Privacy policy

Privacy Notice

 

Last updated July 3, 2026

This Privacy Notice describes Sun, Moon, and Stars LLC dba Moonlit Supply Co. and its affiliates’ (collectively, “Moonlit Supply,” “we,” “us,” or “our”) processing of your Personal Information, including the types of Personal Information we process when you use our digital assets (e.g., our websites) (our “Services”), the purposes for which we process that Personal Information, the other parties with whom we may share it, and the measures we take to protect the security of the data. It also tells you about your rights and choices with respect to your Personal Information, and how you can contact us about our privacy practices.

1. Personal Information We May Collect

2. Sources of Collection of Personal Information

3. Use of your Personal Information

4. Legal Basis.

5. Disclosure of your Personal Information to Third Parties

6. Retention

7. Data Transfers

8. How We Protect Your Personal Information

9. Children’s Privacy

10. Your Privacy Rights and Choices.

11. Updates to This Privacy Notice

12. How to Contact Us

 

1. Personal Information We May Collect

“Personal Information” means any information relating to an identified or identifiable individual. We may collect the following categories of Personal Information:

      Identifiers, such as name, email, phone, billing/mailing address, IP address, device identifiers, and customer preference signals.

      Commercial Information, such as products viewed and products purchased.

      Device Information, such as device and application numbers, browser type, hardware model, operating system, and ISP provider/mobile carrier.

      Payment Information, such as payment account number to complete a transaction that you initiate on our Services. All payment data is processed directly by our payment processing service providers to process payments on our behalf.

      Internet or Other Electronic Network Activity Information, such as cookies and web beacon data, IP address, browser type, mobile device identifier, referring URLs, and pages viewed and actions you take on our Services.

      Inferences Drawn from Personal Information, such as consumption habits and interests.

      General geolocation data, such as your city, state or country or your IP address.

      Website and device usage, and similar information collected via automated means, such as cookies and similar technologies.

      Business contact information when you work for one of our business partners.

We do not collect Sensitive Personal Information.

2.     Sources of Collection of Personal Information

We have collected Personal Information from the following categories of sources:

      You/Your Devices: You or your devices directly.

      Affiliates.

      Analytics Providers.

      Advertising Networks.

      Social Networks.

      OS/Platform Provider: Operating systems and platforms.

      Partners: Business partners.

Automated collection: Personal Information We Obtain from Your Interaction with our Ads, Websites, Apps or Other Digital Assets

We, our service providers and partners may collect certain information about you via automated means such as Internet or other electronic network activity information, cookies, pixels, and/or web beacons when you interact with our ads, mobile apps, or visit our websites, pages or other digital assets. The Internet and/or Device Information we collect in this manner may include: IP address, browser type, operating system, mobile device identifier, geographical area, referring URLs and information on actions taken or interaction with our digital assets. A “cookie” is a text file placed on a computer’s hard drive by a web server. A “web beacon,” also known as an Internet tag, pixel tag or clear GIF, is a technology that helps us identify when content has been accessed or visited. A “pixel” is a transparent image embedded into webpages, emails, or digital ads.

We use this information to improve our online products and services by assessing how many users access or use our online products and services, which content, products and features of our online products and services most interest our visitors, what types of offers our customers like to see and how our online products and services perform from a technical point of view. For instance, we may use third-party web analytics services on our websites and mobile apps. The analytics providers that administer these services use technologies such as cookies, pixels, and web beacons to help us analyze how visitors use our websites and apps.

We, our service providers and partners may also collect information about you in connection with our marketing activities, including offers, sweepstakes, contests and promotions. The information collected for these purposes may include identifiers and your contact information (e.g., name, postal address, email address, telephone number), electronic identification data (e.g., username, password, security questions, IP address), and data collected in the context of online marketing programs, including commercial information, Internet or other electronic network activity information, geolocation data, and inferences drawn from Personal Information (e.g., personal characteristics, life habits, consumption habits, interests, location data, and voice and image recordings).

