Privacy policy

Last updated: December 7, 2025

Wuffa (Molly Labs AB), (“we”, “us”, “our”) operates this website and online store, including all related information, content, features, tools, products, and services (collectively, the “Services”). Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use the Services, make a purchase, subscribe, or otherwise interact with us.

If there is any conflict between this Privacy Policy and our Terms of Service, this Privacy Policy governs with respect to the collection, processing, and disclosure of personal information.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

“Personal information” refers to information that identifies or can reasonably be linked to an individual. It does not include anonymized or de-identified information.

Depending on how you interact with us, we may collect or process:

A. Contact Information

  • Name
  • Billing and shipping address
  • Email address
  • Phone number

B. Payment & Transaction Information

  • Payment method (via Shopify’s secure checkout)
  • Partial card details (not full card numbers)
  • Transaction history
  • Order confirmations
  • Refund and return records

Payment data is processed by Shopify and/or your chosen payment provider. We do not store your full payment information.

C. Account Information

  • Username
  • Password
  • Account preferences and settings
  • Saved addresses

D. Communications

  • Emails or messages you send to us
  • Customer service interactions
  • Survey or review responses

E. Device & Technical Information

  • IP address
  • Browser type
  • Device identifiers
  • Network information
  • Timezone and language preferences

F. Usage Information

  • How you navigate the site
  • Pages viewed
  • Products viewed or added to cart
  • Wishlist and browsing activity
  • Interaction with emails

G. Inferences

We may generate inferences about your preferences to personalize your shopping experience (e.g., product recommendations).

2. How We Collect Personal Information

A. Directly From You

When you:

  • Create an account
  • Browse or use the Services
  • Place an order or subscribe
  • Contact customer support
  • Complete a survey or return

B. Automatically

We collect certain information using:

  • Cookies
  • Pixels
  • Log files
  • Tags and scripts
  • Shopify analytics & reporting tools

C. From Service Providers

Such as:

  • Shopify
  • Payment processors
  • Email/SMS providers
  • Fulfillment partners

D. From Third-Party Partners

If you interact with Wuffa through advertising platforms, social media, or affiliate links.

3. How We Use Personal Information

We use your personal information for the following purposes:

A. To Provide, Personalize & Improve the Services

  • Process and fulfill your orders
  • Manage your account
  • Handle payments and subscriptions
  • Predict preferences and recommend products
  • Facilitate returns and customer support
  • Improve site performance and usability

B. Marketing & Advertising

  • Send promotional emails or SMS (with your consent)
  • Personalize ads based on browsing behavior
  • Analyze campaign performance
    You may opt out of marketing communications at any time.

C. Security & Fraud Prevention

  • Authenticate your identity
  • Monitor for suspicious activity
  • Prevent fraudulent orders or misuse
  • Maintain the integrity of our systems

D. Communication

  • Respond to inquiries
  • Provide order updates
  • Share important service-related notices

E. Legal Compliance

  • Respond to lawful requests
  • Comply with tax, accounting, and regulatory obligations
  • Enforce our Terms of Service

4. How We Disclose Personal Information

We may disclose your personal information to:

A. Shopify

Our store platform and key service provider for:

  • Checkout
  • Payments
  • Analytics
  • Fraud prevention
  • Personalized advertising tools

Shopify may act as an independent controller for processing necessary to provide its platform.
Learn more here: https://www.shopify.com/legal/privacy or https://privacy.shopify.com.

B. Service Providers

We share data only as needed with:

  • Payment processors
  • Fulfillment and logistics partners
  • Customer support platforms
  • Cloud hosting providers
  • Email and marketing tools
  • Analytics tools

These parties process your data under our instruction.

C. Business & Advertising Partners

To personalize ads or measure ad performance.
You can opt out of targeted advertising based on your region’s laws.

D. When You Direct Us

Example:

  • Social media integrations
  • Reviews or referrals
  • Gift orders

E. Corporate Transfers

If Wuffa undergoes a merger, acquisition, restructuring, or similar event.

F. Legal Requirements

We may disclose information to comply with:

  • Law enforcement requests
  • Court orders
  • Regulatory obligations

5. Relationship with Shopify

Shopify hosts and powers the Wuffa online store.

Your information may be processed in:

  • Canada
  • The United States
  • The EU/EEA
  • Other countries where Shopify or its approved subprocessors operate

Shopify provides:

  • Checkout
  • Payment handling
  • Fraud detection
  • Data insights
  • Personalization features

If Shopify processes your data for its own purposes (e.g., improving its services), it acts as an independent data controller.

Shopify privacy rights portal:
https://privacy.shopify.com/en

6. Third-Party Websites

Our Services may link to third-party sites not controlled by Wuffa.
We are not responsible for the privacy, security, or content of such sites.
You should review the privacy policies of any linked site you visit.

7. Children’s Data

The Services are not intended for children under the age of majority.
We do not knowingly collect personal information from children.
If you believe a child has provided information, contact us to request deletion.

8. Security & Retention

Security

We apply administrative, technical, and organizational measures to safeguard your data. 

Retention

We retain personal information only as long as necessary to:

  • Provide the Services
  • Maintain your account
  • Comply with legal obligations
  • Resolve disputes
  • Enforce agreements

9. Your Rights and Choices

Depending on your region (e.g., EU/EEA, UK), you may have the right to:

  • Access your personal information
  • Request deletion (“right to be forgotten”)
  • Request correction
  • Data portability
  • Restrict or object to processing
  • Withdraw consent (where processing is based on consent)
  • Opt out of marketing communications

You may exercise these rights by contacting support@wuffa.co

If Shopify holds data as an independent controller, you may also exercise rights directly at:
https://privacy.shopify.com/en

We may need to verify your identity before processing your request.

10. International Transfers

Your personal information may be transferred outside your country.
Where required, such transfers are protected by:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Other legally recognized safeguards

11. Complaints

If you have concerns regarding our use of personal information, contact us first.
You may also lodge a complaint with your local data protection authority.
List of EEA regulators:
https://edpb.europa.eu/about-edpb/board/members_en

12. Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices, legal requirements, or service features.
We will update the “Last updated” date and provide additional notice when required.

13. Contact Us

For questions or to exercise your rights: support@wuffa.co

Wuffa (Molly Labs AB) acts as the data controller for information collected through the Services.