Privacy Policy
Last updated: July 26, 2026
1. Introduction
At MoonBloom, we respect your privacy and are committed to protecting the personal data you share with us.
This Privacy Policy explains what information we collect, how we use it, how long we keep it, and what your rights are.
Our goal is to handle your data transparently, securely, and in accordance with applicable data protection regulations.
2. Data Controller
Owner: Bárbara Llop Porcel
Trade Name: MoonBloom
Email: info@moonbloomhouse.com
Website: moonbloomhouse.com
3. What data do we collect?
Depending on how you interact with MoonBloom, we may process the following categories of data:
Identifying Data
First and last name.
Email address.
Account Data
Encrypted password.
Order history.
Registration date.
Language preferences where applicable.
Purchase Data
Products purchased.
Order amount.
Currency used.
Payment status.
Invoices when necessary.
Technical Data
IP address.
Browser.
Operating system.
Device type.
Browser language.
Date and time of access.
Cookies and similar technologies.
Browsing Data
Through Google Analytics, we can obtain aggregated statistical information about the use of the website, such as:
Pages visited;
Time spent;
Traffic source;
Actions taken during browsing.
This data is used to improve user experience and website functionality.
4. For what purpose do we use your data?
We may process your data to:
Manage the creation of your account;
Process your purchases;
Handle payments;
Send you the download link;
Respond to inquiries;
Manage incidents;
Issue invoices when necessary;
Prevent fraud;
Enhance website security;
Analyze platform performance;
Comply with legal obligations.
We will not use your data for purposes incompatible with those described here.
5. Legal basis for processing
The processing of your data is based, as applicable, on:
The execution of the sales contract;
Your consent when necessary;
Compliance with legal obligations;
The legitimate interest of MoonBloom to maintain site security and improve our services.
6. Who do we share your data with?
MoonBloom does not sell or rent personal data.
However, some providers may access the information necessary to provide their services.
These may include:
Stripe (payment processing).
Resend (sending transactional emails).
Google Analytics (web analytics).
Hosting and technology infrastructure providers.
Accounting or tax advisory, when necessary to comply with legal obligations.
All these providers will process the data only following our instructions or in accordance with their own legal obligations when acting as independent controllers.
7. International transfers
Some of the providers used by MoonBloom may store or process data outside the European Economic Area.
When this occurs, appropriate safeguards provided by applicable regulations will be adopted, such as standard contractual clauses approved by the European Commission or other legally recognized mechanisms.
8. How long do we keep your data?
We will keep your data only for as long as necessary to:
Manage your account;
Execute the purchases made;
Comply with legal, tax, and accounting obligations;
Address potential claims;
Maintain the security of our services.
When no longer needed, they will be deleted or anonymized in accordance with applicable legislation.
9. Security
MoonBloom applies reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.
However, no system connected to the Internet can guarantee absolute security.
10. Your rights
You can exercise, when applicable, the following rights:
Access;
Rectification;
Deletion;
Objection;
Limitation of processing;
Data portability;
Withdrawal of consent when processing is based on it.
To exercise any of these rights, you can write to:
We may request additional information to verify your identity before processing the request.
11. Complaints
If you believe that the processing of your data does not comply with applicable regulations, you have the right to file a complaint with the competent supervisory authority.
In Spain, this authority is the Spanish Data Protection Agency (AEPD), without prejudice to your right to contact the corresponding authority in your place of residence when legislation permits.
12. Minors
MoonBloom targets its products to adults.
We do not intentionally collect personal data from minors.
If we detect that a minor has provided us with personal data without the necessary authorization, we will take appropriate measures to delete them.
13. Changes to this policy
We may update this Privacy Policy to adapt it to legislative, technical, or service changes.
When changes are significant, we will inform you through appropriate means.