PRIVACY POLICY
Last updated: April 2026
Moonbeam Learning Studio LLC (“we,” “our,” or “us”) is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, the legal bases for processing under applicable data protection laws (including the EU General Data Protection Regulation “GDPR” and the U.S. Children’s Online Privacy Protection Act “COPPA”), and the rights available to you.
Our website address is: https://moonbeamlearningstudio.com. Moonbeam Learning Studio LLC is the data controller.
Children’s Privacy & COPPA Compliance
While Moonbeam Learning Studio LLC creates published work (such as books) and online educational content (on YouTube) intended for children and families, our website, newsletter, and social media accounts are intended for use by adults, including parents, educators, and caregivers.
We do not include “Calls to Action” in our YouTube videos that encourage children to provide personal information. Any links provided in video descriptions are intended for parents and educators to access supplemental resources or to purchase books.
No Collection of Children’s Data
We do not knowingly collect, request, or solicit personal information from children under the age of 13. Our newsletter sign-up and account registration processes are designed for adult users.
Mixed Audience & Data Minimization
In accordance with COPPA’s 2026 standards for mixed-audience platforms:
- We do not require any user to disclose more information than is reasonably necessary to participate in an activity (such as receiving a newsletter).
- If we learn that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will delete that information immediately from our servers.
- YouTube Content: Our videos hosted on YouTube are designated as “Made for Kids.” Consequently, YouTube limits data collection and personalized advertising on those specific videos. We do not receive personal data from YouTube regarding the children who view our content there.
Parental Rights
Parents or legal guardians have the right to:
- Review any personal information we may have accidentally collected from their child.
- Request the deletion of such information.
- Refuse permit further collection or use of the child’s information.
To exercise these rights, please contact us at hello@moonbeamlearningstudio.com.
Information We Collect
1. Newsletter subscriptions
If you subscribe to our newsletter, we collect the personal information you provide, typically your name and email address. By subscribing, you represent that you are at least 18 years of age or the age of majority in your jurisdiction. This information is stored securely through our email service provider and/or WordPress until you wish to unsubscribe or have your information purged.
Lawful basis: Consent (GDPR Art. 6(1)(a)).
2. WordPress accounts
If you create an account on our website:
- WordPress stores the personal information you provide in your user profile.
- You may view, edit, or delete your personal information at any time (except your username).
- Website administrators can also view and edit this information.
Lawful basis: Legitimate interest in operating and securing the website (GDPR Art. 6(1)(f)).
3. Cookies
By continuing to use our website, you consent to the use of cookies as described in this policy, unless you disable them through your browser settings.
Lawful basis: Legitimate interest in providing website functionality (GDPR Art. 6(1)(f)).
3.1 What are cookies
Cookies are small pieces of data, stored in text files, that are stored on your computer or other device when websites are loaded in a browser. They are widely used to “remember” you and your preferences, either for a single visit (through a “session cookie”) or for multiple repeat visits (using a “persistent cookie”). They ensure a consistent and efficient experience for visitors, and perform essential functions such as allowing users to register and remain logged in.
Cookies may be set by:
- First‑party cookies: set by our website
- Third‑party cookies: set by external services we use
Cookies may be:
- Session cookies (deleted when you close your browser)
- Persistent cookies (remain on your device until they expire or are deleted)
Websites and HTML emails may also contain tracking technologies such as “web beacons” or “pixels.” These may still load even if cookies are disabled, but their functionality will be restricted.
3.2 Cookies We Use
3.2.1 Essential and functional cookies (WordPress)
These cookies are necessary for the website to function and cannot be disabled through our site.
They include:
- A temporary cookie is set on the login page to determine if your browser accepts cookies.
- Login cookies store your login status and screen display preferences.
- “Remember Me” extends your login for two weeks.
- Cookies do not contain sensitive personal data.
Legal basis: Legitimate interest in providing website functionality (GDPR Art. 6(1)(f)).
3.2.2 Analytics cookies
We use analytics tools to understand how visitors use our website and to improve performance. These cookies may collect IP addresses, browser information, pages viewed, time spent on pages, and general geographic region.
Analytics services include:
- Google Analytics: Data retained for 14–26 months depending on configuration.
- WordPress/Jetpack Analytics: Basic visitor data stored for 28–30 days; unique user ID cookies up to 1 year.
- Amazon KDP / IngramSpark: Aggregated, non-personal reporting only.
- Etsy Shop Analytics: Etsy sets its own cookies; we receive only aggregated, non-personal data.
- YouTube Analytics: For “Made for Kids” videos, YouTube limits data collection; we receive only aggregated performance data.
Legal basis: Legitimate interest (GDPR Art. 6(1)(f)); consent where required (GDPR Art. 6(1)(a)).
3.2.3 Advertising and social media cookies
We use advertising technologies to reach parents, educators, and caregivers. We do not use these technologies to target children under 13.
- Third-Party Pixels & Tags:
- Meta (Facebook/Instagram) Pixel
- TikTok Pixel
- Google Ads Remarketing Tags
- Etsy Offsite Ads:
Etsy may use cookies to track ad conversions. We do not control these cookies and do not receive individual browsing history.
- YouTube Advertising:
- We use YouTube’s “Privacy-Enhanced Mode” for embedded videos.
- For “Made for Kids” videos, YouTube disables personalized ads.
- Any ads shown are contextual and managed by YouTube.
If advertising is enabled on our website, third‑party ad providers may use cookies to deliver personalized or contextual ads. We do not receive personally identifiable information unless you explicitly provide it.
