Privacy Policy

1. Introduction

This Privacy Policy explains how Moon Websites ("we", "us", "our") collects, uses, and protects your personal data when you use our services or visit our website. We are committed to protecting your privacy and handling your data transparently and securely.

2. Information We Collect

2.1 Personal Information

• Name
• Email address
• Phone number
• Business details

2.2 Billing Information

• Payment details (processed securely via third-party providers such as Stripe)
• Billing address

2.3 Technical Data

• IP address
• Browser type
• Device information
• Website usage data and browsing patterns

2.4 Communication Data

• Emails, messages, and support requests
• Call recordings (where applicable for VoIP services)
• SMS messages sent and received through our communication services

2.5 AI Chat & Support Data

• Conversations with our AI-powered website chat assistants
• Chat transcripts and visitor enquiry data submitted through your website
• Questions and responses generated by AI chat features

2.6 Domain & Hosting Data

• Domain registration details (domain name, registrant information)
• DNS configuration and zone records
• SSL certificate data
• Website hosting configuration and deployment data

2.7 Account Data

• Account credentials (passwords are securely hashed and never stored in plain text)
• Order history and subscription details
• Service preferences and configuration settings
• Activity logs related to your account and services

3. How We Use Your Information

We use your data to:

• Provide and manage our services, including website building, hosting, and domain registration
• Process payments and subscriptions via secure payment providers
• Communicate with you about your account or services
• Provide AI-powered chat support on your website and manage visitor enquiries
• Operate communication services including VoIP calls, SMS, and email on your behalf
• Register and manage domains and DNS configuration
• Improve our website, services, and AI features
• Send important service updates
• Send marketing communications (only where permitted)
• Detect and prevent fraud or abuse

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contractual necessity — to provide the services you purchased
• Legitimate interests — to improve services, prevent fraud, and ensure security
• Legal obligations — for compliance with applicable laws and regulations
• Consent — for marketing communications (where required)

5. Payments & Security

Payments are processed securely via trusted third-party providers (e.g. Stripe).

We do not store full card or banking details on our servers. Card data is tokenised and handled entirely by our payment processor.

All transactions are encrypted using industry-standard security (TLS/SSL).

6. Sharing Your Data

We may share your data with:

• Payment processors (e.g. Stripe) for billing and subscription management
• Hosting providers for website hosting and server management
• Domain registrars (e.g. Cloudflare) for domain registration and DNS management
• AI service providers for powering chat assistants and content generation features
• Communication service providers for VoIP, SMS, and email tools
• Marketing and analytics platforms for service improvement

All third parties are required to handle your data securely and in compliance with data protection laws.

We do not sell your personal data.

7. AI Chat & Automated Processing

Our platform uses AI-powered chat assistants on client websites. When visitors interact with these chat features:

• Conversation data is processed by our AI providers to generate responses
• Chat transcripts may be stored to improve service quality and for client review
• Visitor contact details submitted via chat are collected and provided to the relevant client
• AI-generated content is created in good faith but should be verified by the end user

8. Call Recordings

Where VoIP services are provided, calls may be recorded for quality assurance, training, and dispute resolution purposes.

Callers will be informed of recording where required by law.

Recordings are stored securely and retained only for as long as necessary.

9. Data Retention

We retain your data only as long as necessary to:

• Provide active services
• Meet legal and accounting obligations
• Resolve disputes

When you cancel your services, we will retain essential data for legal compliance and then securely delete remaining personal data.

10. Your Rights (UK GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request data portability

To exercise these rights, contact us using the details below.

11. Cookies

We use cookies to:

• Improve website functionality
• Maintain your logged-in session
• Analyse traffic and user behaviour
• Support marketing and advertising

You can control cookies through your browser settings.

12. Marketing Communications

We may send you marketing emails about our services if you have opted in, or you are an existing customer (where legally permitted).

You can unsubscribe at any time using the link in our emails.

13. Data Security

We take appropriate technical and organisational measures to protect your data, including:

• Secure servers with encryption at rest and in transit
• Hashed passwords (never stored in plain text)
• Access controls and role-based permissions
• Regular security reviews

14. Third-Party Links

Our website or services may contain links to third-party websites. We are not responsible for their privacy practices.

15. International Data Transfers

Some of our service providers may process data outside the UK. In such cases, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

16. Updates to This Policy

We may update this Privacy Policy at any time. Changes will be posted on this page. Continued use of our services constitutes acceptance of the latest version.

17. Contact Us

If you have any questions or requests regarding your data, please contact us at contact@moonwebsites.co.uk or write to us at 128 City Road, London, EC1V 2NX.