Moonlight Privacy Policy

INTRODUCTION

This privacy notice provides you with details of how we collect and process your personal data. Moonlight Virtual Assistance Services (referred to as "we," "us," or "our" in this privacy notice) is the data controller and responsible for your personal data.

Our contact details are:

• Email: slay@moonlightvas.com

• Postal Address: 184 Purok Riverside, San Vicente, Santa Ignacia, Tarlac, Philippines 2303

It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information changes by emailing us at slay@moonlightvas.com

SENSITIVE DATA

We do not collect any Sensitive Data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, genetic and biometric data, or criminal convictions and offenses.

HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when legally permitted. The most common uses of your personal data are:

1. Contract Performance: Where we need to perform the contract between us.

2. Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

3. Legal Obligations: Where we need to comply with a legal or regulatory obligation.

Purposes for Processing Your Personal Data

The following table describes the ways we intend to use your personal data and the legal grounds on which we will process such data. We may process your personal data for more than one lawful ground, depending on the specific purpose for which we are using your data.

• To register you as a new customer:

  • Type of Data: Identity, Contact

  • Lawful Basis: Performance of a contract with you

• To process and deliver your order, including:

  • Managing payments, fees, and charges. 

  • Collecting and recovering money owed to us

  • Type of Data: Identity, Contact, Financial, Transaction, Marketing and Communications

  • Lawful Basis: Performance of a contract with you. Necessary for our legitimate interests to recover debts owed to us.

• To manage our relationship with you, including:

  • Notifying you about changes to our terms or privacy policy

  • Asking you to leave a review or take a survey

  • Type of Data: Identity, Contact, Profile, Marketing and Communications

  • Lawful Basis: Performance of a contract with you. Necessary to comply with a legal obligation. Necessary for our legitimate interests to keep our records updated and to study how customers use our products/services

• To enable you to partake in a prize draw, competition, or complete a survey:

  • Type of Data: Identity, Contact, Profile, Usage, Marketing and Communications

  • Lawful Basis: Performance of a contract with you. Necessary for our legitimate interests to study how customers use our products/services, to develop them, and grow our business

• To administer and protect our business and our site, including:

  • Troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data

  • Type of Data: Identity, Contact, Technical

  • Lawful Basis: Necessary for our legitimate interests for running our business, provision of administration and IT services, network security, to prevent fraud, and in the context of a business reorganization or group restructuring exercise. Necessary to comply with a legal obligation.

• To deliver relevant content and advertisements to you and measure and understand the effectiveness of our advertising:

  • Type of Data: Identity, Contact, Profile, Usage, Marketing and Communications, Technical

  • Lawful Basis: Necessary for our legitimate interests to study how customers use our products/services, to develop them, to grow our business, and to inform our marketing strategy

• To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences:

  • Type of Data: Technical, Usage

  • Lawful Basis: Necessary for our legitimate interests to define types of customers for our products and services, to keep our site updated and relevant, to develop our business, and to inform our marketing strategy

• To make suggestions and recommendations to you about goods or services that may be of interest to you:

  • Type of Data: Identity, Contact, Technical, Usage, Profile

  • Lawful Basis: Necessary for our legitimate interests to develop our products/services and grow our business

MARKETING COMMUNICATIONS

You will receive marketing communications from us if you have:

• Requested information from us or purchased goods or services from us; or

• Provided us with your details and opted-in to receive marketing communications.

You have the right to withdraw consent to marketing at any time by emailing us at slay@moonlightvas.com. Where you opt-out of receiving our marketing communications, this will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, or other transactions.

DISCLOSURES OF YOUR PERSONAL DATA

We may share your personal data with the following parties:

• Service providers who provide IT and system administration services.

• Professional advisers including lawyers, bankers, auditors, and insurers.

• Third parties to whom we sell, transfer, or merge parts of our business or assets.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

DATA SECURITY

We have implemented security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is limited to employees, agents, contractors, and other third parties who have a business need to know. They are required to process your personal data only on our instructions and are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

DATA RETENTION

We will retain your personal data only as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider its amount, nature, sensitivity, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and any applicable legal requirements.

YOUR LEGAL RIGHTS

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including:

• Request access to your personal data.

• Request correction of your personal data.

• Request erasure of your personal data.

• Object to processing of your personal data.

• Request restriction of processing your personal data.

• Request transfer of your personal data.

• Right to withdraw consent.

If you wish to exercise any of these rights, please email us at slay@moonlightvas.com. You will not have to pay a fee to access your personal data, but we may charge a reasonable fee if your request is unfounded, repetitive, or excessive.

We may need to request specific information from you to confirm your identity and ensure your right to access your personal data. We aim to respond to all legitimate requests within one month.