Privacy Policy

Full version – MOONSTONE / OSNA PARC MONCEAU

1. Data controller

The personal data collected through this site is processed by:

OSNA PARC MONCEAU
47 boulevard de Courcelles
75008 Paris, France
SIREN: 884 299 199
VAT: FR86884299199
Legal form: SASU
📧 Email: hello@moon-stone.co
📞 Phone: +33 9 78 45 53 55

MOONSTONE is a brand owned by the company OSNA PARC MONCEAU.

2. Data collected

We only collect data that is strictly necessary for running the site, managing orders, and handling customer relations.

Data collected:

• First name, last name
  
• Postal address
  
• Email address
  
• Phone number
  
• Order details
  
• Purchase history
  
• Shipping and billing addresses
  
• Browsing data (anonymized cookies)
  
• Payment-related data (not stored by MOONSTONE)
  

Payment data

Banking data is handled exclusively by secure systems:

• Stripe
  
• PayPal
  
• Payplug
  

MOONSTONE never has access to credit card numbers.

3. Purpose of processing

The data is used to:

• Process, ship, and track orders
  
• Communicate with customers
  
• Manage billing and warranties
  
• Improve the site and user experience
  
• Handle returns and refunds
  
• Prevent fraud
  
• Send transactional emails (order confirmation, shipping updates)
  
• Send marketing emails only with explicit consent
  

No data is sold or shared with third parties.

4. Data recipients

Data may only be shared with:

• Carriers
  
• Payment providers
  
• Hosting provider (OVH)
  
• Marketing tools (only with consent)
  
• Technical service providers (CMS, emailing, shipping software)
  

All service providers are bound by strict confidentiality obligations.

5. Data retention period

• Orders: 10 years (legal requirement)
  
• Customer data: duration of the business relationship + 3 years
  
• Cookies: according to settings (max 13 months)
  
• Marketing emails: until consent is withdrawn
  

6. User rights

In line with GDPR, users have the following rights:

• Right of access
  
• Right to rectification
  
• Right to erasure
  
• Right to object
  
• Right to restriction
  
• Right to data portability
  

To exercise these rights:
📧 hello@moon-stone.co

A response is guaranteed within 30 days.

7. Data security

OSNA PARC MONCEAU applies strict technical measures:

• SSL encryption
  
• OVH server protection
  
• internal access control
  
• anti-intrusion systems
  
• two-factor authentication when required
  

8. Transfers outside the EU

No data is transferred outside the European Union without GDPR-compliant safeguards (standard contractual clauses).

9. Contact

For any questions:
📧 hello@moon-stone.co