, and exists so we can tell that a PayPal payment belongs to the browser that started the order. We mint it only when you start an online pickup order. While online ordering is closed, we do not set it.

If you email or call us. We receive whatever you send (for example a name, email address, or phone number) so we can reply.

If you place an online pickup order (when that feature is open). We collect your name, a phone number or email you give us for the order, whether you asked for a pickup text, the drinks and modifiers you chose, quantities, and amounts. The checkout form does not collect card numbers, CVV, or bank account numbers. Payment runs on PayPal’s pages.

SMS pickup alerts

This is the privacy notice for the Luna Tea Shoppe pickup-alert text program on bobaluna.com.

If you enter a US mobile number at checkout and check the box to be texted, we collect that number and your opt-in so we can send one transactional text when the shop has your ticket (ticket number and estimated ready time). We do not send marketing or recurring promotional texts from this website. Message frequency is 1 message per opted-in order. Message and data rates may apply.

How we use the number. Only to send that pickup text and to honor opt-out requests.

Sharing. We share the number with Twilio solely to deliver the text you opted into. Twilio’s policy is at twilio.com/legal/privacy. We do not sell, rent, or share mobile phone numbers or SMS opt-in data with third parties or affiliates for their marketing or promotional purposes.

Opt out and help. Reply STOP to cancel. Reply HELP for help, email bobaluna.epsilon@gmail.com, or call (213) 322-2166. After STOP we send at most one confirmation and no further pickup texts to that number unless you opt in again.

Consent to texts is not required to complete a purchase. Email-only orders still receive a ticket on screen.

From PayPal after a payment. PayPal may send us the payer email on the PayPal account, the payment-method type (for example a PayPal wallet), PayPal order and capture ids, amounts and fees, currency, and seller-protection status. We do not receive or store card PAN or CVV.

We do not collect payment-card details on our forms, run a newsletter signup, or send promotional email from this website.

How we use it

  • Fulfill and identify pickup orders, and show pickup status
  • Text you once when the shop receives a pickup order, if you opted in to pickup alerts
  • Process payments through PayPal
  • Answer email or phone questions
  • Operate, secure, and debug the website
  • Keep records we need for bookkeeping or the law

We do not use this information to send marketing, and we do not sell it.

Sharing

We share personal information only as needed to run the shop and this site:

  • PayPal, to take payment. PayPal’s policy is at paypal.com/privacy.
  • Twilio, to send the pickup text you opted into. We do not share mobile numbers with Twilio (or anyone else) for their marketing. Twilio’s policy is at twilio.com/legal/privacy.
  • Hosting and infrastructure providers that process data on our behalf (for example to serve the site and store order records).
  • OpenStreetMap when the map in the footer loads. That embed may receive your IP address and standard browser data. OSM’s policy is published by the OpenStreetMap Foundation.
  • PayPal’s checkout scripts when online checkout is available, which may likewise receive your IP address when they load.
  • Legal process, if we are required to disclose information.

If you follow our Instagram link, Instagram’s site has its own policy.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not share it with third parties so those parties can market to you directly.

Retention

Server logs are kept only as long as ordinary hosting retention allows.

The web_order_token cookie expires in about one hour.

Online order records (name, contact, items, amounts, and PayPal transaction details, including from test orders we already processed) stay in our systems for as long as we need them to fulfill the order, answer questions, and meet bookkeeping or legal duties. We have not set a shorter automatic deletion date. Email us if you want us to delete what we reasonably can.

Access, correction, and deletion

To review, update, or ask us to delete personal information we hold about you, email bobaluna.epsilon@gmail.com or write to us at the shop address above. Tell us enough to find your request (for example the email or phone on an order). We will respond as soon as we reasonably can.

Do Not Track

This website does not currently respond to browser Do Not Track (DNT) signals. We do not use third-party advertising networks that collect information about your browsing across other sites from bobaluna.com. Third-party content we embed (the OpenStreetMap map, and PayPal’s checkout when it is available) may still receive your IP address and browser data when that content loads.

California privacy rights

Shine the Light (Civil Code §1798.83). We do not share personal information with third parties for those parties’ direct marketing. California residents may still email bobaluna.epsilon@gmail.com with the subject line “Your California Privacy Rights” to ask about our sharing practices.

CCPA / CPRA. Those laws apply only if a business meets certain size or data thresholds. We do not sell or share personal information as those statutes use those words. Whether or not the full statute applies to us, California residents can use the contact methods above to ask what we have collected, ask us to correct it, or ask us to delete it. We will not deny goods or services, charge a different price, or give a different level of service because you made a privacy request.

We do not currently collect Social Security numbers, driver’s license numbers, precise geolocation, or payment-card PAN through this website.

Children

This site is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this notice

We will post changes on this page and update the date at the top. The revised notice applies from that date. Please read this page when you use the site; that is how we notify you of updates.

Contact