Molahop Privacy & Cookies Policy
Effective date: January 1, 2026
1. Introduction
At Molahop (“Molahop”, “we”, “us” or “our”), we take your privacy seriously. This Privacy & Cookies Policy explains what personal data we collect, how we use it, the legal bases we rely on, who we share it with, how long we keep it, and the rights you can exercise when you use our services (including our website, checkout process and customer support) and when you purchase or use our eSIM plans.
By using our services, you agree to the data practices described in this Policy, to the extent applicable.
2. Data Controller
The data controller is:
Molahop
Tax ID (NIF): B42787614
Registered address: Principe de Vergara 36, 3D 28001 Madrid
Contact email (privacy & support): hola@molahop.com
In certain cases, Molahop may process personal data as a data processor (for example, when providing support or handling activations on behalf of a properly authorized commercial partner). In such cases, we will act under the partner’s instructions and the relevant agreement.
3. Personal Data We Process
Depending on how you interact with Molahop, we may process the following categories:
- a) Identity and contact data
Name, surname(s), email address, phone number (if you provide it), country of residence. - b) Purchase and billing data
Plan details, amount, currency, invoices/receipts, order identifiers.
Note: Molahop does not typically store full payment card details; payments are handled by payment providers (see Section 7).
- c) Technical and browsing data
IP address, session identifiers, browser type, operating system, language, pages visited, browsing events, access date/time. - d) eSIM service data (minimum necessary)
Data related to delivering the service, such as plan/eSIM identifiers (e.g., ICCID/eID or similar technical identifiers), activation status, and data required for support. - e) Communications and support data
Messages you send to support, incident reports, troubleshooting steps, and screenshots you choose to provide. - f) Location data (limited)
We may infer approximate location (e.g., from IP) for security, fraud prevention, or to display language/currency/region. We do not perform continuous location tracking. - g) Identity verification data
Only if required by applicable law or by a carrier/regulator for certain destinations. In that case, we will request only what is strictly necessary.
Molahop does not routinely process biometric data. If biometric verification were ever required due to legal or carrier requirements (rare), we would provide specific information before collection.
4. How We Collect Your Data
We collect data through:
- Information you provide when you purchase, create an account, or contact support.
- Automatically collected data when you browse our website (cookies and similar technologies; see Section 6).
- Third parties such as payment providers, fraud-prevention tools, analytics providers, and carriers/partners where needed to provide the service.
5. How We Use Your Data and Legal Bases
We process your personal data for the following purposes under the GDPR legal bases (Art. 6):
- Provide the service and manage your purchase (Contract)
- Create/manage orders, deliver your eSIM plan, provide instructions, and manage service status.
- Customer support (Contract and Legitimate Interests)
- Resolve issues, validate settings, help with activation and usage.
- Administrative, accounting and tax compliance (Legal Obligation)
- Issue and retain invoices and meet Spanish tax/accounting obligations.
- Security, fraud prevention and abuse monitoring (Legitimate Interests / Legal Obligation where applicable)
- Detect suspicious transactions, protect accounts, keep security logs.
- Operational communications (Contract / Legitimate Interests)
- Necessary emails about your order, status updates, and critical service notices.
- Marketing communications (Consent or Legitimate Interests, as applicable)
- Promotions and updates where you have consented or where lawful. You can opt out at any time.
- Analytics and website improvement (Consent where non-essential cookies are used)
- Measure website usage and improve performance (see Section 6).
6. Cookies Policy
6.1 What are cookies?
Cookies are small files stored on your device when you visit a website. They help enable core functionality, keep you logged in, remember preferences, and measure site usage.
6.2 What types of cookies do we use?
Molahop may use:
- Strictly necessary cookies (core functions, security, session)
- Preference cookies (language/region settings)
- Analytics cookies (measure site usage and performance)
- Marketing cookies (if enabled) (ad relevance and campaign measurement)
6.3 Managing cookies
Where required, we will display a cookie banner/preferences panel allowing you to accept, reject, or configure non-essential cookies.
You can also control cookies through your browser settings. Blocking strictly necessary cookies may affect site functionality.
7. Data Sharing
We may share personal data with:
- Telecommunications carriers and connectivity providers to deliver your eSIM service.
- Payment service providers to process payments securely.
- Technology providers (hosting, email delivery, analytics, fraud prevention, support tools) under appropriate contracts.
- Professional advisors (e.g., legal/accounting) when necessary.
- Public authorities where legally required or upon valid request.
- Corporate transactions (merger/acquisition/restructuring), with appropriate safeguards.
We do not sell your personal data.
8. International Data Transfers
Some providers or carriers may be located outside the European Economic Area (EEA). When data is transferred internationally, Molahop implements appropriate safeguards such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission, and/or
- adequacy decisions or other mechanisms recognized by the GDPR.
9. Data Retention
We keep personal data only as long as necessary for the purposes described and to comply with legal obligations. For example:
- Billing/tax records are retained for legally required periods under Spanish law.
- Support records are kept as needed to handle the case and for reasonable follow-up.
- Marketing records are kept until you opt out/withdraw consent and suppression lists are maintained as required.
- Cookies persist according to each cookie’s duration and your choices.
10. Your Rights (GDPR)
Under the GDPR, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (where applicable)
- Restrict processing
- Object to processing (especially where based on legitimate interests)
- Data portability (where applicable)
- Withdraw consent at any time (without affecting prior lawful processing)
To exercise your rights, contact hola@molahop.com and include enough information for us to verify your identity.
You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).
11. Children’s Privacy
Our services are not directed to children under 14. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data and take reasonable steps to prevent it.
12. Updates to This Policy
We may update this Policy from time to time to reflect changes in our services or legal requirements. We will publish the updated version on our website with the new “Last updated” date and, where appropriate, provide additional notice.
13. Contact
For privacy questions or to exercise your rights:
📧 hola@molahop.com