Privacy Policy

Last updated: October 19, 2026

Moonhug operates this store and website, including all related information, content, features, tools, products and services, to provide you, the customer, with a curated shopping experience (the "Services"). Moonhug is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described here.

Personal Information We Collect or Process

When we use the term "personal information", we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from it:

• Contact details including your name, address, billing address, shipping address, phone number and email address.
• Financial information including credit card, debit card and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.
• Account information including your username, password, security questions, preferences and settings.
• Transaction information including the items you view, put in your cart, add to your wishlist, purchase, return, exchange or cancel, and your past transactions.
• Communications with us including the information you include when you contact us, for example in a customer support inquiry.
• Device information including information about your device, browser or network connection, your IP address and other unique identifiers.
• Usage information including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us or otherwise provide us with your personal information;
• Automatically through the Services including from your device when you use our products or services or visit our website, and through cookies and similar technologies;
• From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
• From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

• Provide, Tailor and Improve the Services. We use your personal information to perform our contract with you, process your payments, fulfill your orders, remember your preferences and the items you are interested in, send notifications related to your account, create and manage your account, arrange shipping, facilitate returns and exchanges, enable you to post reviews and create a customized shopping experience, such as recommending products related to your purchases.
• Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as sending marketing communications by email, text message or postal mail, and showing you online advertisements for products or services on the Services or other websites, including based on items you previously purchased or added to your cart and other activity on the Services.
• Security and Fraud Prevention. We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate or act on possible fraudulent, illegal, unsafe or malicious activity, protect public safety and secure our Services. If you register an account, you are responsible for keeping your account credentials safe. We strongly recommend that you do not share your username, password or other access details with anyone else.
• Communicating with You. We use your personal information to provide customer support, respond to you promptly and maintain our business relationship with you.
• Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or take part in civil discovery, potential or actual litigation or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With Shopify, vendors and other third parties who perform services on our behalf (for example IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
• With business and marketing partners who provide marketing services and show you advertising. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to direct us not to share information about you for targeted advertising and marketing based on your online activity with different merchants and websites. You can exercise this right here.
• When you direct, request or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce our terms of service or policies, and to protect or defend the Services, our rights and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit to the Services is transmitted to and shared with Shopify, as well as with third parties that may be located in countries other than where you live, to provide and improve the Services. To help protect, grow and improve our business, we also use certain enhanced Shopify features that incorporate data from your interactions with our store, with other merchants and with Shopify. To provide these features, Shopify may use personal information collected about your interactions with our store, with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including responding to your requests to exercise your rights over its use for these purposes. To learn more about how Shopify uses your personal information and the rights you may have, visit the Shopify Consumer Privacy Policy. Depending on where you live, you can exercise certain rights with respect to your personal information through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, please review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of their information. Information you provide in public or semi-public places, including on third-party social networking platforms, may also be visible to other users of the Services and/or of those platforms, without limitation as to its use by us or by a third party. Including such links does not, by itself, imply any endorsement of the content on those platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information about children under the age of majority in your state, province or territory. If you are the parent or guardian of a child who has provided us with personal information, you can contact us using the details below to request that it be deleted. As of the effective date of this Privacy Policy, we have no actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security". Information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

How long we keep your personal information depends on different factors, such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your Rights and Choices

Depending on where you live (for example, in certain U.S. states or in Canada), you may have some or all of the rights below with respect to your personal information. These rights are not absolute, may apply only in certain circumstances and, in some cases, we may decline your request as permitted by law.

• Right to Access / Know. You may have the right to request access to the personal information we hold about you.
• Right to Delete. You may have the right to request that we delete the personal information we maintain about you.
• Right to Correct. You may have the right to request that we correct inaccurate personal information we maintain about you.
• Right of Portability. You may have the right to receive a copy of the personal information we hold about you and to ask us to transfer it to a third party, in certain circumstances and with certain exceptions.
• Right to Opt Out of Sale or Sharing for Targeted Advertising. Depending on where you live, you may have the right to opt out of the "sale" or "share" of your personal information, or of its processing for "targeted advertising", as defined in applicable privacy laws. You can exercise this right here. If you visit our website with the Global Privacy Control (GPC) signal enabled, we will automatically treat this as a request to opt out for the device and browser you use, where required by law. If we can link the device sending the signal to a Shopify account, we will apply the request to that account as well. Other than GPC, we do not recognize "Do Not Track" signals sent from your browser or device.
• Withdrawal of Consent. Where we rely on your consent, you may withdraw it at any time. This does not affect processing that took place before you withdrew it.
• Managing Communication Preferences. We may send you promotional emails, and you can opt out at any time by using the unsubscribe link in our emails. If you opt out, we may still send you non-promotional emails, such as those about your account or your orders.

You can exercise these rights where indicated on the Services or by contacting us using the details below. To learn more about how Shopify uses your personal information and the rights you may have, including rights related to data processed by Shopify, visit privacy.shopify.com.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your request, as permitted or required by applicable law. In accordance with applicable law, you may designate an authorized agent to make requests on your behalf. Before accepting a request from an agent, we will require proof that you authorized them, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required by applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision by contacting us, or to file a complaint with the relevant authority: in the United States, for example, your state attorney general or state privacy agency; in Canada, the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

International Transfers

We may transfer, store and process your personal information outside the country you live in, including in Hong Kong and in other countries where our service providers operate. When we do, we take reasonable steps to protect it as described in this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, please email us at moonhugco@outlook.com or write to us at Fa Yuen Street, Mong Kok, Kowloon, Hong Kong SAR. For the purposes of applicable data protection laws, we are the controller of your personal information.