Privacy policy

1. Data controller

Controller: Moon XIII Clasic S.L. (B88976535)
Registered address: Virgen de Luján 30, 4º C, 41011, Seville (Spain)
Email: info@moonxiii.com

2. Data we process

We process the data you provide when you make a purchase, create an account, subscribe to our newsletter or contact us: identification data (name and surname), contact details (address, email, phone number), and order and payment data (handled by the payment gateway; we do not store your full card details).

3. Purposes and legal basis

Managing your orders, shipments and returns — performance of the sales contract.
Answering your enquiries — legitimate interest or pre-contractual measures.
Sending you commercial communications and our newsletter — your consent, which you may withdraw at any time via the email itself or by writing to us.
Complying with legal obligations (tax, consumer law) — legal obligation.

4. Retention

We keep your data for as long as the contractual relationship lasts and, afterwards, for the applicable legal limitation periods (as a general rule, up to 6 years for commercial and tax purposes). Newsletter data is kept until you withdraw your consent.

5. Recipients

Your data is shared, strictly as necessary, with:

Shopify, the ecommerce platform hosting this store. Shopify may process data outside the European Economic Area with the safeguards provided for in the GDPR (standard contractual clauses).
Payment providers (Shopify Payments and the corresponding financial institutions).
Shipping companies for order delivery: GLS.
Public authorities where there is a legal obligation.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@moonxiii.com, providing proof of identity. If you consider that our processing does not comply with the law, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Minors

This site is not aimed at children under 14. If we detect data of minors collected without their guardians' consent, we will delete it.

8. Security

We apply appropriate technical and organisational measures to keep your data secure, including encrypted transmission (HTTPS/TLS) throughout the purchase process.