We, our service providers and partners may also collect information about you to provide you with content and advertising tailored to your individual interests based on inferences drawn from Personal Information. The information collected for these purposes may include Internet or other electronic network activity information, such as details about things like the particular pages or ads you view on our websites and apps and the actions you take on our websites and apps.

We, our service providers and partners may collect certain information about you via automated means such as, social media tools, widgets or plug-ins to connect you to your social media accounts. These features may allow you to sign in through your social media account, share a link or post directly to your social media account. When you visit a website that contains such tools or plugins, the social media or other service provider may learn of your visit. However, your interactions with these tools are governed by the privacy policies of the corresponding social media platforms. As we do not control these third-parties’ data handling practices, we recommend that you review their privacy policies, terms of use, and license agreements (if any).

Where required under applicable law, we obtain your consent prior to using the above automated means, and prior to sending you marketing communications, tailored content and advertising.

Please see the “Your Rights and Choices” section of this Privacy Notice to learn about your choices.

Because there is not yet a consensus on how companies should respond to web browser-based do-not-track (“DNT”) mechanisms, we do not respond to web browser-based DNT signals at this time. To learn more about browser tracking signals and DNT, visit http://www.allaboutdnt.com.

3.     Use of your Personal Information

We process your Personal Information in accordance with the specific business and commercial purposes below:

      Operate, evaluate, and improve our Services: Determining the effectiveness of and optimizing our advertising; analyzing our products, services, websites, mobile apps and any other digital assets in order to facilitate their functionality.

      Communicating with you: Communicating with you, providing you with updates and other information relating to our services and products, providing information that you request, responding to comments and questions, and otherwise providing customer support.

      Connecting Third Party Services: Facilitating the connection of third-party services or applications, e.g., Shopify checkout.

      Marketing: To send marketing and promotional communications about our Services.

      Advertising: Including to provide, analyze, administer, enhance, optimize, select, deliver, and measure Advertisements. We use your personal information to present you with Advertisements. Some of our Advertisements may be behavioral advertisements. Behavioral advertisements are those that are selected based on information about your use and/or interactions with unaffiliated third-party services.

      Facilitating and Fulfilling Purchases: Completing purchases initiated by you.

      Compliance with Law and Enforce our Terms of Use: For compliance purposes, including enforcing our Terms of Use or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.

      Safety, Security, and Fraud and Incident Prevention: Responding to trust and safety issues that may arise, detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

      Contracting Vendors: Contracting with vendors and service providers to perform services on our behalf or on their behalf, including maintaining or servicing accounts, providing customer service, processing, or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services on behalf of MPI’s clients.

      Notified Purpose: For other purposes for which we provide specific notice at the time the information is collected.

4.     Legal Basis.

We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.     

5.     Disclosure of your Personal Information to Third Parties

With respect to the categories of Personal Information identified above in Section 1, we disclose your Personal Information to the following categories of third parties:

        Authorized Service Providers: We use Service Providers to perform services on our behalf or to assist us with the provision of services to you. For example, we use Service Providers to provide communications, personalize and improve our service, and to process payments. We do not authorize them to use or disclose your personal information except in connection with providing their services (which may include maintaining and improving their services).

        Advertising and Marketing Companies. We disclose your Personal Information to Advertising Providers, e.g., Meta Business and Google Ads, only with your consent.

        Analytics Providers. Companies that help us analyze and improve our online properties, including Google Analytics. We disclose your Personal Information to Analytics Providers only at your direction and only with your consent.

        Integrated Third Parties. Third parties integrated into our Services or that host our Services, e.g., Shopify Payments.

        Third Parties as Legally Required. Third parties as required by law and similar disclosures.

        Third Parties in Merger/Acquisition. Third parties in connection with a merger, sale, or asset transfer.

        Third Parties with Consent or Direction: Other third parties for whom we have obtained your direction or permission to disclose your Personal Information.

        Other Parties

6.     Retention

We take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrollment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.

