Privacy policy

Who we are

Moon6 Ltd(“Moon6”, “we”, “us”) is a managed service provider based in the United Kingdom. For the personal data described in this policy, we act as the data controller.

You can reach us about anything in this policy by emailing hello@moon6.co.uk or calling 0330 133 0060.

What we collect

When you contact us

If you complete the enquiry form or email us, we collect your name, email address, company name, the size of your team if you tell us, and whatever you write in your message. We ask for the minimum we need to reply usefully.

When you become a client

To deliver our services we hold contact details for the people we support, billing information, and technical records about the systems we manage — device names, user accounts, licences and support history. Where we handle personal data held inside your own systems, we do so as a data processor acting on your instructions under a separate agreement.

When you visit this website

This website does not use advertising cookies, tracking pixels or third-party analytics that profile you across other sites. Our hosting provider keeps standard server logs, which may include IP addresses, for security and diagnostics.

Why we use it, and our lawful basis

• To answer your enquiry — because it is in our legitimate interests to respond to someone who has contacted us.
• To provide our services — because it is necessary to perform our contract with you.
• To invoice you — to perform our contract, and to meet the legal obligation to keep accounting records.
• To keep systems secure — because it is in our legitimate interests, and yours, to detect and prevent attacks.

We do not sell your data, and we do not add enquiries to a marketing list without asking you first.

Who we share it with

We use a small number of trusted suppliers to run our business, and they may process personal data on our behalf:

• Xero — accounting and invoicing.
• Microsoft — email, file storage and collaboration.
• Our hosting and infrastructure providers — running this website and the tools we use to support you.

Each is bound by a data processing agreement. We share data with them only so far as they need it, and we never share it for their own marketing.

Where your data is held

We keep data in the UK or the European Economic Area wherever we can. Where a supplier processes data outside that area, we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

How long we keep it

• Enquiries that do not become clients — up to 24 months, then deleted.
• Client records — for the length of our relationship and 6 years afterwards, to meet HMRC and contractual requirements.
• Server logs — typically 30 days.

Keeping it safe

We apply the same controls we recommend to clients: multi-factor authentication on every account, encrypted devices, least-privilege access, managed endpoint protection and monitored backups. No system is perfect, but we take this seriously — it is our profession.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct anything inaccurate;
• ask us to delete it, where we have no continuing reason to keep it;
• ask us to restrict how we use it;
• object to processing based on our legitimate interests;
• ask us to transfer it to another provider in a portable format.

Email hello@moon6.co.uk and we will respond within one month. There is no charge.

Cookies

This website sets no cookies of its own and uses no third-party tracking. If that changes — for example if we add analytics — we will publish a cookie banner and update this policy before doing so.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We update this policy when our practices change. The date at the top of the page always shows the current version, and material changes are emailed to clients.