Privacy Policy and Data Protection | MOLEVIA
This policy explains how MOLEVIA handles your personal data when you use our online shop. We only ask for the details we need to process your order, and we tell you why we need each one.
Who is responsible for your data
The data controller is MOLEVIA LLC, with its registered office at 5904 S Cooper Street, Arlington, TX 76017, USA. Send any data protection questions to kontakt@molevia.pl.
What data we collect
When you place an order
| Data | Why we need it | Required |
|---|---|---|
| Full name | Processing the order and delivery | Yes |
| Email address | Order confirmation and tracking number | Yes |
| Phone number | Contact from the courier, InPost or DPD | Yes |
| Delivery address or chosen InPost parcel locker | Delivering your parcel | Yes |
| Company name and Polish tax number (NIP) | VAT invoice in a company name | Only for company invoices |
| Declaration of intended use, dated | Confirming the reagents are for research use only and not for human use | Yes |
When you browse the shop
Your basket, selected currency and the draft of the checkout form are stored locally in your browser. You can clear this data in your browser settings at any time.
We keep our own visit statistics so we can see which pages and products are viewed and where customers drop out before buying. Without your consent, we only count anonymous page views, without a browser identifier. With consent to analytics cookies, we store a random browser identifier and record the course of your visit: the pages you open, where you came in from (for example a search engine, a link or campaign parameters), device type, language, products you view, adding items to your basket and starting an order. We do not store your IP address. The data stays on our server and is not shared with anyone.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Concluding and carrying out the sale, payment and delivery | Article 6(1)(b) GDPR and UK GDPR |
| Issuing and keeping invoices, meeting accounting and tax duties | Article 6(1)(c) GDPR and UK GDPR |
| Handling returns and complaints, defending legal claims | Article 6(1)(f) GDPR and UK GDPR, legitimate interests |
| Keeping a record of the research use declaration | Article 6(1)(f) GDPR and UK GDPR, legitimate interests |
| Keeping the shop secure and preventing misuse | Article 6(1)(f) GDPR and UK GDPR, legitimate interests |
| Visit statistics with analytics cookies | Article 6(1)(a) GDPR and UK GDPR, consent |
| Anonymous page counting without cookies | Article 6(1)(f) GDPR and UK GDPR, legitimate interests |
Who receives your data
- Stripe processes card, BLIK, Apple Pay and Google Pay payments.
- InPost delivers parcels to InPost parcel lockers in Poland. We share your name, phone number, email address and chosen locker with them.
- DPD delivers parcels by courier across Europe. We share the details needed to deliver your parcel.
- Our hosting provider runs the shop on a server located in the European Union.
We do not sell your data, and we do not pass it on to advertising networks.
Transfers outside the EEA and the UK
Stripe may process data outside the European Economic Area. Where this happens, the transfer relies on the standard contractual clauses approved by the European Commission, and on the UK addendum where UK data protection law applies.
How long we keep your data
| Type of data | Retention period |
|---|---|
| Order and invoice records | For as long as tax and accounting rules require |
| Data needed to defend legal claims | Until the limitation periods expire |
| Declaration of intended use | For as long as needed to show that the order complied with our sales terms |
| Detailed visit statistics | 13 months, after which only aggregated figures are kept |
Your rights
You have the right to:
- access your personal data and receive a copy of it,
- correct data that is inaccurate or incomplete,
- ask us to erase your data where the law allows it,
- restrict how we process your data,
- receive your data in a portable format and transfer it to another controller,
- object to processing based on our legitimate interests,
- withdraw consent at any time. This does not affect processing carried out before you withdrew it.
To exercise your rights, write to kontakt@molevia.pl. You also have the right to complain to a supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO). In the United Kingdom it is the Information Commissioner’s Office (ICO).
Cookies and browser storage
On your first visit we ask for consent to analytics cookies. You can accept them or choose only the essential ones. You can change your decision at any time using the “Cookie settings” link in the shop footer.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| mv_consent | Essential cookie | Remembering your cookie decision | 12 months |
| mv_id | Analytics cookie, only with consent | Random browser identifier for visit statistics | 13 months |
| mv_sid | sessionStorage, only with consent | Recognising a single visit in the statistics | Until you close the tab |
| Basket contents | localStorage, essential | Keeping your products between visits | Until you delete it |
| Selected currency | localStorage, essential | Showing prices in your chosen currency | Until you delete it |
| Checkout form draft | sessionStorage, essential | Restoring what you typed after a page reload | Until you close the tab |
| Product rating | localStorage, essential | Remembering your rating so you can change it | Until you delete it |
All cookies are ours. The shop does not use advertising cookies or third-party tracking tools.
Changes to this policy
When we change this policy, we will publish the new version on this page. Before you buy, you may also want to read our terms and shipping information. Questions can be sent through our contact page.