Privacy policy

Privacy Policy

Effective date: 16 August 2026

At Rasmoon, protecting your family’s privacy is part of creating a safe and personal experience. This Privacy Policy explains what personal data we collect, why we use it, who may receive it, how long we keep it, and the rights available to you.

This policy applies when you visit rasmoon.com, place an order, create or preview a personalized product, contact us, or otherwise use our store and related services (the “Services”).

Privacy at a Glance

Rasmoon is responsible for the personal data collected through our store.
Orders must be placed by an adult. A child should not upload information or use the store independently.
A child’s name, photo, and personalization details are used only to create and fulfil the requested personalized product and provide related customer support.
We do not use a child’s photo or name for advertising, facial recognition, or unrelated purposes.
Child photos and personalization production files are deleted within 90 days after order fulfilment, unless they must be retained temporarily to resolve a support request, dispute, or legal obligation.
You may contact us at support@rasmoon.com to exercise your privacy rights.

1. Who Is Responsible for Your Data?

The data controller is:

Rasmoon

Email: support@rasmoon.com

If Rasmoon is operated under a different registered legal or business name, that registered name should be stated here before this policy is published.

2. Personal Data We Collect

Depending on how you use the Services, we may collect the following categories of personal data.

Contact and delivery data

Your name, email address, telephone number, billing address, shipping address, and delivery instructions.

Order and transaction data

Products viewed or purchased, order number, personalization selections, order status, returns, refunds, customer-service history, and payment confirmation.

Payment card information is processed by Shopify and/or the payment provider selected at checkout. Rasmoon generally does not receive or store your complete payment card number.

Account data

Child personalization data

Information intentionally provided by a parent, legal guardian, or authorized adult to create a personalized product, such as:

The child’s first name or nickname.
A photograph uploaded for personalization.
Selected language and book design.
Other personalization instructions you choose to provide.

Please provide only the information needed to create the product. Do not upload identification documents, medical information, school information, a home address, or other unnecessary sensitive information about a child.

Device, usage, and cookie data

IP address, browser type, device type, cookie identifiers, general location derived from an IP address, pages visited, interactions with the store, and security or diagnostic information.

Communications

Information contained in emails, forms, reviews, or other messages you send to us, including files or photographs supplied to resolve an order issue.

3. How Photo Preview and Personalization Work

Where a photo-preview feature is expressly described as remaining on your device, the preview is processed locally in your browser and the photo is not uploaded to Rasmoon at that stage.

If you intentionally upload a photo or submit an order requiring personalization, the necessary photo and personalization data are transmitted securely so the product can be created, checked, printed, delivered, and supported.

Image-processing or AI-assisted tools may analyze visible features in the uploaded photo solely to generate the requested personalized artwork. This processing is not used to identify the child, conduct facial recognition, build an advertising profile, or make decisions that have legal or similarly significant effects.

4. Adult Authorization for a Child’s Data

The Services are intended for adults and are not designed for children to use independently.

By submitting a child’s name, photograph, or other information, you confirm that you are at least 18 years old and that you are the child’s parent or legal guardian, or that you have the necessary permission and legal authority to provide the information and request the personalized product.

We may ask you to confirm this authority when reasonably necessary. If you believe that a child’s data was submitted without proper authorization, contact support@rasmoon.com so we can investigate and delete it where appropriate.

5. Why We Use Personal Data and Our Legal Bases

We process personal data only when we have a valid reason under applicable law.

To provide and fulfil your order

We use contact, delivery, order, and transaction data to accept payment, create your product, deliver it, send order updates, and handle returns or refunds.

Legal basis: performance of a contract or steps requested before entering into a contract.

To create a personalized children’s product

We use the child’s photo, name, language, and chosen personalization details only to produce the product requested by the authorized adult.

Legal basis: the consent provided by the parent, legal guardian, or authorized adult, and our legitimate interest in fulfilling the requested personalization service where permitted by law.

To provide customer support

We use order information and communications to answer questions, correct production issues, process claims, and maintain an appropriate record of our response.

Legal basis: performance of a contract and our legitimate interest in providing effective customer service and resolving disputes.

To protect the store and prevent fraud

We use limited transaction, device, and technical data to secure accounts, detect fraud, prevent misuse, and protect customers and our business.

Legal basis: our legitimate interests in operating a secure and reliable store and, where applicable, compliance with legal obligations.

To comply with the law

We may use and retain data to meet accounting, tax, consumer-protection, legal, and regulatory requirements or respond to valid legal requests.

Legal basis: compliance with a legal obligation.

Marketing and non-essential cookies

With your consent, we may send news, offers, or product updates and use non-essential cookies or similar technologies for analytics and personalized advertising. You may withdraw consent at any time through the unsubscribe link, cookie settings, or by contacting us.

