Privacy policy

1. Information we collect

We collect information you provide when you browse, build a bag, start checkout, contact support, or look up an order. Depending on the service you use, this may include your name, email address, telephone number, delivery and billing details, order number, purchased products, and support messages.

We may also receive limited technical information needed to operate and protect the storefront, such as device and browser information, IP address, request logs, and strictly necessary cookie or local-storage data. Payment credentials are processed by the payment provider presented at checkout; Moonlit Korea does not receive or store complete payment-card numbers.

2. Why we use personal data

• To provide the storefront, bag, checkout, delivery, account, and order-support services.
• To perform a contract with you and take steps you request before entering a contract.
• To meet accounting, tax, consumer-protection, fraud-prevention, and other legal obligations.
• To protect the security and reliability of the storefront and improve customer support where our legitimate interests apply.
• To send optional marketing or use non-essential tracking only where we have a valid consent or another lawful basis.

3. Who receives personal data

We share data only as needed with service providers that help us operate the store, including Pralo, hosting and infrastructure providers, payment processors, delivery partners, email and customer-support providers, professional advisers, and public authorities where required by law. These recipients may act as processors or independent controllers under their own notices.

We do not sell personal data. If a provider processes data outside the European Economic Area, we use an appropriate legal transfer mechanism where required.

4. Retention

We keep personal data only for as long as needed for the purpose for which it was collected. Order and transaction records may be retained for the period required by accounting, tax, and consumer law. Support records and security logs are retained for shorter operational periods unless they are needed to establish, exercise, or defend legal claims.

5. Cookies and local storage

The storefront may use strictly necessary browser storage to remember your bag, maintain security, and provide requested features. If we add non-essential analytics, advertising, or personalization technologies that require consent, we will provide a choice before using them.

6. Your privacy rights

Subject to applicable law, you may ask to access, correct, erase, restrict, or receive a copy of your personal data, or object to certain processing. You may withdraw consent at any time without affecting earlier lawful processing. You may also lodge a complaint with the French data-protection authority, the CNIL, or another competent supervisory authority.

To exercise a right, email support@moonlitkorea.com. We may need to verify your identity before completing a request.

7. Security and children

We use proportionate technical and organizational safeguards designed to protect personal data. No online service can guarantee absolute security. The store is not directed to children, and we do not knowingly collect a child's personal data without the authorization required by law.

8. Changes and contact

We may update this policy when our services or legal obligations change. The date above identifies the current version. Questions about this policy can be sent to support@moonlitkorea.com.

Read our terms and conditions.