Privacy policy

Last updated: October 15, 2025

Welcome to MOLUK.
We’re a small Swiss family business designing open-ended toys that spark children’s imagination.
We respect your privacy and believe in being transparent about how we handle your information.
This Privacy Policy explains what we collect, how we use it, and what rights you have.
By using our website, you agree to this policy.

The short version

We collect email addresses for our newsletter (only if you sign up).
We use optional cookies (with your consent) to understand how people use our website.
We work with Shopify (hosting and newsletter), Google (analytics and videos), and Adobe (web fonts).
We do not sell or rent your information.
You can unsubscribe, delete your data, or ask questions at any time.

1. Who We Are

MOLUK GmbH
Seefeldstrasse 178
8008 Zurich
Switzerland
Email: hello@moluk.com
Phone: +41 43 488 62 82

We are the data controller under the Swiss Federal Act on Data Protection (nFADP) and the EU General Data Protection Regulation (GDPR).

Hosting

This website is hosted by Shopify Inc., 151 O’Connor Street, Ottawa ON K2P 2L8, Canada.
Data is stored on secure Shopify servers located in Europe (with backups in Canada and the United States).

2. What Information We Collect

Information you provide

Email address and name (newsletter sign-up)
Your message and contact details (when you contact us)
Date and time of subscription and confirmation of consent (double opt-in)

Information collected automatically

IP address (anonymized where possible).
Browser, device type, operating system.
Pages visited, date, time, and duration of visit.
Referring website and language preference.

Cookies and similar technologies

We use cookies to provide and improve our site. See Section 7 for details.
We do not collect payment data, precise location, or information from children under 16.

3. How We Use Your Information

Newsletter (consent)

To send updates about MOLUK products and news.
1–2 emails per month.
You can unsubscribe any time via the link in each email.

Website operation (legitimate interest)

To provide and maintain our site.
To understand and improve user experience.
To ensure security and prevent abuse.

Customer support (legitimate interest)

To respond to questions or inquiries.

Legal compliance (legal obligation)

To comply with laws or authority requests.

We do not use your data for third-party marketing or profiling.

4. How We Share Information

Service providers (data processors)

We work only with trusted partners under strict data-protection agreements.

Shopify Inc. – website hosting and newsletter delivery
Location: Europe / Canada / USA
Data: IP address, browsing behavior, email, name, subscription preferences
Privacy: shopify.com/legal/privacy

Google Analytics 4 – website analytics (IP anonymization enabled)
Data: anonymized IP, pages visited, device information
Opt-out: tools.google.com/dlpage/gaoptout

YouTube / Google – video hosting
Data: IP address and viewing behavior only after you click Play
Privacy: policies.google.com/privacy
Note: videos use YouTube’s privacy-enhanced mode (youtube-nocookie.com).

Adobe Fonts – web typography
Data: IP address and browser info to serve font files (no cookies set)
Privacy: adobe.com/privacy

All providers comply with GDPR and nFADP.

Legal requirements & business transfers

We may disclose information if required by law or in case of a merger or acquisition.
You will be notified before any material change.

5. International Data Transfers

We ensure adequate protection through:

EU-US and Swiss-US Data Privacy Framework.
Standard Contractual Clauses (SCCs).
Canada’s adequacy recognition.

Your data is protected to the same standard wherever it is processed.

6. Data Retention

Newsletter: until you unsubscribe + 30 days.
Contact inquiries: 2 years.
Website analytics: 26 months (Google default).
Consent records: 3 years after withdrawal.
Legal records (if applicable): up to 10 years under Swiss law.

After these periods we delete or anonymize your data.

7. Cookies and Tracking

Essential cookies (no consent required)
Provide core functions and ensure security. Duration up to 1 year.

Analytics cookies (consent required)
Google Analytics 4 and Shopify Analytics help us understand how visitors use our site. Duration up to 26 months.

Functional cookies (consent required)
YouTube (for embedded videos) and Adobe Fonts (for typography).
YouTube sets cookies only after you click Play; Adobe Fonts does not use cookies.

We do not use marketing or advertising cookies.

Managing cookies
Our cookie consent is managed by the Pandectes GDPR Compliance app (Pandectes, Estonia), which controls when and how non-essential cookies are activated based on your preferences.
You can review or change your cookie choices at any time. Blocking all cookies may limit site functionality.
We do not respond to “Do Not Track” signals.

8. Your Rights

Under Swiss and EU law you can:

Access your data.
Request correction or deletion.
Restrict or object to processing.
Receive a portable copy.
Withdraw consent at any time.

How to exercise your rights

Email: hello@moluk.com Subject: “Data Privacy Request”
Mail: MOLUK GmbH, Seefeldstrasse 178, 8008 Zurich, Switzerland

Include your name, email address and your request.
We respond within 30 days (extendable to 60 for complex cases).

Supervisory authorities

Switzerland – Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch
EU/EEA – Local authority list: edpb.europa.eu
UK – Information Commissioner's Office (ICO): ico.org.uk

9. Security

We use SSL/TLS encryption, secure Shopify infrastructure, access controls, and regular updates.
Only authorized staff can access personal data.
If a data breach poses risk to your rights, we will notify the FDPIC (and you if required) without delay.

10. Children’s Privacy

While we design toys for children, our website is intended for adults.
We do not knowingly collect data from anyone under 16.
If you believe a child has submitted data, contact hello@moluk.com and we’ll delete it promptly.

11. Newsletter

1–2 emails per month with product and company updates.
Double opt-in confirmation process.
Basic open and click statistics for internal analysis.
Unsubscribe any time via the link in each email.

12. Third-Party Websites and Links

Our site may link to third-party platforms (e.g. Instagram, Facebook, YouTube, retailers, educational resources).
We are not responsible for their privacy practices. Check their policies before sharing data.
Links do not imply endorsement by MOLUK.

13. Changes to This Policy

We may update this policy to reflect changes in law or practice.
When we do we will:
Post the new version here.
Update the “Last updated” date.
Notify users if changes are significant.

Continued use of our website after updates means you accept the revised policy.

14. Contact Us

MOLUK GmbH
Seefeldstrasse 178
8008 Zurich
Switzerland

Email: hello@moluk.com
Phone: +41 43 488 62 82

Subject lines:

“Privacy Inquiry” – general questions
“Data Privacy Request” – access / deletion / correction

We aim to reply within 7 business days for general inquiries.

15. Governing Law

This Privacy Policy and any related disputes are governed by Swiss law.
Exclusive place of jurisdiction: Zurich, Switzerland.

Summary

What we collect: email addresses and basic browsing data.
Why: to send updates and improve our website.
Your control: unsubscribe, reject cookies, or request deletion any time.
What we don’t do: sell data or track you for ads.