Legal basis: Consent where required (GDPR Art. 6(1)(a)); otherwise legitimate interest (GDPR Art. 6(1)(f)).
3.2.4 Embedded content cookies
Pages and posts on our site may include embedded content (e.g., videos, songs, images, articles). Embedded content behaves as if you visited the external website directly.
These third‑party sites may:
- Set their own cookies
- Track your interaction
- Associate activity with your account
We do not control these cookies.
We use YouTube’s Privacy-Enhanced Mode for embedded videos. This prevents tracking cookies unless you play the video.
3.3 How to manage cookies
You may control or disable cookies through your browser settings. Most browsers allow you to:
- Block cookies
- Delete existing cookies
- Receive notifications before cookies are stored
Disabling essential cookies may affect website functionality. For third‑party advertising cookies, you may manage preferences directly through the relevant platform.
4. Social media interactions
When you like, comment on, or share our posts on social media platforms, that activity is governed by the privacy policies of those platforms. We do not collect or store personal information from your social media interactions unless you voluntarily provide it (e.g., via direct message or a form).
5. Etsy Shop Orders
We use this information solely to fulfill your order, settle disputes, provide customer support, and for tax/legal record-keeping. We do not add Etsy customers to our marketing newsletter unless they separately opt-in via our website.
This data is processed under the legal basis of Contractual Necessity and is retained as long as necessary to comply with tax and legal obligations (typically 7 years for U.S. tax purposes).
6. Direct Purchases (PayPal or In‑Person Sales)
If you purchase a product directly from us (either through a PayPal payment link, PayPal QR code, or an in‑person cash transaction), we collect only the information necessary to process your order.
- For PayPal transactions: PayPal may provide us with your name, email address, shipping address (if applicable), and payment confirmation. We do not receive or store your full payment card details. All payment information is processed securely by PayPal in accordance with their privacy policy.
- For in‑person cash sales: We do not collect any personal information unless you voluntarily provide it (for example, to receive a digital receipt or to join our newsletter).
We use this information solely to fulfill your order, provide customer support, and maintain tax and legal records. We do not add direct‑purchase customers to our marketing newsletter unless they separately opt in.
How We Use Your Information
We use your information only to:
- Send newsletters and updates you have opted into.
- Maintain website functionality and security.
- Understand how visitors use our site.
- Improve our content, products, and marketing.
- Deliver relevant advertising on social platforms to adult audiences.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Read more on WordPress’s privacy policy here.
Third‑Party service providers
We may share your data with trusted third‑party processors, including:
- PayPal (Payment Processing)
- Email service providers
- WordPress and related plugins
- Analytics providers
- Advertising platforms
These providers process data only as necessary to perform services on our behalf and are bound by confidentiality and data protection obligations.
We use PayPal to securely process direct payments. When you complete a purchase using PayPal, PayPal processes your payment information and may share limited data with us such as your name, email address, and shipping details. We do not receive or store your full payment card information. PayPal acts as an independent data controller for the financial information it processes. You can review PayPal’s privacy practices at https://www.paypal.com/privacy.
Data retention & security
In compliance with 2026 requirements:
- Retention: We retain personal data only for as long as necessary for the purposes described in this policy. We do not retain personal information indefinitely. Data is deleted when the purpose for collection is exhausted (e.g., when you unsubscribe) or upon a verified deletion request. We perform a semi-annual audit to purge inactive account data that is no longer necessary for our operations.
- Direct purchase records (PayPal or in‑person sales): Retained for tax and accounting purposes for up to 7 years, as required by U.S. law.
- Newsletter data: Retained until you unsubscribe.
- WordPress account data: Retained until you delete your account. Click to learn more about how WordPress uses cookies and handles privacy.
- Analytics data: Retained according to the policies of the analytics provider.
- Administrative or legal data: Retained as required by law.
- Security: We take reasonable measures to protect your information from unauthorized access, alteration, or disclosure. However, no method of transmission over the internet is completely secure.
Lawful bases for processing (GDPR)
We process personal data under the following lawful bases:
- Consent: For newsletter subscriptions and certain advertising/analytics tools.
- Legitimate Interests: For website functionality, security, analytics, and operational needs.
- Legal Obligations: When required to comply with applicable laws.
- Contractual Necessity: When you purchase a product directly from us, we process your information as needed to complete the transaction and provide the purchased item.
Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
International Data Transfers
As a U.S.-based business, your data may be transferred to the United States, which may not provide the same level of data protection as the EEA. By interacting with our website or providing your information, you acknowledge that your data may be processed outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) provided by third‑party processors.
Your Rights (GDPR & US State Laws)
If you are located in the European Economic Area (EEA), you have the following rights:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time
- Right to lodge a complaint with your local data protection authority
- You also have the right not to be subject to automated decision‑making, including profiling.
If you have made a direct purchase from us, you may request a copy of the personal information associated with that transaction or request deletion of non‑financial data (we may retain certain information as required for tax or legal compliance).
If you have a WordPress account or have subscribed to our newsletter, you may request:
- An exported file of the personal data we hold about you
- Deletion of your personal information (this does not include data we are required to keep for administrative, legal, or security purposes).
You may contact us at the email below for all data protection inquiries: hello@moonbeamlearningstudio.com
Under various US State Privacy Laws and COPPA, parents and users also have the right to opt-out of the “sale” or “sharing” of personal information. As noted above, we do not sell your data.
Contact Us
For all data protection inquiries, including those related to GDPR or COPPA, please contact hello@moonbeamlearningstudio.com
