Privacy policy

Last updated: 03 March 2026

Moanspeak (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit https://moanspeak.com, create an account, place an order, subscribe to marketing communications, or otherwise interact with us.

1. Data Controller

Moanspeak is operated by Maksym Olenych, sole proprietor, Portugal.

Production / Warehouse:
E.N. 109, Araujos, Warehouse 14
3080-436 Figueira da Foz
Coimbra, Portugal

VAT ID: PT318143925
Email: my@moanspeak.com
Phone: +351 937 756 889

For the purposes of Regulation (EU) 2016/679 (“GDPR”), Moanspeak acts as the Data Controller.

2. How We Collect Personal Data

We collect personal data in the following ways:

a) Information you provide directly

When placing an order
When creating or accessing an account
When subscribing to email or SMS marketing
When contacting customer support
When submitting reviews or feedback

b) Information collected automatically

IP address
Device and browser information
Pages visited
Cookie identifiers (subject to your cookie preferences)

Please see our Cookie Policy for details.

c) Information from third parties

We may receive limited information from:

Payment providers (transaction confirmation)
Shipping providers (delivery updates)
Fraud prevention services
Marketing service providers (e.g., Klaviyo)

3. Categories of Personal Data

We may process:

Name(s) and surname
Billing and shipping address
Email address
Phone number
Order details and transaction records
Account login information
Marketing preferences and consent records
Technical and usage data

We do not intentionally collect special category data under Article 9 GDPR.

4. Legal Bases for Processing (Art. 6 GDPR)

We process personal data based on:

Performance of a contract – to process orders, provide account access, customer support
Legal obligation – tax, accounting, consumer protection laws
Legitimate interests – fraud prevention, website security, business operations
Consent – email/SMS marketing and non-essential cookies. You may withdraw consent at any time.

5. Marketing Communications (Email & SMS)

We use Klaviyo to manage email and SMS marketing communications.

Marketing emails and SMS are sent only where legally permitted and, where required, based on your consent.
You can unsubscribe at any time via the unsubscribe link in emails or by contacting us at: my@moanspeak.com or other means provided.
Engagement metrics (such as opens or clicks) may be recorded where legally permitted.

Transactional emails (order confirmations, shipping updates, safety notices) are not marketing and are sent as part of contract performance.

6. Cookies and Tracking Technologies

We use essential and non-essential cookies as described in our Cookie Policy.

Non-essential cookies (analytics, personalization, marketing) are used only where legally permitted and, where required, only after consent.

You may update your cookie preferences at any time via “Cookie settings” in the footer of our website.

7. Sharing of Personal Data

We may share personal data with:

Shopify (e-commerce platform infrastructure)
Payment processors
Shipping and logistics providers
Klaviyo (email/SMS marketing platform)
IT, hosting, and security providers
Accounting and professional advisors

We do not sell personal data.

Personal data is shared only as necessary for the purposes described and in accordance with applicable law.

8. International Data Transfers

Because we operate internationally and use global service providers, personal data may be processed outside the European Economic Area (EEA).

Where required, such transfers are safeguarded using appropriate mechanisms, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Additional technical and organizational safeguards

9. Data Retention

We retain personal data only as long as necessary:

Order and accounting records: typically 10 years (Portuguese tax law)
Account data: while account remains active
Marketing data: until consent is withdrawn
Customer service records: up to 3 years, unless a longer retention period is necessary to resolve a dispute, enforce our agreements, comply with legal obligations, or protect our legal rights.
Technical logs: typically retained for 12–24 months, unless a longer retention period is required for security investigations, fraud prevention, or compliance with legal obligations.

After retention periods expire, data is deleted or anonymized unless legally required to retain it.

10. Data Security

We implement appropriate technical and organizational measures, including:

SSL/TLS encryption
Restricted access controls
Secure hosting infrastructure
Fraud monitoring mechanisms

While we take appropriate security measures, no system can guarantee absolute security.

11. Your Rights Under GDPR

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion (where applicable)
Restrict processing
Object to processing based on legitimate interests
Data portability
Withdraw consent
Lodge a complaint with a supervisory authority

To exercise your rights, contact: my@moanspeak.com

We may request reasonable information to verify your identity before responding.

Supervisory Authority in Portugal:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1º
1200-651 Lisbon
T (+351) 213 928 400
F (+351) 213 976 832
geral@cnpd.pt

12. Business Transfers

If Moanspeak undergoes a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that transaction, subject to applicable law.

13. Age Restriction

Our website and products are intended for adults (18+).
We do not knowingly collect personal data from minors.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with an updated “Last updated” date.