7.     Data Transfers

MPI is a global business. We may transfer the Personal Information we collect about you to recipients in countries other than your country, including the United States, where we are headquartered. These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your Personal Information to other countries, we will protect that information as described in this Global Privacy Notice.

We may also transfer Personal Information to countries for which adequacy decisions have been issued (see list of countries for which the European Commission has issued an adequacy decision here; see list of countries which the Swiss Federal Council has determined to provide for adequate data protection legislation here), use contractual protections for the transfer of Personal Information to third parties, such as the European Commission’s Standard Contractual Clauses or their equivalent under applicable law, or rely on other data transfer mechanisms where applicable.

8.     How We Protect Your Personal Information

We maintain appropriate security safeguards to protect your Personal Information and only retain it for a limited period of time.

The security of your Personal Information is important to us. We are committed to protecting the information we collect. We maintain reasonable administrative, technical and physical safeguards designed to protect the Personal Information you provide or we collect against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.

In the event of a breach of our security safeguards, we will assess the extent of harm (if any) to individuals, and to comply with reporting and notification obligations in accordance with the applicable law.

We also take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrolment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.

9.     Children’s Privacy

Moonlit Supply’s Services are not directed to, likely to be accessed by, or intended for consumers, including children, under the age of 21, in accordance with applicable law.

10.  Your Privacy Rights and Choices.

Depending on where you live, you may be able to exercise the rights described below when we receive a verified request in accordance with applicable law:

        Access, correct, update, or delete your personal information: You have a right to confirm whether we process your personal information and to access and receive a copy of the personal information we process about you. You may also correct or update out-of-date or inaccurate personal information or request that we delete personal information that we hold about you.

        Portability and downloading a copy of your personal information: You can request portability of or download a copy of your personal information.

        Objection, restriction, and withdrawal of consent: You can object to or request that we restrict processing of your personal information. If we have collected and are processing your personal information with your consent, such as promotional messages or SMS messages, then you can withdraw your consent at any time by engaging with the opt out mechanism in the message, .e.g sending STOP to end SMS messages or clicking the link to unsubscribe in any promotional email. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

 

Email Marketing Opt-Out

If you sign up for our newsletter and decide that you no longer wish to receive emails from us, you can opt-out or unsubscribe by clicking on the “Unsubscribe” link in the email you receive.  Please allow up to ten (10) business days for us to process your unsubscribe request.

 

Web Browser/Cookie-Based Opt-Out

You may stop or restrict the placement of cookies on your computer or remove them from your browser by adjusting your web browser preferences. There are also many programs that allow you to manually delete your cookies.

 

The online advertising industry also provides websites from which you may opt-out of receiving targeted ads/interest-based advertising from us, our data partners and our other advertising partners that participate in self-regulatory programs. You may use the NAI opt-out tool at http://www.networkadvertising.org/choices/, which will allow you to opt-out of seeing targeted ads from us and other members. The DAA’s opt-out tool can be found at http://www.aboutads.info/choices/.

 

SMS Messages Opt-Out

If you sign up for promotional SMS/text messages and decide you no longer wish to receive SMS messages from us, you can opt-out or unsubscribe by replying STOP at any time.

        Right to complain: You have the right to complain to a data protection authority about our processing of your personal information, but we encourage you to first contact us with any questions or concerns.

        Right not to be subject to automated decision making: We do not use automated decision making.

11.  Updates to This Privacy Notice

This Privacy Notice may be updated periodically to reflect changes in our Personal Information practices. You will be deemed to have been made aware of and will be subject to the changes to the Privacy Notice after such notice has been posted. We will state the date this Privacy Notice was last updated. We encourage you to review our Privacy Notice on a regular basis.

12.  How to Contact Us

You can e-mail us at info@MoonlitSupply.com.

If you have any questions, comments or complaints about this Privacy Notice and our privacy practices, or would like to update your privacy preferences, please email us at: support@moonlitsupply.com or write to us at:

Moonlit Supply Co. 

6727 Martin Luther King, Jr. Way S

# 1218

STE M

Seattle, WA 98118-3205