Privacy policy

Who we are

This site is run by Mon Mon LLC ("Mon Mon", "we"), a small family clothing business. This policy explains what we do with your personal information when you visit the site, shop, or sign in. You will be able to contact us through this site once we launch.

Our shop has not opened yet. For now, the only personal information this site asks for is the email address you give us to join our email list. The parts of this policy about orders, accounts and reviews will apply once the shop opens.

What we collect, and how

We collect only what we need to run the shop.

• When you check out: your name, email and what you bought. Stripe collects them on its payment page and passes them to us. Stripe may also pass us a billing postal code, or a phone number if your payment method or wallet supplies one. We never see or store your card number. Stripe gives us the order result, the amounts, and the card brand and last four digits.
• Order history: every order we take is saved with its items, prices, tax and status.
• If you create an account or sign in: your email and name. Your password is handled by Amazon Cognito, our sign-in service, and is never visible to us. If you sign in with Google, Google tells us your name and email. For a forgotten password we keep your email and a scrambled copy of each reset code, which only works for 15 minutes.
• Reviews: if you review something you bought, we save your rating and what you write, linked to your account and the order. Once we approve it, the site shows it with your first name and the date.
• Our email list: if you join it or create an account, we send your email address to Klaviyo, which stores our list, along with where you joined from (the website or that you made an account).
• Messages: anything you send us.
• Technical information: when you use the site, your IP address reaches our servers, as it does for every website. We use it to slow down repeated attempts (for example guessing sign-in codes) and for security. For that, we store only a scrambled version of it, not the address itself, and only for a short time. Our hosting provider, AWS, also handles technical details such as your browser type and the pages requested, to deliver the site and keep it running.

Why we use it

• To take payment and work out sales tax.
• To email you order confirmations and sign-in or reset codes.
• To handle customer service.
• To show reviews from people who bought the product.
• To keep the site secure and to prevent fraud and abuse.
• To make sure the one-time welcome code for new accounts is used once per person (see below).
• To keep the records the law requires, such as tax records.
• To send our newsletter and marketing emails, if you joined our list or created an account.

Who we share it with

We share information only with the services that help us run the shop, and only what each one needs to do its job. Each has its own privacy policy.

• Stripe: takes your payment and works out sales tax. Stripe also uses its own tools to spot fraud.
• Amazon Web Services (AWS): hosts this website and stores our images, runs sign-in (Amazon Cognito) and sends our emails to you (Amazon SES).
• Klaviyo: stores our email list (the addresses of people who joined it or created an account) and sends our marketing emails. The unsubscribe link in those emails is handled by Klaviyo.
• Neon: the database company that stores our orders, accounts and reviews.
• Google: only if you choose Sign in with Google.

We may also share information if the law requires it, or to protect our rights, our customers or others. If the business is ever sold, your information would go to the new owner, who must honor this policy.

What we don't do

• We do not sell your personal information.
• We do not share it with anyone for advertising.
• We do not use analytics tools, advertising trackers or social media pixels on this site.
• We do not follow you around the web.

Cookies

We use only the cookies the site needs to work, such as your cart and staying signed in.

Do Not Track

Some browsers can send a "Do Not Track" signal. We don't track you across other websites or over time to show you ads, so there is nothing for that signal to switch off. The site treats every visitor the same way.

Welcome offer and the email record we keep

New accounts get a one-time welcome code for 10% off one order, one per email address. To stop the same person claiming it again, for fraud and abuse prevention, we keep a scrambled (one-way hashed) record of the email address. It can't be turned back into your email address. We keep it even after your account is deleted.

How long we keep it

We keep order records for as long as tax and accounting law requires, which we expect to be 7 years. Account details, reviews, password reset records and your email list sign-up stay until you ask us to delete them (the scrambled email record above is the exception). The scrambled security records that slow down repeated attempts are cleared after a short time.

Seeing, fixing and deleting your information

• See it: once the shop is open, sign in and open your account page to see your orders. For anything else we hold about you, contact us once we launch and we will send it to you.
• Fix it: contact us once we launch to tell us what is wrong and what it should say, and we will correct it.
• Delete it: contact us once we launch, giving the email address you used with us, to ask us to delete your information. There is no delete button on the site. We will confirm it is you, then delete your account, your sign-in profile, your reviews, any password reset records and your email list sign-up (so you leave our newsletter list), usually within 30 days.

What we can't delete: records the law makes us keep. That mostly means order records (your name, what you bought and what you paid) for 7 years for tax purposes. We keep those, but we take them off your account. Stripe keeps its own records under its own policies.

We also keep the scrambled email record described above, so the welcome offer can't be claimed twice.

You will not be treated differently for asking.

Marketing email

We send marketing emails (promotions, new arrivals and our newsletter) to people who joined our list or created an account. Every marketing email will have an unsubscribe link, which is how to stop them at any time. We use Klaviyo to store our email list and send these emails, and Klaviyo handles the unsubscribe link. Order and account emails (receipts, password and sign-in codes) are not marketing, so you will still get those. We do not send text messages.

Children

We sell clothes for kids and babies, but we sell them to adults. This site is not directed to children under 13, and we do not knowingly collect information from them. If you are a parent or guardian and think a child has given us information, contact us once we launch and we will delete it.

Security

We use well-known services and encrypted connections to protect your information. Payment is handled on Stripe's page, not ours. No system is perfectly secure, so we can't promise absolute security. If a data breach affects your information, we will tell you as the law requires.

Where your data goes

Our service providers may process information in the United States.

Changes

If we change this policy, we will update the date at the top of this page. For a big change, such as a new way of using your information, we will also put a notice on the site before it takes effect.

Contacting us and our launch

We are not taking messages yet. We plan to launch later this month, in November 2026, and we will offer a way to contact us when we do. To stop our emails at any time, use the unsubscribe link in any of them.