Privacy Policy
Last updated: 28 August 2026
1. Who we are
This privacy policy explains how MoonMoments.co.uk, trading as Moon Moments, uses personal information. Our contact email is contact@moonmoments.co.uk.
Our postal address is MoonMoments.co.uk, 13 The Groves, Bristol, BS13 0AF. We act as the controller for the personal information described in this policy.
2. Information we collect
Depending on how you use the website, we may collect:
- your name, email address, telephone number, and delivery address;
- personalisation details such as dates, names, messages, event descriptions, locations, gift recipient details, and selected print options;
- order, payment-status, delivery, and customer-service information;
- technical information such as IP address, browser, device, pages requested, and security or error logs; and
- information you provide when you contact us or ask us to investigate an order.
Payment card details are entered on Stripe’s checkout pages. We receive payment and order information needed to confirm and fulfil the purchase, but we do not store your full card number.
3. How we use information
| Purpose | Lawful basis |
|---|---|
| Create, personalise, deliver, and support your order | Performance of a contract |
| Take payment, prevent fraud, keep records, and meet tax or legal duties | Contract, legitimate interests, and legal obligation |
| Respond to enquiries, resolve complaints, and protect the website | Legitimate interests and contract |
| Send optional marketing, if we introduce it | Consent or another lawful basis permitted by law; you can opt out |
We do not currently sell personal information or use it for targeted advertising. We do not make decisions about you solely by automated means that produce legal or similarly significant effects.
4. Who we share information with
We share only what is needed for the relevant purpose with service providers such as:
- Stripe, for hosted payment checkout, payment processing, fraud prevention, and payment records;
- Supabase, for the database and private storage used for order and generated-print fulfilment;
- Vercel, for website hosting, delivery, and technical logs;
- our email provider, currently SMTP services used to send order confirmations and customer support email;
- delivery providers, where needed to deliver a physical order; and
- OpenStreetMap’s Nominatim service, when you use the star-map location search. The location search text is sent to that service so coordinates can be found.
The lunar map service used to check or render selected plot imagery may receive technical map requests. We do not send your name, email, address, or payment information to that service for this purpose. We may also disclose information where required by law, to prevent fraud, or to protect our rights and customers.
5. International processing
Some service providers may process information outside the UK. Where required, we use a lawful transfer mechanism and appropriate safeguards, such as a UK adequacy decision or approved contractual protections. Contact us if you want more information about the safeguards relevant to a particular provider.
6. How long we keep information
We keep order, payment, and accounting records for as long as needed to provide the service, handle refunds and disputes, and meet legal and tax obligations. In practice, some transaction records may need to be kept for up to six years after the relevant accounting period.
We keep personalisation details and generated artwork for as long as reasonably necessary to fulfil the order, provide the secure download, answer questions, and manage disputes. We then delete or anonymise them when they are no longer needed, unless a longer period is required by law. Security logs are kept for a shorter period where reasonably possible and may be retained longer when needed to investigate an incident.
7. Cookies and similar technologies
Moon Moments does not currently use advertising cookies or third-party analytics cookies. The website may use strictly necessary technical storage or cookies for security and functionality. Stripe may use cookies or similar technologies on its hosted checkout pages; Stripe explains its own processing in its privacy notice.
Google Fonts are loaded by the website, which may cause your browser to make a request to Google to retrieve font files. We are reviewing whether to self-host every font so that this external request is not needed.
8. Your rights
Depending on the circumstances, UK data protection law gives you rights to access your personal information, correct it, ask for deletion, restrict or object to processing, receive certain information in a portable format, and withdraw consent where we rely on consent. The right to object applies in particular where we rely on legitimate interests or use information for direct marketing.
To exercise a right, email contact@moonmoments.co.uk. We may need to verify your identity and will normally respond within one month. You can also complain to the Information Commissioner’s Office if you are unhappy with how we use your information.
9. Security
We use reasonable technical and organisational measures to protect personal information, including secure payment through Stripe, server-side access to fulfilment systems, and private storage for generated prints. No internet transmission or storage system is completely secure, so please contact us promptly if you think your information or download link has been misused.
10. Children and policy changes
The website is not directed at children, and we do not knowingly collect children’s personal information. We may update this policy when our services, providers, or legal obligations change. The current version and its update date will always appear on this page.