At Molleau we take the protection of your personal data seriously. This policy explains, in plain terms, what data we collect through molleau.com, why we collect it, how we use it and what your rights are.
ℹ️ This policy covers only the data collected through the molleau.com website.
Contents
1. Who we are
Data controller: Laye Corporate (trading as Molleau)
Registered office: 55 rue Ganneron, 75018 Paris, France
Business number (SIRET): 913 188 801 00017
Legal representative: Emilie-Laye Birkui, President and Founder
Data protection contact:
General enquiries:
2. What data we collect
We collect only the data strictly necessary for the purposes described below.
2.1 Contact form data
When you fill in our contact form, we collect:
- Your first and last name
- Your email address
- The content of your message
- Where relevant, the name of your organisation
2.2 Technical and browsing data
When you browse the site, some data is collected through cookies, subject to your consent:
- IP address (anonymised for statistics)
- Browser type and operating system
- Pages visited and time spent
- Referring website
For further detail, see our Cookie policy.
3. Why we collect it
Purposes and legal bases for processing:
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your enquiries through the contact form | Pre-contractual measures / legitimate interest |
| Sending you our newsletter | Your consent (Art. 6(1)(a) GDPR) |
| Measuring site traffic and improving content | Your consent (analytics cookies) |
| Site security and fraud prevention | Legitimate interest |
| Meeting our legal obligations | Legal obligation |
Your data is never sold to third parties and is never used for advertising profiling.
4. Who has access to your data
Your data is accessible only to:
- The Molleau team (Laye Corporate), for the purposes described above
- Our technical providers, bound by processing agreements under Article 28 GDPR:
- HubSpot, CRM and forms (hosted in the European Union)
- Tally, online forms (hosted in the European Union)
- O2switch, website hosting (France)
- Google Analytics, anonymised traffic statistics
No data is transferred outside the European Union in the course of running this site.
5. How long we keep it
| Type of data | Retention period |
|---|---|
| Contact form enquiries | 3 years from the last active contact |
| Newsletter sign-ups | Until you unsubscribe, then deleted within 30 days |
| Browsing data (analytics cookies) | 13 months maximum |
| Technical server logs | 12 months |
Beyond these periods, your data is deleted or anonymised for statistical purposes.
6. How we protect your data
- Encrypted transmission using TLS across the whole site and all forms
- Hosting in France (O2switch) and in the European Union (HubSpot, Tally), with no transfer outside the EU
- Access to data limited to authorised members of the Molleau team
- Providers selected for their GDPR compliance and technical safeguards
7. Your rights
Under the GDPR and the French Data Protection Act, you have the following rights at any time:
| Right | Description |
|---|---|
| Right of access | Obtain a copy of the data we hold about you |
| Right to rectification | Have inaccurate or incomplete data corrected |
| Right to erasure | Request deletion of your data (the “right to be forgotten”) |
| Right to restriction | Request that processing be temporarily suspended |
| Right to portability | Receive your data in a structured, reusable format |
| Right to object | Object to processing, in particular for marketing |
| Right to withdraw consent | Withdraw your consent at any time |
How to exercise your rights
We aim to respond within a week, and within one month at the latest, in line with Article 12 GDPR.
Complaints to the French data protection authority
If you believe your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority:
- Online: www.cnil.fr/fr/plaintes
- By post: 3 Place de Fontenoy, 75007 Paris, France
8. Cookies
Our site uses cookies for its operation, for traffic measurement and for interaction with social networks. To find out more and manage your preferences at any time, see our Cookie policy.
9. Changes to this policy
This policy may be updated to reflect changes in our practices or in the law. The most recent version is always available on this page. If a substantial change is made, you will be informed.
Current version: 1.0, 27 May 2026
10. Contact us
For any question about your personal data:
Laye Corporate (Molleau)
55 rue Ganneron, 75018 Paris
Document prepared by Emilie-Laye Birkui.
This is an English translation provided for convenience. In the event of any discrepancy, the French version prevails.