Privacy policy

1. Introduction

This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit or make a purchase from our website (the "Site"), or otherwise interact with us.

We are committed to protecting your privacy and handling your personal information in an open and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Site or services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Identity of the Business

Business name: KIGstart / MOON Brands Trading name: KIGstart / Celluxa Business address: Kernkade 2, 3542 CH, Utrecht, Netherlands Customer service email: service@celluxa.com

3. What Personal Information We Collect

We may collect the following categories of personal information:

a. Information you provide to us

Full name Billing and shipping address Email address Phone number Payment information (processed securely via third-party payment providers) Order history Customer service communications Account information (if applicable)

b. Information collected automatically

When you visit our Site, we may automatically collect:

IP address Browser type and version Device information Operating system Time zone Pages visited and browsing behaviour Referral source Cookies and similar tracking technologies

c. Information from third parties

We may receive information from:

Payment providers Shipping and logistics partners Marketing and analytics platforms Fraud prevention services

4. How We Use Your Personal Information

We use your personal information to:

  • Process and fulfil orders
  • Deliver products to you
  • Communicate with you regarding your order
  • Provide customer support
  • Process payments and prevent fraud
  • Improve and optimise our Site
  • Analyse usage and performance
  • Comply with legal obligations
  • Send marketing communications (where consent is given or permitted by law)

5. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases for processing your personal data:

  • Contract: Processing necessary for the performance of a contract with you (e.g. processing your order).
  • Legitimate interests: Processing necessary for our legitimate interests, such as fraud prevention, improving our services and marketing (where your rights do not override these interests).
  • Consent: Where you have given explicit consent for marketing communications.
  • Legal obligation: Processing necessary to comply with legal requirements.

6. Marketing Communications

We may send you marketing communications via email or other channels if:

  • You have given explicit consent, or
  • You have purchased from us and have not opted out (in line with the Privacy and Electronic Communications Regulations 2003)

You can opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in our emails, or
  • Contacting us using the details above

7. Cookies and Tracking Technologies

We use cookies, pixels and similar technologies to:

  • Enable core website functionality
  • Remember preferences
  • Analyse traffic and performance
  • Deliver relevant advertising

You can manage cookie preferences via your browser settings. Disabling cookies may affect Site functionality.

8. Disclosure of Personal Information

We may disclose your personal information to:

  • Payment service providers
  • Shipping and logistics partners
  • IT service providers
  • Analytics and marketing partners
  • Fraud prevention services
  • Legal, regulatory or law enforcement authorities where required by law

We do not sell your personal information.

9. International Data Transfers

Your personal information may be transferred to and processed in countries outside the United Kingdom, including but not limited to:

  • The European Union
  • The United States
  • Canada

These transfers occur because our service providers (such as Shopify) operate globally.

We ensure that appropriate safeguards are in place for international transfers of personal data, such as Standard Contractual Clauses or transfers to countries with adequacy decisions, in accordance with the UK GDPR.

10. Data Security

We take reasonable technical and organisational measures to protect your personal information against:

  • Loss
  • Misuse
  • Unauthorised access
  • Disclosure
  • Alteration or destruction

Payment information is processed securely by PCI-DSS compliant third-party payment providers. We do not store full credit card details.

11. Data Retention

We retain personal information only for as long as necessary to:

  • Fulfil the purposes outlined in this Privacy Policy
  • Comply with legal, tax and accounting obligations
  • Resolve disputes and enforce agreements

When no longer required, personal information is securely deleted or anonymised.

12. Your Rights

Under the UK GDPR, you have the right to:

  • Request access to your personal information
  • Request correction of inaccurate, incomplete or outdated information
  • Request deletion of your personal information
  • Object to or restrict certain processing of your data
  • Request data portability
  • Withdraw consent at any time (where processing is based on consent)

Requests can be made by contacting us using the details above. We may need to verify your identity before responding. We will respond to your request within one month.

13. Complaints

If you believe we have breached your privacy rights, you may contact us directly so we can attempt to resolve the issue.

If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

14. Children's Privacy

Our Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

If you believe a child has provided us with personal information, please contact us so we can remove it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, legal requirements or business operations.

The updated version will be posted on this page with a revised "Last updated" date.

16. Contact Us

For questions about this Privacy Policy or our privacy practices, please contact us at:

Customer service email: service@celluxa.com Business address: Kernkade 2, 3542 CH, Utrecht, Netherlands