Privacy Policy

Our Commitment to Your Privacy

Last updated: 4 August 2026

This Privacy Policy explains how Moon Fashion collects, uses, stores, shares and protects personal data when you visit our website, create an account, place an order, subscribe to communications, contact customer support or interact with our physical shops.

We process personal data in accordance with the General Data Protection Regulation, applicable Portuguese data-protection legislation and other legal requirements relevant to our ecommerce and retail activities.

This policy should be read together with our Terms and Conditions, Delivery and Shipping Policy, Return, Refund and Exchange Policy and any cookie information displayed on the website.

Data Controller

The Moon Fashion website is operated by:

Name: Shakwat Molla
Business name: Moon Fashion
NIF: PT284188760
Address: Travessa do Poço Novo 17, 1C, 2725-421 Mem Martins, Portugal
Email: moonfashionpt@gmail.com
Telephone: +351 920 099 643 / +351 920 704 075

For questions about this Privacy Policy or the processing of your personal data, contact us at moonfashionpt@gmail.com.

Personal Data We May Collect

The personal data collected depends on how you interact with Moon Fashion. It may include the following categories.

Identity and contact data

• Full name
• Billing and delivery address
• Email address
• Telephone number
• Customer or account identifier

Account data

• Login credentials in protected form
• Account preferences
• Saved addresses
• Wishlist or comparison information
• Account activity relevant to providing the service

Order and transaction data

• Order number
• Products ordered
• Order value
• Selected delivery method
• Payment method and payment status
• Returns, exchanges and refunds
• Invoices and legally required transaction records

Payment-related data

Payments may be processed by an external payment-service provider. Moon Fashion may receive information such as the payment reference, amount, status, transaction identifier and details needed to reconcile the order.

Customers should never send complete card numbers, security codes, online-banking credentials or other sensitive payment information by email, contact form or website chat.

Communication and customer-service data

• Emails and contact-form messages
• Website chat messages
• Order enquiries
• Complaints and return requests
• Photographs or documents supplied to support a request
• Responses to voluntary feedback or satisfaction requests

Technical and usage data

• Internet Protocol address
• Browser type and version
• Device type and operating system
• Approximate location derived from technical data
• Website pages visited
• Date, time and duration of a visit
• Referral source
• Cookie identifiers and consent preferences
• Security and system logs

Marketing-preference data

• Newsletter subscription status
• Consent or objection records
• Communication preferences
• Email opening or link-interaction information where permitted and enabled

How We Collect Personal Data

We may collect personal data:

• Directly from you when you create an account, place an order or contact us
• When you subscribe to a newsletter or change your communication preferences
• When you request delivery, collection, return, refund or customer support
• Automatically through essential website technologies, server logs and cookies
• From payment providers when they confirm or update a transaction
• From postal services or carriers when they provide tracking and delivery information
• From fraud-prevention, technical-security or service providers where applicable
• When another person lawfully provides your details for delivery or collection purposes

If you provide personal data about another person, you should have an appropriate basis for doing so and ensure that the information is accurate.

Why We Process Personal Data

Moon Fashion processes personal data only where an appropriate legal basis applies.

To perform a contract or take pre-contractual steps

We may process data to:

• Create and manage a customer account
• Process and confirm an order
• Receive or verify payment confirmation
• Prepare, dispatch and track a parcel
• Arrange in-store collection
• Provide order-related customer service
• Handle a return, exchange or refund
• Respond to a request made before a purchase

To comply with legal obligations

We may process and retain data to:

• Issue and preserve invoices and accounting records
• Meet tax and commercial-record obligations
• Comply with consumer-protection requirements
• Respond to lawful requests from courts, regulators or public authorities
• Manage legally required complaints or product-safety matters

For legitimate interests

Where those interests do not override your rights and freedoms, we may process data to:

• Protect the website, accounts and transactions against fraud or misuse
• Maintain service security and technical performance
• Respond to enquiries and improve customer support
• Understand how the website and services are used
• Improve website navigation and business operations
• Establish, exercise or defend legal claims
• Keep appropriate evidence of instructions, consent and transactions

With your consent

Where consent is required, we may process data for:

• Email newsletters and promotional communications
• Non-essential analytics cookies
• Advertising or personalisation cookies
• Other optional purposes clearly explained when consent is requested

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Information Required to Provide Our Services

You are not generally required to provide personal data merely to browse publicly available pages.

