Privacy Policy

Our Commitment to Your Privacy

At Moonpetal, we understand that privacy is personal. When you share information with us, whether through our website or during a tea ceremony, we treat it with the same care and respect we bring to every aspect of our practice. This policy explains what information we collect, how we use it, and the choices you have regarding your data.

We believe transparency builds trust. If you have questions about anything in this policy, we encourage you to reach out directly. We're here to help.

Information We Collect

Information You Provide Directly

When you fill out our contact form, book an experience, or communicate with us, you may share:

• Your name and email address
• Messages or questions you send us
• Booking details and preferences for tea ceremonies
• Feedback or testimonials if you choose to share them

Information Collected Automatically

Like most websites, we automatically collect certain technical information when you visit:

• Browser type and version
• Device information and operating system
• IP address and general location (city or region)
• Pages visited and time spent on our site
• Referral source (how you found us)

Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience and understand how our website is used. For detailed information about the cookies we use and how to manage them, please visit our Cookie Policy.

How We Use Your Information

We use the information we collect for specific, legitimate purposes that support our relationship with you:

Communication and Service Delivery

To respond to your inquiries, confirm bookings, send appointment reminders, and provide information about our tea ceremonies and wellness consultations.

Website Improvement and Analytics

To understand how visitors use our site, identify areas for improvement, and ensure our website functions properly across different devices and browsers.

Personalization

To remember your preferences, customize content based on your interests, and provide a more tailored experience when you return to our site.

Security and Fraud Prevention

To protect our website, our users, and our business from unauthorized access, misuse, or fraudulent activity.

Marketing Communications (With Consent)

To send you information about new experiences, seasonal offerings, or updates that might interest you—but only if you've opted in to receive such communications.

Legal Compliance

To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

How We Share Your Information

We don't sell your personal information. We only share your data in limited circumstances:

Service Providers

We work with trusted third-party service providers who help us operate our website and deliver our services. These include hosting providers, email services, analytics platforms, and payment processors. These providers are contractually required to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required by law, legal process, or governmental request, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the unlikely event that Moonpetal is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We would notify you before any such transfer and inform you of your choices regarding your data.

How We Protect Your Information

We take data security seriously and implement reasonable measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Secure Storage: Personal information is stored on secure servers with restricted access.
• Access Controls: Only authorized personnel have access to personal data, and they're trained on privacy and security practices.
• Regular Monitoring: We regularly review our security practices and update them as needed to address new threats.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we continually work to maintain the safety of your data.

How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. The specific retention period depends on the type of information and the purpose for which we collected it:

• Contact form inquiries are typically kept for 2 years to maintain communication history
• Booking information is retained for 3 years for record-keeping and customer service purposes
• Analytics data is anonymized after 26 months
• Marketing communications data is kept until you unsubscribe or request deletion

Your Privacy Rights

You have several rights regarding your personal information. We're committed to honoring these rights and making it easy for you to exercise them:

Right to Access

You can request a copy of the personal information we hold about you.

Right to Rectification

You can ask us to correct any inaccurate or incomplete information.

Right to Erasure

You can request that we delete your personal information in certain circumstances.

Right to Data Portability

You can request a copy of your data in a structured, machine-readable format.

Right to Object

You can object to certain types of processing, such as direct marketing.

Right to Withdraw Consent

Where we rely on your consent, you can withdraw it at any time.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

• Avoid filling out contact forms, account registrations, or any data-submitting features
• Disable cookies through your browser settings (see our Cookie Policy for more details)
• Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Moonpetal operates in the United States. If you are accessing our website from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

By using our website or providing us with your information, you acknowledge and consent to the transfer of your information to the United States. We take appropriate measures to ensure your data is treated securely and in accordance with this Privacy Policy.

Third-Party Websites

Our website may contain links to third-party websites or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page.

If we make material changes that significantly affect your rights or how we use your information, we will notify you by email (if you've provided one) or by posting a prominent notice on our website before the changes take effect. We encourage you to review this Privacy Policy periodically to stay informed about how we're protecting your information.