Privacy policy

Last updated: 13 October 2026

Moonlight Cottage operates this website and online store, including its content, features, products and services (collectively referred to as the "Services").

Our store is powered by Shopify, which enables us to provide our products and services to you.

This Privacy Policy explains how we collect, use, share and protect your personal information when you visit our website, place an order, contact us or otherwise use our Services.

Please read this policy carefully to understand how your personal information is handled.

1. Personal Information We Collect

Personal information means information that identifies you or could reasonably be linked to you.

Depending on how you interact with Moonlight Cottage, we may collect:

  • Contact details: Your name, email address, telephone number (if provided), billing address and delivery address.

  • Payment information: Payment method, transaction details and payment confirmation. Payment information is processed through our payment service providers.

  • Account information: Your account details, preferences and settings.

  • Order information: Products viewed, added to your basket or purchased, together with order history, returns, exchanges and cancellations.

  • Communications: Information you provide when contacting us with questions, enquiries or requests.

  • Device information: Your IP address, browser, device information and network connection details.

  • Website usage information: Information about how you browse and interact with our website.

We may also collect information derived from these details where permitted by law.

2. How We Collect Your Information

We may collect personal information:

  • Directly from you when you place an order, create an account, subscribe to marketing or contact us.

  • Automatically when you visit our website, including through cookies and similar technologies.

  • From service providers that help us operate our online store.

  • From business partners and other third parties where appropriate and permitted by law.

3. How We Use Your Personal Information

We use personal information to operate Moonlight Cottage and provide you with a reliable shopping experience.

This includes:

Processing and fulfilling orders

We use your information to process payments, prepare and dispatch orders, arrange delivery, send order updates and manage returns or refunds.

Customer accounts and services

We may use your information to manage customer accounts, remember preferences, provide product recommendations and improve your shopping experience.

Marketing and advertising

Where permitted, we may use your information to send promotional emails, share new product launches and offers, or display relevant advertisements.

You can unsubscribe from marketing emails at any time using the link provided in our emails.

Security and fraud prevention

We use relevant information to protect our website, customers and business from fraud, unauthorised access and other potentially harmful activities.

Customer support

We use your information to respond to enquiries, resolve problems and provide assistance with your purchases.

Legal obligations

We may process information where necessary to comply with applicable laws, respond to lawful requests or protect our legal rights.

4. Lawful Bases for Processing

Where UK data protection law applies, we process personal information on an appropriate lawful basis, including:

  • Contract: Where processing is necessary to fulfil your order or provide a service you have requested.

  • Legal obligation: Where we must process or retain information to comply with the law.

  • Legitimate interests: Where processing is necessary for our legitimate business interests, such as customer service, security and improving our store, provided your rights do not override those interests.

  • Consent: Where we ask for your permission, including for certain marketing communications and non-essential cookies.

Where processing relies on consent, you may withdraw that consent at any time.

5. How We Share Your Personal Information

We may share relevant personal information with trusted third parties where necessary to operate our business.

These may include:

  • Shopify, which provides our ecommerce platform.

  • Payment providers that process customer transactions.

  • Delivery companies and postal services.

  • Technology providers that support our website and customer communications.

  • Analytics and marketing partners, where permitted.

  • Professional advisers or authorities where required by law.

We may also disclose information when you request or consent to it, or where necessary in connection with legal proceedings, business transactions or protecting our rights.

Our service providers and business partners may handle information in accordance with their own privacy policies and applicable legal responsibilities.

6. Our Relationship with Shopify

Moonlight Cottage uses Shopify to operate its online store.

Shopify collects and processes certain personal information to provide, maintain and improve its services.

Information you provide through our website may be shared with Shopify and relevant service providers, including organisations located outside the United Kingdom.

Shopify also provides enhanced services that may use information about your interactions with our store, other merchants and Shopify to support security, personalisation, analytics and advertising.

For certain processing activities associated with these enhanced services, Shopify is responsible for how your personal information is handled.