However, certain information is necessary to create an account, process payment, fulfil an order, deliver a parcel, arrange collection, issue an invoice or respond to a request.

If required information is not provided or is inaccurate, Moon Fashion may be unable to complete the requested transaction or service.

Please review your order confirmation and account information and contact us if a correction is required.

Payments

Payment transactions may be processed through payment providers supporting methods displayed during checkout, which may include Multibanco References, MB WAY and PayShop.

The relevant provider processes payment information under its own legal and security obligations. Moon Fashion receives only the information reasonably required to confirm, reconcile, refund or investigate the transaction.

Payment methods and providers may change. The methods displayed during checkout apply to the relevant order.

Cookies and Similar Technologies

Cookies are small files or identifiers stored on or accessed through a user’s device when a website is visited.

Cookies and similar technologies may process information capable of being associated with a device, browser or individual. They should not be described as automatically anonymous merely because they do not contain a person’s name.

Essential cookies

These cookies support functions such as:

• Website security
• Shopping-cart operation
• Session management
• Language or currency preferences
• Login and account access
• Cookie-consent records
• Checkout and payment continuity

Essential cookies may operate without optional consent where they are strictly necessary to provide a service requested by the user.

Preference cookies

These may remember selected settings, such as language, currency or other user choices.

Analytics cookies

Where enabled with the required consent, analytics technologies may help Moon Fashion understand how visitors use the website and identify technical or navigation improvements.

Marketing cookies

Where enabled with valid consent, marketing technologies may support campaign measurement, advertising or communication personalisation.

Non-essential cookies should remain disabled until the relevant consent has been provided. You may change or withdraw optional cookie consent using the website’s available consent controls.

Browser settings may also be used to restrict or delete cookies. Blocking essential cookies may prevent parts of the website, account, cart or checkout from functioning correctly.

Newsletters and Marketing Communications

Moon Fashion sends electronic marketing communications only where an appropriate legal basis exists.

When consent is used, you may withdraw it at any time by:

• Using an unsubscribe option provided in the communication
• Changing an available account preference
• Emailing moonfashionpt@gmail.com

After opting out, you may still receive non-promotional communications needed to manage an account, order, payment, delivery, return, complaint or legal obligation.

We may retain limited information showing that you opted out so that your preference can be respected.

Who May Receive Personal Data

Moon Fashion does not sell personal data.

Personal data may be shared only where necessary and legally permitted with categories of recipients such as:

• Website hosting and technical-support providers
• Payment and transaction-service providers
• Postal services, couriers and collection partners
• Email, communication or customer-support providers
• Accounting, tax, legal and professional advisers
• Fraud-prevention and information-security providers
• Analytics or marketing providers where valid consent is required and obtained
• Courts, regulators, law-enforcement bodies or other competent authorities where legally required

Service providers acting on our behalf may process personal data only for authorised purposes and under appropriate confidentiality, security and data-protection obligations.

Some independent providers, such as payment services or carriers, may also process data as separate controllers for their own legally defined purposes. Their privacy information should be consulted where applicable.

International Data Transfers

Moon Fashion aims to use service arrangements that provide appropriate protection for personal data.

Some service providers or technical systems may process data outside Portugal or the European Economic Area. Where an international transfer occurs, Moon Fashion will use a legally recognised transfer mechanism where required, such as:

• A European Commission adequacy decision
• Approved Standard Contractual Clauses
• Another lawful transfer mechanism with appropriate safeguards

You may contact Moon Fashion for information about the safeguards relevant to a particular transfer.

How Long We Keep Personal Data

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, security, complaint and legal-claim requirements.

