Privacy Policy

Effective Date: July 1, 2026

LeMoon Zest (“we,” “our,” or “us”) is a Bay Area-based allergen-savvy patisserie operating at lemoonzest.com. We are committed to protecting your personal information and being transparent about how we collect and use it. This Privacy Policy explains our data practices and your rights under applicable law, including the California Consumer Privacy Act (CCPA).

1. Information We Collect

a. Information You Provide

When you place an order, submit a custom order request, contact us, or subscribe to our email list, we may collect:

• Name
• Email address
• Phone number
• Delivery address
• Order details and dietary preferences
• Payment information (processed securely by our payment providers; see Section 4)

b. Information Collected Automatically

When you visit our website, certain data is collected automatically through cookies and similar technologies:

• Browser type, device type, and operating system
• Pages visited, time on site, and referring URL
• IP address (anonymized where possible)

2. Cookies and Session Identifiers

Necessary Cookies (Always Active)

These cookies are required for the website to function and cannot be switched off:

• WordPress session cookies: keep you logged in to your account during a browsing session
• WooCommerce cart cookies (e.g., woocommerce_cart_hash, wp_woocommerce_session_*): remember the contents of your shopping cart
• hmt_id (api.hcaptcha.com, 1 month): set by hCaptcha to prevent spam and bot submissions on our contact and order forms
• __cflb (api.hcaptcha.com, 1 hour): set by Cloudflare for load balancing on hCaptcha’s servers; contains no personal information

Analytics Cookies (Require Consent)

We use Google Analytics 4 (GA4), provided by Google LLC, to understand how visitors use our site. GA4 sets the following cookies:

• _ga: distinguishes unique users (expires after 2 years)
• _gid: distinguishes unique users (expires after 24 hours)

GA4 collects anonymized data about site traffic, pages viewed, and general user behavior. Google may process this data on servers outside California. You can opt out of GA4 tracking at any time using the cookie consent tool on our site, or by installing the Google Analytics Opt-out Browser Add-on.

Functional Cookies

• OneTap accessibility widget: uses a cookie to remember any accessibility preferences you select (e.g., font size, contrast settings). This data is stored locally and is not used for marketing.
• NID (google.com, 6 months): set by Google as part of embedded Google services such as spam protection. This cookie is not used for advertising on our site.

Advertisement Cookies (Third-Party Payment Processors)

The following cookie is set by PayPal as part of their payment processing infrastructure. We do not control this cookie and it is not used by LeMoon Zest for advertising purposes:

• c (stats.paypal.com, 20 years): set by PayPal via the Rubicon Project for user identification across ad services. If you wish to avoid this cookie, you may choose to pay by card via Stripe instead.

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Respond to your inquiries and custom order requests
• Send order confirmations and shipping updates
• Send promotional emails if you have subscribed (you may unsubscribe at any time)
• Improve our website and understand how visitors use it (via GA4)
• Comply with legal obligations

4. Third-Party Service Providers

We work with the following third-party companies to operate our website and process transactions. These companies act as our service providers and are not permitted to use your data for their own purposes independent of our instructions:

Payment Processing

• Stripe: processes credit/debit card payments. We never store your full card number. Stripe’s privacy policy
• PayPal: processes PayPal-based payments. PayPal may set cookies during checkout, including cookies from third-party services within PayPal’s own infrastructure (see Section 2). PayPal’s privacy policy

Form Spam Protection

• hCaptcha: used by our contact and custom order forms to prevent spam and bot submissions. hCaptcha’s privacy policy

Analytics

• Google Analytics (GA4): collects anonymized website usage data. Google’s privacy policy

Email Delivery

• Our transactional emails (order confirmations, form submissions) are sent via our own mail server (mail.lemoonzest.com). No third-party email marketing service is used to process these emails.

Website Infrastructure

• SiteGround: our web hosting provider. Site data is stored on SiteGround servers. SiteGround’s privacy policy

5. How We Store Your Data

Order information and form submissions are stored in our secure WordPress/WooCommerce database hosted by SiteGround. Access to this database is restricted to authorized personnel only. We retain order data for as long as required to fulfill legal and tax obligations, and no longer than seven years unless required by law.

6. Your Rights Under California Law (CCPA)

If you are a California resident, you have the following rights:

• Right to Know: you may request a copy of the personal information we have collected about you in the past 12 months, including the categories of data, the purposes for which it was collected, and any third parties with whom it was shared.
• Right to Delete: you may request that we delete your personal information, subject to certain exceptions (e.g., completing a transaction you requested).
• Right to Opt Out of Sale: we do not sell or share your personal information with third parties for monetary consideration.
• Right to Non-Discrimination: we will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, contact us at info@lemoonzest.com. We will respond within 45 days.

7. Cookie Opt-Out

You can manage your cookie preferences at any time using the cookie consent banner on our website. Necessary cookies (WordPress, WooCommerce, and hCaptcha) cannot be disabled, as they are required for the site to function. Disabling analytics cookies will prevent GA4 from collecting data about your visit.

You may also opt out of Google Analytics across all websites: tools.google.com/dlpage/gaoptout

8. Children’s Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: info@lemoonzest.com
• Website: lemoonzest.com/contact
• Address: Bay Area, California