You can learn more by visiting:

Shopify Consumer Privacy Policy

You can also review your privacy choices through the:

Shopify Privacy Portal

7. Cookies and Website Tracking

Our website uses cookies and similar technologies to support essential website functions, improve your shopping experience, understand website activity and provide relevant marketing where permitted.

Cookies may include:

  • Required cookies: Necessary for functions such as shopping baskets, checkout and website security.

  • Personalisation cookies: Used to remember preferences and improve your experience.

  • Analytics cookies: Help us understand how visitors use our website.

  • Marketing cookies: Support advertising and promotional activities.

Where required, we ask for your consent before using non-essential cookies.

You can accept, decline or manage your cookie preferences through our website's cookie banner and privacy settings.

8. Marketing Communications

If you subscribe to our marketing emails, we may contact you about new fragrances, product launches, seasonal collections, special offers and Moonlight Cottage news.

We send marketing communications only where we have an appropriate legal basis.

You can unsubscribe at any time using the unsubscribe link in our emails or by contacting:

hello@moonlight-cottage.com

You may still receive essential communications relating to orders, payments or deliveries.

9. Third-Party Websites and Links

Our website may contain links to external websites, social media platforms and other services.

These websites may have their own privacy policies and practices.

Moonlight Cottage is not responsible for the privacy, security or content of websites operated by third parties.

We recommend reviewing their privacy policies before providing personal information.

10. Children's Privacy

Our website is not specifically intended for children.

We do not knowingly collect personal information from children where doing so would be unlawful.

If you believe a child has provided personal information to us inappropriately, please contact us so we can review the matter and take appropriate action.

11. Security and Retention of Personal Information

We take reasonable steps to protect personal information against unauthorised access, misuse, loss or disclosure.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may depend on:

  • Processing and fulfilling orders.

  • Maintaining customer accounts.

  • Providing customer support.

  • Meeting accounting, tax and other legal obligations.

  • Resolving disputes.

  • Protecting our legal rights.

When information is no longer required, we take appropriate steps to delete or anonymise it.

12. Your Privacy Rights

Depending on applicable law and your circumstances, you may have the following rights:

  • Right of access: Request a copy of personal information we hold about you.

  • Right to rectification: Ask us to correct inaccurate or incomplete information.

  • Right to erasure: Request deletion of your personal information in certain circumstances.

  • Right to restrict processing: Ask us to limit certain uses of your information.

  • Right to data portability: Request certain information in a transferable format where applicable.

  • Right to object: Object to certain processing, including direct marketing.

  • Right to withdraw consent: Withdraw consent where our processing relies on it.

  • Rights relating to automated decision-making: Exercise applicable rights concerning certain solely automated decisions.

These rights are subject to legal conditions and exceptions.

To exercise your rights, please contact:

hello@moonlight-cottage.com

We may need to verify your identity before processing a request.

We will respond within the timescales required by applicable law.

You can also visit the Shopify Privacy Portal for information about privacy rights relating to Shopify's processing activities.

13. International Transfers

Some of our service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be used where required by law.

These may include applicable adequacy regulations or recognised contractual protections, such as the UK International Data Transfer Agreement or an appropriate UK Addendum to standard contractual clauses.

14. Complaints

If you have concerns about how Moonlight Cottage handles your personal information, please contact us so that we can investigate and respond.

Email: hello@moonlight-cottage.com

You also have the right to raise a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO).

Website: https://ico.org.uk

You do not have to contact us before raising a complaint with the ICO.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, legal requirements or privacy practices.

Any updated policy will be published on our website with a revised "Last updated" date.

Where required by law, we will provide additional notice of significant changes.

16. Contact Us

If you have questions about this Privacy Policy, how we handle your information or your privacy rights, please contact:

Moonlight Cottage

Email: hello@moonlight-cottage.com

Website: https://moonlight-cottage.com

Address: 30 Rosedale Avenue, Alvaston, Derby DE24 0FJ, United Kingdom

For the purposes of applicable data protection legislation, Moonlight Cottage is the data controller of personal information processed for its own business purposes.