Legal
Privacy Policy
Last updated:
This policy explains what personal information Moonlighters (“Moonlighters”, “we”, “us”) collects through https://moonlighters.in, why we collect it, and what we do with it. We have tried to keep it short and accurate. It describes how the website works today.
If you have a question about your information, write to hello@moonlighters.in.
Information we collect
When you send an inquiry. Our inquiry form asks for:
- Required: your full name, email address, the service you are interested in, and a description of your project.
- Optional: your company name, phone number, approximate budget range, timeline, and existing website URL.
Please don’t include sensitive personal information (such as health, financial or identity documents) in the project description. We don’t need it to respond.
Technical information. When you visit the site or submit the form, our server processes some technical data needed to run the site securely: your IP address (which we store only in hashed form for rate limiting), a session cookie, and standard server log entries such as the time of a request and any errors.
We don’t use analytics, advertising cookies or tracking pixels.
How we use information
We use the information you send us to:
- respond to your inquiry;
- discuss your project and, if appropriate, prepare a quotation or proposal;
- keep a record of our communication with you.
We use technical information only to keep the site working, secure and free of spam.
We do not sell your personal information. We do not use it for unrelated marketing without your consent.
Why we are allowed to use it
We process the details in your inquiry because you chose to send them to us and asked us to respond. By submitting the form, you consent to us using that information for the purposes described in this policy.
You can withdraw your consent at any time by writing to hello@moonlighters.in. Withdrawing consent doesn’t affect anything we did before you withdrew it, and we may need to keep some records where the law requires us to.
The limited technical processing described under “Security” is necessary to protect the site and the people who use it.
Email delivery and service providers
When you submit the form, your inquiry is sent by email through an SMTP email service provider to our business inbox. That provider handles the message only to deliver it.
We also send a short confirmation email to the address you gave us, so you know your inquiry arrived.
The website runs on a hosting provider, which stores and processes data on our behalf, including its own server logs, under its own practices.
We share your information only with these providers, and only as needed to run the site and handle your inquiry, or where the law requires us to disclose it.
Storage and retention
Inquiries are kept in our email inbox. If email delivery fails, a copy may be stored temporarily on our server until it is delivered, and is then removed.
Technical records used for rate limiting and spam prevention are kept only for short periods (currently around 1 hour). Server error logs are kept for up to 90 days. Our logs do not contain the full content of your inquiry.
If we go on to work together, project correspondence and records are handled as set out in the project agreement.
Security
We take reasonable steps to protect the information you send us. These include:
- security tokens on the form to prevent cross-site request forgery;
- rate limiting and spam checks based on a keyed hash of your IP address, rather than the address itself;
- keeping inquiry content out of our server logs.
No website or email system is completely secure, so we can’t guarantee security. If you believe there is a problem, please tell us at hello@moonlighters.in.
Cookies and third-party resources
Session cookie. We set one session cookie. It is strictly necessary: it holds the security token that protects the inquiry form. It is not used to track you.
Google Fonts. The site loads web fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When your browser fetches these fonts it connects to Google’s servers, which means your IP address is visible to Google.
No analytics or advertising. We don’t currently use analytics, advertising cookies or tracking pixels. If we decide to add analytics in future, we will update this policy before we start using them.
Your rights
We aim to follow India’s Digital Personal Data Protection Act, 2023 and the rules made under it, and the Information Technology Act, 2000 where it applies. You can ask us to:
- tell you what personal information we hold about you;
- correct or update information that is wrong or incomplete;
- delete your information, where we don’t need to keep it;
- stop using your information by withdrawing your consent.
If you have a complaint about how we have handled your information, you can raise it with us as a grievance.
Send any request or grievance to hello@moonlighters.in. We may need to confirm your identity before acting on it.
If you live outside India, you may have additional rights under the laws where you live. Tell us where you are and we will consider your request in that light.
Children
Our services are intended for businesses. The website is not directed at children under 18, and we don’t knowingly collect their personal information. If you believe a child has sent us information, please contact us and we will delete it.
Changes to this policy
We will update this policy when the way the site handles information changes. The date at the top of the page shows when it was last updated.
Contact
For privacy questions, requests or grievances, write to hello@moonlighters.in.
For general inquiries, use our contact page.