1. Purpose and scope
This Privacy Policy explains how House & Moonlight Holdings collects, uses, discloses, stores, and protects personal information when you visit this website, submit a project inquiry, communicate with us, or receive AI consulting and workflow optimization services from us. It applies to information handled through this website and in connection with our remote consulting engagements.
By using the website or providing information to us, you acknowledge the practices described in this Policy. If you provide information about another person, you represent that you have the authority to do so and that the person has received any notice required by applicable law.
2. Information we collect
Information you provide directly
We may collect your name, business email address, company name, selected service, project description, communications, meeting notes, files you choose to provide, billing details, and other information reasonably needed to evaluate or perform an engagement. We ask that you do not submit confidential credentials, government identification numbers, health information, payment-card details, or other sensitive personal information through the website inquiry form.
Information collected automatically
When you access the website, our ecommerce and hosting platform may automatically process technical information such as IP address, browser type, device type, operating system, referral URL, approximate location derived from IP address, timestamps, pages viewed, and security or diagnostic events. Cookies and similar technologies may also be used as described in our Cookie Policy.
Engagement information
During a consulting project, we may receive business process descriptions, organizational information, workflow materials, samples, internal documentation, or access information authorized by the client. We seek to limit collection to information relevant to the agreed scope. The client remains responsible for determining what information it is permitted to disclose to us.
3. How we use information
We may use personal information to:
- respond to inquiries and determine whether a requested service is suitable;
- prepare proposals, statements of work, schedules, invoices, and project records;
- deliver consulting, assessment, training, planning, documentation, and implementation support;
- communicate about meetings, deliverables, decisions, changes, and support requests;
- maintain the security, availability, performance, and integrity of the website and our systems;
- keep business, tax, accounting, dispute, and compliance records;
- enforce agreements, protect rights, prevent misuse, and respond to lawful requests; and
- improve our service descriptions, internal methods, and client experience using aggregated or de-identified observations where appropriate.
We do not use project materials to train public generative AI models. If a specific engagement would benefit from processing client-provided material with a third-party AI tool, the applicable scope, tool, access conditions, and review responsibilities should be agreed with the client before that use.
4. Legal and operational grounds
Depending on the location and circumstances, we process information because it is necessary to take steps requested before entering a contract, perform a contract, operate and secure our business, comply with legal obligations, establish or defend legal claims, or pursue legitimate business interests that are not overridden by applicable privacy rights. Where consent is legally required, it may be withdrawn prospectively.
5. How information may be disclosed
We may disclose limited information to service providers that support website hosting, ecommerce functionality, communications, scheduling, document storage, accounting, security, analytics, or project delivery. These providers receive information for a defined business purpose and are expected to handle it under applicable contractual and legal requirements.
Information may also be disclosed when reasonably necessary to comply with law, subpoena, court order, or valid governmental process; protect the safety, rights, and property of clients, the public, or our business; investigate fraud or misuse; obtain professional legal or accounting advice; or support a merger, financing, reorganization, sale, or transfer of all or part of the business. We do not sell personal information for money. We do not knowingly share personal information for cross-context behavioral advertising.
6. Third-party platforms and links
The website is operated using Shopify and may rely on other providers for infrastructure or business operations. Those providers may process technical or account information under their own terms and privacy notices. If a client asks us to evaluate or support a third-party SaaS or AI product, that product remains governed by the provider’s policies. We do not control independent third-party practices and recommend reviewing them before creating accounts or uploading business information.
7. Retention
We retain information for as long as reasonably necessary for the purpose for which it was collected, to maintain project and financial records, meet tax or legal duties, resolve disputes, enforce agreements, and protect legitimate business interests. Retention periods vary by information type and contractual requirement. When information is no longer reasonably required, we may delete, anonymize, or securely archive it subject to backup and legal-record limitations.
8. Security
We use reasonable administrative, technical, and organizational measures intended to protect information against unauthorized access, loss, alteration, or disclosure. These measures may include access controls, account authentication, limited collection, system updates, vendor review, and protected storage. No website, transmission method, or storage system can be guaranteed completely secure, and users should avoid sending sensitive information through ordinary website forms or unencrypted email.
9. Your privacy choices and rights
Subject to applicable law and verification of your request, you may have the right to request access to personal information, correction of inaccurate information, deletion, restriction, portability, or information about categories of collection and disclosure. You may also object to certain processing or withdraw consent where consent is the relevant basis. We may retain information when legally permitted or required, including for contracts, security, recordkeeping, or legal claims.
To make a request, use the contact details below and describe the request with enough information for us to identify the relevant records. We may request reasonable verification and may decline or limit a request where permitted by law. We will not discriminate against a person for exercising an applicable privacy right.
10. Children’s privacy
Our website and services are intended for businesses and adults. They are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information through this website, please contact us so that we can review and, where appropriate, delete it.
11. International access
Our business is based in the United States. If you access the website or engage us from another country, information may be transferred to and processed in the United States and other locations where service providers operate. Those locations may have different privacy rules from your home jurisdiction. Where required, appropriate safeguards will be considered for relevant transfers.
12. Policy changes
We may update this Policy to reflect changes in services, technology, legal requirements, or business practices. The revised version will be posted with a new “Last updated” date. Material changes may also be communicated by a reasonable additional method when required by law.