Privacy Policy

Who looks after your information

Mystic Moonlight, at mysticmoon-light.com, is operated by M.guez mysticism LTD, Cyprus. The company is the controller of personal information collected through this store.

For privacy questions or requests, contact moonlightmichal@gmail.com.

Information we use

• Orders and delivery: your name, email address, phone number, billing and delivery details, products ordered, order notes, and payment or refund status. If you buy a gift, this may include the recipient details you provide.
• Your account: registration details, saved addresses and order history.
• Messages and sign-ups: information you send through our contact form, email or chat, and the email address you submit to our newsletter form.
• Website activity: technical information such as IP address, browser and device information, visited pages, shopping activity and cookie identifiers, collected by the website and its service providers.

Please provide only the information needed for your request. If you give us someone else’s details for delivery, make sure they know you are sharing them with us.

Why we use it

We use order and contact details to take steps at your request, fulfil purchases, arrange delivery or collection, provide customer support, and manage returns and refunds. This processing is necessary for our contract with you or to take steps before entering it.

We use relevant records to meet legal and accounting obligations. We also use information for our legitimate interests in protecting the store, preventing fraud and spam, and resolving disputes, while considering your rights.

If you choose to receive marketing emails, your consent is the basis for sending them. You can withdraw that consent by using an unsubscribe link where provided or by emailing us. Withdrawing consent does not affect earlier lawful processing or essential messages about your order.

Required checkout fields are needed to process your purchase. Optional notes and newsletter sign-up are not required to buy from us.

Payments and service providers

Our store uses WordPress and WooCommerce and is hosted with Hostinger. Providers supporting hosting, security, email delivery, payment processing and fulfilment may process the information needed for their service. Delivery providers receive the contact and delivery details needed to deliver your order.

Payments offered through Revolut are processed by Revolut and the relevant payment networks or wallet provider. Payment details are entered through the payment provider’s interface; our order records receive transaction references, payment status and related details. Read Revolut’s privacy notices for its processing practices.

If you contact us through WhatsApp or visit an external social-media service, that service also processes information under its own privacy notice. Information may also be disclosed where required by law or necessary to establish, exercise or defend legal claims.

Cookies, saved preferences and Google measurement

The store uses cookies and similar browser storage to support your basket, sign-in and saved preferences. Blocking necessary cookies can prevent these features from working correctly.

The website also includes Google measurement through Site Kit and a Google tag. These tools can process browser and device information, cookie identifiers and interactions with pages or products. See Google’s Privacy Policy for how Google uses information.

You can review or delete cookies through your browser settings. Browser controls do not necessarily stop every request sent by a website. Contact us if you need more information about measurement on this store.

International processing

Some service providers operate internationally and may process information outside the European Economic Area. Their privacy notices describe relevant locations and transfer arrangements. For example, Google explains its data-transfer frameworks. Contact us for information about the providers and safeguards relevant to your request.

How long information is kept

Retention depends on the purpose of the record, the status of your account or order, applicable accounting and legal requirements, and any unresolved dispute. Order and account records are not currently set to expire automatically after a fixed period.

You can ask us to review, correct or delete your information. Some records may need to be retained to meet legal obligations or resolve claims. Copies may also remain in backups until those backups are replaced or removed.

Your choices and rights

Subject to the conditions in data-protection law, you may request access to your personal information, correction, deletion, restriction of processing or a portable copy. You may object to processing based on legitimate interests and to use of your information for direct marketing. Where processing relies on consent, you may withdraw it at any time.

Email moonlightmichal@gmail.com to make a request. We may need reasonable information to verify your identity before releasing or changing personal records.

You may also complain to the Cyprus Commissioner for Personal Data Protection, or the supervisory authority where you live or work in the EEA.

Updates to this notice

We may revise this notice when our services or data practices change. The date above identifies the current version. For questions about this notice, please contact us using the email address above.