
Privacy Policy
Introduction
Your privacy matters to us. Moonlet Marketing Ltd (“we”, “our”, “us”) is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and recognised industry standards for information security and privacy.
This Privacy Policy explains:
-
What personal data we collect
-
How we use and protect it
-
Your rights and choices
This statement applies to all interactions with Moonlet Marketing, including through our website, marketing campaigns, advisory services, and any other services we provide.
​
What Information Do We Collect?
We only collect the minimum amount of personal data required to deliver our services, respond to your enquiries, and improve your experience. This may include:
-
Information you provide directly (e.g. name, email address, phone number, job title, company name)
-
Information automatically collected via our website (e.g. IP address, browser type, usage data)
-
Information provided during campaigns or events (e.g. form submissions, webinar registrations)
We do not collect more data than necessary for the purposes described.
​
How Do We Use Your Personal Information?
Your data is used solely to:
-
Provide, maintain, and improve our services
-
Personalise your interactions with us
-
Communicate with you regarding our services, events, or resources (with your consent)
-
Meet legal, regulatory, or contractual obligations
We do not sell your data or use it for unauthorised marketing, profiling, or commercial purposes without your consent.
​
Legal Basis for Processing
We process your personal data based on one or more of the following:
-
Your consent (which you can withdraw at any time)
-
The performance of a contract with you or your organisation
-
Compliance with legal obligations
-
Legitimate business interests, provided these do not override your rights and freedoms
If you choose not to provide certain personal data, some services may not be available to you.
​
When We Share Your Data
We only share your personal data when:
-
It is necessary to deliver services you have requested
-
We are legally required to do so
-
We use trusted service providers who process data on our behalf under strict contractual and confidentiality obligations
We maintain an up-to-date list of our sub-processors, available on request, and will notify you before changes are made.
​
Data Storage and Processing Locations
We store and process your personal data within the UK or European Economic Area (EEA). Any transfers outside these regions will comply with UK GDPR requirements and only occur with appropriate safeguards in place.
​
How We Protect Your Data
We use industry-standard measures to secure your personal data, including:
-
Encryption in transit (HTTPS/TLS) and at rest where applicable
-
Access controls to ensure only authorised personnel can access your data
-
Prohibition on storing personal data on unencrypted portable devices
-
Staff training on information security and data protection
-
Regular system monitoring and security reviews
​
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy. After this period, data is securely deleted or anonymised.
Example retention periods:
-
Website form data: 14 days
-
Backups: 30 days
​
Cookies and Similar Technologies
Our website uses cookies to:
-
Enable site functionality and security
-
Remember your preferences
-
Analyse website traffic and performance
You can manage or withdraw your consent for cookies via your browser settings.
​
Your Rights Under UK GDPR
You have the right to:
-
Access your personal data
-
Request correction or deletion
-
Restrict or object to processing
-
Withdraw consent at any time
-
Request data portability
-
Lodge a complaint with the UK Information Commissioner’s Office (ICO)
To exercise your rights, contact us on hello@moonletmarketing.com