Privacy Policy

Last updated: 29 July 2026

1. Data controller

The controller responsible for processing your personal data is:

• moonswich
• Email: help@moonswich.com

2. What data we collect and why

2.1 Purchase and account data

When you buy the Product we collect your name, email address, billing country and VAT details. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations such as tax record-keeping (Art. 6(1)(c) GDPR). Payment card data is processed directly by Zenthoryx and never reaches our servers.

2.2 Member area usage

We log sign-ins and course progress to provide the service and support. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.3 CV and profile reviews (Accelerator / Executive)

If you submit your CV or LinkedIn profile for review, we process the data it contains solely to provide the review. We delete submitted documents within 90 days of delivering the review. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.4 Marketing emails

With your consent, we send product updates and career content. You can unsubscribe at any time via the link in every email. Legal basis: consent (Art. 6(1)(a) GDPR).

2.5 Website analytics and advertising cookies

With your consent given via the cookie banner, we use: Google Analytics for aggregate usage statistics and the LinkedIn Insight Tag for measuring advertising conversions and building ad audiences. These tools set cookies and may transfer data to third countries. Legal basis: consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by clearing cookies in your browser or by emailing help@moonswich.com.

3. Who we share data with

• Zenthoryx — payment processing
• Hetzner — website and member-area hosting
• Brevo — transactional and marketing email
• Circle — private community (Accelerator/Executive)
• LinkedIn Ireland Unlimited Company — advertising measurement (with consent)

All processors are bound by data-processing agreements under Art. 28 GDPR. We never sell your personal data.

4. International transfers

Some providers process data outside the EEA. Where this happens, transfers are protected by adequacy decisions or EU Standard Contractual Clauses. Details are available on request.

5. Retention

• Account and purchase data: for the duration of your access plus statutory retention periods (6 years for invoicing data in the United Kingdom).
• Submitted CVs: deleted within 90 days of review delivery.
• Marketing data: until you unsubscribe.
• Analytics data: 24 months.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time with future effect. To exercise any right, email help@moonswich.com. You also have the right to lodge a complaint with your local supervisory authority.

7. Security

We use encryption in transit (TLS), access controls, and reputable EU-compliant infrastructure providers to protect your data.

8. Changes

We will post any changes to this policy on this page and, for material changes, notify you by email.