Legal basis: consent. Withdrawing consent does not affect processing that was lawful before withdrawal.

6. When We Share Personal Data

We may share only the data necessary for the relevant service with trusted providers acting on our behalf, including:

Shopify, which hosts and supports our online store.
Payment processors and fraud-prevention providers.
Printing, personalization, and fulfilment providers.
Shipping and delivery companies.
Secure cloud hosting, storage, and technical-support providers.
Image-processing providers used to create the ordered personalized artwork.
Analytics, advertising, or email providers where you have provided any consent required by law.
Professional advisers, insurers, authorities, or courts where disclosure is legally required or necessary to establish, exercise, or defend legal claims.

These providers may use personal data only for the services they perform for us, subject to their contractual and legal obligations. We do not sell children’s names, photographs, or personalization data.

We may also disclose relevant data in connection with a merger, acquisition, restructuring, or sale of all or part of our business, subject to appropriate confidentiality and data-protection safeguards.

7. Shopify

Our store is powered by Shopify. Data submitted through the store is processed by Shopify to provide ecommerce, checkout, security, and related services. Depending on the Shopify service involved, Shopify may act as our service provider or as an independent controller for certain processing.

You can learn more in the Shopify Consumer Privacy Policy and manage certain Shopify privacy choices through the Shopify Privacy Portal.

8. Cookies and Similar Technologies

We use essential cookies to operate the store, remember your cart, maintain security, and complete checkout. With your consent where required, we may also use optional cookies for preferences, analytics, performance measurement, and advertising.

You can accept, reject, or change optional cookie choices through the cookie settings displayed on our website. Blocking essential cookies in your browser may prevent parts of the store or checkout from working correctly.

For more detailed information about the cookies currently used by the store, please review our Cookie Policy or cookie-settings panel.

9. How Long We Keep Personal Data

We retain personal data only for as long as needed for the purpose for which it was collected, including:

Child photos and personalization production files: up to 90 days after order fulfilment, then deleted or irreversibly anonymized, unless temporarily needed to resolve an active support request, dispute, or legal requirement.
Local, non-uploaded previews: remain on your device and are removed according to your browser or device settings.
Orders, invoices, payments, and tax records: for the period required by Austrian accounting, tax, and commercial laws.
Customer-support communications: for as long as reasonably necessary to resolve the request and protect legal rights.
Account data: while the account remains active and for a limited period afterward where needed for security, legal compliance, or dispute resolution.
Marketing data: until you unsubscribe or withdraw consent, subject to a limited suppression record used to respect your choice.
Cookie and analytics data: for the period described in the relevant cookie tool or provider settings.

When data is no longer required, we delete or anonymize it. Limited copies may remain temporarily in protected backups until they are securely overwritten.

10. International Data Transfers

Some providers, including Shopify and other technology partners, may process data outside Austria or the European Economic Area.

Where required, we rely on a European Commission adequacy decision, Standard Contractual Clauses, or another legally recognized safeguard. You may contact us for more information about the safeguards relevant to your data.

11. Security

We use reasonable technical and organizational measures designed to protect personal data, including encrypted connections, access restrictions, service-provider controls, and data minimization.

No online transmission or storage system is completely secure. Please do not send unnecessary sensitive information through email or customer-support forms.

12. Your Privacy Rights

Depending on your location and subject to legal conditions, you may have the right to:

Request access to the personal data we hold about you or your child.
Correct inaccurate or incomplete data.
Request deletion of data.
Restrict certain processing.
Object to processing based on legitimate interests or direct marketing.
Receive certain data in a portable format.
Withdraw consent at any time.
Lodge a complaint with a data-protection authority.

To make a request, email support@rasmoon.com and provide enough information for us to identify the relevant account or order. We may request reasonable information to verify your identity and authority. We will respond within the period required by applicable law, normally within one month under the GDPR.

You will not be treated unfairly for exercising your privacy rights.

13. Marketing Choices

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link in the message or contacting us. Even after unsubscribing from marketing, you may still receive necessary service messages about an account, purchase, delivery, safety notice, or policy update.

14. Complaints

Please contact us first if you have a concern so we can try to resolve it.

You also have the right to contact your local data-protection authority. In Austria, the supervisory authority is:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: dsb.gv.at

15. Third-Party Websites

Our store may link to websites or services operated by third parties. Their privacy practices are governed by their own policies. We are not responsible for third-party websites that we do not control.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes to our Services, technology, providers, or legal obligations. The revised version will be published on this page with a new effective date. Where required by law, we will provide additional notice or request renewed consent.

17. Contact Us

For questions, privacy requests, or concerns about a child’s data, contact:

Rasmoon Privacy Team
Email: support@rasmoon.com