Privacy policy

DATA CONTROLLER

The controller of your personal data is MoonLodge ASBL (trading name: MOOJO Cacao), company number BE 0634.863.317, Hekslaan 50, 3870 Heers (Heks), Belgium, info@moojo-cacao.be. We process your data in accordance with the General Data Protection Regulation (GDPR).

ARTICLE 1 – PERSONAL INFORMATION COLLECTED

When you make a purchase in our shop, as part of our buying and selling process, we collect the personal information you provide to us, such as your name, your address and your email address.

When you browse our shop, we also automatically receive your computer’s Internet Protocol address (IP address), which provides us with more details about the browser and operating system you use.

Email marketing (if applicable): With your permission, we may send you emails about our shop, new products and other updates.

PURPOSES AND LEGAL BASES

We use your data to process and deliver your orders and respond to your requests (performance of the contract), to comply with our legal obligations, in particular accounting obligations (legal obligation), to ensure the security and proper functioning of the shop (legitimate interest) and, with your agreement, to send you our emails and measure the site’s audience (consent).

We keep your data for as long as necessary for these purposes, and then for the period required by our legal obligations. Data linked to your consent is deleted when you withdraw it.

ARTICLE 2 - CONSENT

How do you get my consent?

When you provide us with your personal information to complete a transaction, verify your credit card, place an order, arrange a delivery or return a purchase, we assume that you consent to our collecting your information and using it for that purpose only.

If we ask you for your personal information for another reason, for example for marketing purposes, we will ask you directly for your explicit consent, or we will give you the opportunity to refuse.

How can I withdraw my consent?

If, after giving us your consent, you change your mind and no longer consent to our contacting you, collecting your information or disclosing it, you can notify us by contacting us via the contact form on our site or by post at: MoonLodge ASBL, Hekslaan 50, 3870 Heers (Heks), Belgium

ARTICLE 3 – DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate our General Terms and Conditions of Sale and Use.

ARTICLE 4 – SHOPIFY

Our shop is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our services and products to you.

Your data is stored in Shopify’s data storage system and databases, and in the general Shopify application. Your data is kept on a secure server protected by a firewall.

Payment:

If you make your purchase through a direct payment gateway, Shopify will store your credit card information. This information is encrypted in accordance with the data security standard established by the payment card industry (PCI-DSS standard). Information relating to your purchase transaction is kept for as long as necessary to complete your order. Once your order is completed, the information relating to the purchase transaction is deleted.

All direct payment gateways comply with the PCI-DSS standard, managed by the PCI Security Standards Council, which is a joint effort of companies such as Visa, MasterCard, American Express and Discover.

The requirements of the PCI-DSS standard help ensure the secure handling of credit card data by our shop and its service providers.

For more information, please consult Shopify’s Terms of Service or their Privacy Policy.

ARTICLE 5 – THIRD-PARTY SERVICES

In general, the third-party providers we use will only collect, use and disclose your information to the extent necessary to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we are required to provide to them for your purchase transactions.

For these providers, we recommend that you read their privacy policies carefully so that you can understand how they will handle your personal information.

Please bear in mind that certain providers may be located in, or have facilities located in, a jurisdiction different from yours or ours. So if you decide to proceed with a transaction that requires the services of a third-party provider, your information may then be governed by the laws of the jurisdiction in which that provider is located or those of the jurisdiction in which its facilities are located.

Our main service providers are: Shopify (shop hosting), Mollie and the other payment providers offered at checkout, bpost (delivery), Klaviyo and Mailchimp (emails), Meta (advertising measurement, with your agreement), Yotpo (customer reviews), PageFly and Weglot (page display), Revoq (online withdrawal form: your withdrawal data is kept there for 90 days and then deleted). Where data is transferred outside the European Economic Area, these transfers are governed in accordance with the GDPR.

Once you leave our shop’s site or are redirected to a third party’s website or application, you are no longer governed by this Privacy Policy or by the General Terms and Conditions of Sale and Use of our website.

Links

You may leave our website by clicking on certain links on our site. We accept no responsibility for the privacy practices of these other sites and recommend that you read their privacy policies carefully.

ARTICLE 6 – SECURITY

To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, it will be encrypted using the SSL security protocol and stored with AES-256 encryption. Although no method of transmission over the Internet or of electronic storage is 100% secure, we follow all the requirements of the PCI-DSS standard and implement additional generally accepted industry standards.

COOKIES

We use cookies that are necessary for the shop to function (session, cart, security). With your agreement, given or refused in the cookie banner, we also use audience measurement and marketing cookies. You can change your choices at any time. Here are examples of necessary cookies used by the shop:

_session_id, unique session identifier, allows Shopify to store information about your session (referrer, landing page, etc.).

_shopify_visit, no data held, persists for 30 minutes from the last visit. Used by our website provider’s internal statistics tracking system to record the number of visits.

_shopify_uniq, no data held, expires at midnight (relative to the visitor’s location) the following day. Counts the number of visits to a shop by a single customer.

cart, unique identifier, persists for 2 weeks, stores information about your shopping cart.

_secure_session_id, unique session identifier

storefront_digest, unique identifier, indefinite if the shop has a password, it is used to determine whether the current visitor has access.

ARTICLE 7 – AGE OF CONSENT

By using this site, you represent that you are at least the age of majority in your country of residence, and that you have given us your consent to allow any minor dependant in your care to use this website.

ARTICLE 8 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their publication on the website. If we make changes to the content of this policy, we will notify you here that it has been updated, so that you know what information we collect, how we use it, and under what circumstances, if any, we disclose it.

If our shop is acquired by or merged with another company, your information may be transferred to the new owners so that we can continue to sell products to you.

QUESTIONS AND CONTACT INFORMATION

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time. To exercise these rights, or for any questions, contact us via the contact form on our site, by email at info@moojo-cacao.be or by post at MoonLodge ASBL - Hekslaan 50, 3870 Heers (Heks), Belgium.

You also have the right to lodge a complaint with the Belgian Data Protection Authority, www.autoriteprotectiondonnees.be.