Privacy Policy

1. Who we are

This website (moonwhisk.dev) is operated by Moonwhisk Ltd ("we", "us", "our"), a company registered in England & Wales (company number 16501280) with its registered office at 128 City Road, London, EC1V 2NX. We are the "data controller" responsible for your personal data under UK data protection law.

Our data protection contact is privacy [at] moonwhisk [dot] dev.

2. The personal data we collect

This is a marketing website. We keep data collection to a minimum.

Analytics data (only with your consent)

If you accept analytics cookies, we use Google Analytics 4 to understand how the site is used. This may include your device and browser type, the pages you view and how you reached them, approximate location derived from your IP address (which is anonymised), and on-site interactions. We do not use this data to identify you personally, and we do not use Google Analytics for advertising.

Until you give consent, Google Analytics runs in a cookieless "consent mode" and does not store cookies on your device or collect identifiable analytics data. You can withdraw consent at any time — see our Cookie Policy.

Technical and security data

To keep the site secure and operational we and our hosting provider process limited technical data such as your IP address, request metadata, and a strictly necessary anti-fraud (CSRF) cookie. This is essential to running the site safely.

Administrator accounts

Our own staff sign in to a private content-management area. This involves an essential session cookie and a short-lived security record (including a hashed IP address and browser string). It applies only to authorised Moonwhisk personnel, not to visitors.

We do not operate contact forms, newsletter sign-up, or accounts for the public on this site, so we do not collect names, email addresses, or similar details from visitors here.

3. Cookies

We use a small number of cookies. Strictly necessary cookies keep the site secure and remember your cookie choice; analytics cookies are only set with your consent. Full details, including names and durations, are in our Cookie Policy.

4. Our legal bases

• Consent (UK GDPR Article 6(1)(a)) for analytics cookies and Google Analytics. You can withdraw consent at any time.
• Legitimate interests (Article 6(1)(f)) for keeping the site secure, preventing abuse, and operating it reliably. We have weighed these interests against your rights and consider them proportionate.

5. Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract:

• Google (Google Analytics) — website analytics, only where you have consented.
• Vercel — website hosting and content delivery.
• Turso — the database that stores our website content.

We may also disclose data where required by law or to protect our legal rights.

6. International transfers

Some of these providers are based outside the UK, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK's International Data Transfer Agreement / Addendum, the EU Standard Contractual Clauses, and the UK Extension to the EU–US Data Privacy Framework, so your data receives an equivalent level of protection.

7. How long we keep data

• Analytics data: retained by Google Analytics for up to 14 months.
• Analytics cookies: up to 2 years, or until you withdraw consent.
• Strictly necessary cookies: from the end of your session up to 24 hours.
• Administrator session records: deleted within 24 hours of expiry.

8. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing;
• data portability where applicable; and
• withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, contact us at privacy [at] moonwhisk [dot] dev.

9. Complaints

If you have concerns about how we handle your data, please contact us first so we can help. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk (opens in new tab) or by calling 0303 123 1113.

10. Children

This website is intended for a business and adult audience. It is not directed at children, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. We will revise the "last updated" date above when we do, and material changes will be reflected on this page.

12. Contact us

For any privacy question, email privacy [at] moonwhisk [dot] dev or write to Moonwhisk Ltd at the registered address above.