Retention periods may vary according to the type of data:

• Order, invoice and transaction records are retained for the period required under applicable tax, accounting and commercial law
• Account data may be retained while the account remains active and for an appropriate period afterwards
• Customer-service, return and complaint records may be retained until the matter and related legal periods have ended
• Marketing data may be retained until consent is withdrawn, an objection is made or the data is no longer reasonably required
• Cookie and consent records are retained according to their function, duration and applicable legal requirements
• Security logs are retained for an appropriate period based on risk, investigation and system-integrity needs

When data is no longer required, it will be securely deleted, anonymised or isolated until deletion from protected backup systems, unless continued retention is legally required.

Data Security

Moon Fashion applies appropriate technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure or unauthorised access.

Measures may include, where appropriate:

• Encrypted transmission of website data
• Access controls and authentication
• System and security monitoring
• Protected backups
• Restricted staff and provider access
• Confidentiality obligations
• Updates and vulnerability management
• Incident-response procedures

No website or storage system can guarantee absolute security. Customers should use a strong, unique password, protect their account credentials and contact Moon Fashion if unauthorised account activity is suspected.

Personal Data Breaches

If a personal data breach occurs, Moon Fashion will assess its nature, scope and potential risk.

Where legally required, the breach will be reported to the competent supervisory authority without undue delay and, where feasible, within 72 hours after Moon Fashion becomes aware of it.

Where a breach is likely to result in a high risk to affected individuals, those individuals will be informed without undue delay unless a lawful exception applies.

The 72-hour supervisory-authority period should not be interpreted as a rule requiring every technical incident to be reported to every customer.

Your Data-Protection Rights

Depending on the circumstances and applicable law, you may have the right to:

• Access personal data held about you
• Rectify inaccurate or incomplete data
• Erase personal data where the legal conditions are met
• Restrict processing in certain circumstances
• Receive or transfer data where the right to portability applies
• Object to processing based on legitimate interests
• Object at any time to direct marketing
• Withdraw consent where processing is based on consent
• Request information about applicable international-transfer safeguards
• Lodge a complaint with a competent data-protection authority

Erasure is not an absolute right. Moon Fashion may retain information where necessary to comply with tax, accounting, consumer-protection or other legal obligations, or to establish, exercise or defend legal claims.

How to Exercise Your Rights

To exercise a data-protection right, email:

moonfashionpt@gmail.com

Please clearly identify the request and provide enough information for Moon Fashion to locate the relevant records.

We may request reasonable proof of identity where necessary to protect personal data against unauthorised disclosure. Do not send unnecessary identity documents or sensitive information unless specifically requested through an appropriate method.

Moon Fashion will respond within the period required by applicable data-protection law. Complex or multiple requests may require a lawful extension, in which case the requester will be informed.

Requests are normally handled without charge. A reasonable fee or refusal may apply only where permitted by law, including where a request is manifestly unfounded or excessive.

Children’s Privacy

The Moon Fashion online store is not directed at children who cannot independently enter into a purchase contract.

We do not knowingly request children to submit personal data without appropriate involvement from a parent or legal guardian.

If you believe that a child has provided personal data inappropriately, contact moonfashionpt@gmail.com so the circumstances can be reviewed and appropriate action taken.

Third-Party Websites

The Moon Fashion website may contain references or links to websites operated by other organisations.

Those organisations control their own websites and personal-data practices. Moon Fashion is not responsible for an independent website’s privacy policy, security or content.

Review the relevant privacy information before providing personal data to a third-party website.

Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in the website, business operations, service providers or legal requirements.

The current version will be published on this page with an updated revision date. Where appropriate, significant changes may also be communicated through the website, account or another suitable channel.

Processing connected with an existing order remains subject to the applicable legal requirements and the relevant information provided at the time.

Contact and Supervisory Authority

For privacy questions or requests:

Moon Fashion
Travessa do Poço Novo 17, 1C
2725-421 Mem Martins
Portugal

Email:
moonfashionpt@gmail.com

You also have the right to lodge a complaint with the Portuguese data-protection supervisory authority:

Comissão Nacional de Proteção de Dados — CNPD
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa
Portugal

Telephone: +351 213 928 400
Email: geral@cnpd.pt
Website: www.cnpd.pt

Contacting the CNPD does not prevent you from first contacting Moon Fashion so that we can try to address your concern directly.