Privacy policy

Updated 23 September 2026

Last updated: 29 September 2026

MoLux Oy (Business ID 2254035-8) runs the online shops Molux.fi and Luova.fi. Luova.fi is a registered trade name of MoLux Oy. This privacy policy covers both shops and all related information, content, features, tools, products and services, such as Molux.fi's breathalyser calibration service (the "Services"). Both shops run on Shopify's technology, which lets us provide the Services to you.

Molux.fi and Luova.fi share one customer register, and MoLux Oy is its controller. Information you give in either shop may be used to provide the services of both shops, and we may send you marketing about the products of either shop in line with this privacy policy.

This privacy policy describes how we collect, use and disclose your personal data when you visit or use the Services, make a purchase or otherwise deal with us. If our terms of service and this privacy policy conflict, this privacy policy governs the processing of personal data.

Please read this privacy policy carefully. By using the Services you confirm that you have read it and understand how your data is collected, used and disclosed.

Controller

MoLux Oy
Trade name: Luova.fi
Business ID: 2254035-8
VAT number: FI22540358
Suvilahdenkatu 10 A 5, 00500 Helsinki, Finland
Email: info@molux.fi (Molux.fi) or info@luova.fi (Luova.fi)
Phone: +358 40 154 8554

Personal data we collect or process

Personal data means information that identifies you or another person, or that can reasonably be linked to you or another person. Information collected anonymously or changed so that it can no longer be linked to you is not personal data.

What we collect depends on how you use the Services, where you live and what applicable law allows or requires. We may collect or process the following data, including inferences drawn from it:

  • Contact details: name, address, billing and delivery address, phone number and email address.
  • Business customer details: company name, business ID, VAT number, e-invoicing address and the contact person's name and contact details.
  • Financial information: payment method, transaction details and information related to payment confirmation. Card and bank account details are handled by the payment service provider; we do not store card numbers ourselves.
  • Account information: username, password, preferences and settings.
  • Shopping and order information: products you view, add to your cart, buy, return, exchange or cancel, and your past orders.
  • Calibration and service data (Molux.fi): device model and serial number, calibration and service dates, calibration certificates and calibration reminder settings.
  • Communications with us: information you give when contacting us, for example in a support request or quote request.
  • Device information: information about your device, browser and network connection, IP address and other identifiers.
  • Usage information: how and when you use and navigate the Services.

We do not collect or process the results of tests carried out with the breathalysers or drug tests sold at Molux.fi.

Sources of personal data

We collect personal data from the following sources:

  • Directly from you: when you create an account, place an order, ask for a quote, order a calibration from Molux.fi or otherwise give us information.
  • Automatically through the Services: from your device and through cookies and similar technologies.
  • From our service providers: when they collect or process data on our behalf.
  • From Shopify partners or other third parties: for example a credit provider.

How we use your personal data

Providing, tailoring and improving the Services. We use your data for purposes such as:

  • performing our contract, processing payments and delivering orders and services, such as the Molux.fi calibration service
  • invoicing, including e-invoicing for business customers
  • creating and maintaining your customer account and sending account notices
  • handling returns and exchanges and enabling reviews
  • sending calibration reminders to Molux.fi customers
  • recommending products related to your purchases, such as consumables

Marketing and advertising. We may send marketing messages by email, text message or post. We may also show you ads for our products in the Services and on other websites, including ads based on your past purchases and other activity.

Security and fraud prevention. We use your data to verify your account, provide a safe payment and shopping experience, detect and investigate fraudulent or illegal activity and protect the Services. If you register an account, you are responsible for keeping your login details safe. Do not share your username, password or other login details with anyone.

Communicating with you. We use your data for customer support, to answer your enquiries and to maintain our customer relationship.

Legal reasons. We use your data to comply with laws, such as accounting and tax legislation, and to respond to lawful requests from authorities. We also use it to establish, exercise and defend legal claims and to investigate breaches of our terms.

Legal bases for processing

We process personal data under the EU General Data Protection Regulation (GDPR) on the following bases:

  • Contract (Article 6(1)(b)): handling orders, deliveries, calibration services, customer accounts and customer support.
  • Legal obligation (point (c)): accounting, taxation and obligations under consumer protection law.
  • Legitimate interest (point (f)), which we assess by weighing it against your interests and rights: fraud prevention and information security, developing the Services and analytics, calibration reminders to existing Molux.fi customers, and communication and direct marketing aimed at business customers.
  • Consent (point (a)): email and text message marketing to consumers, and non-essential cookies. You can withdraw your consent at any time.

How we disclose your personal data

We may disclose your personal data to third parties for the lawful purposes described in this privacy policy in the following situations:

  • To service providers: Shopify and others who perform services on our behalf, such as payment processing, freight and parcel services, IT, data analytics, customer support, cloud storage, and accounting and invoicing.
  • To a credit provider, if you choose invoice or instalment payment. The credit provider processes the data as an independent controller and may make a credit decision.
  • To a supplier, when the product you ordered is shipped directly from the supplier.
  • To a debt collection agency, if an invoice becomes overdue and is passed to collection.
  • To business and marketing partners for marketing and advertising. For example, we use Shopify to support personalised advertising with third parties based on your online activity with different merchants and websites. Our partners use the data in line with their own privacy policies. Depending on where you live, you may have the right to ask us not to share your data for this kind of targeted advertising.
  • When you request or agree to the disclosure: for example to deliver products to you, or when you use social media widgets or login integrations.
  • In business transactions: for example in connection with an acquisition, merger or bankruptcy.
  • To meet legal obligations and protect rights: for example when responding to requests from authorities, enforcing our terms of service or protecting the Services, our own rights or the rights of our users and others.

Our relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal data about your use of the Services in order to provide and improve them. Information you submit to the Services is passed to Shopify and to third parties, which may be located in countries other than the one you live in.

We also use certain enhanced Shopify features to protect, grow and improve our business. For these, Shopify may use data collected from your interactions with our shop, other merchants and Shopify. In these cases Shopify is responsible for processing your personal data, including responding to requests about your rights.

To learn more about how Shopify uses your personal data and about your rights, see Shopify's Consumer Privacy Policy at https://privacy.shopify.com/en.

Third-party websites and links

The Services may contain links to third-party websites or other platforms. If you visit sites we do not control, please review their privacy and security practices and terms of use. We do not guarantee and are not responsible for the privacy or security of such sites, or for the accuracy, completeness or reliability of the information on them.

Information you share in public or semi-public places, such as social media, may be visible to other users without restrictions on its use. A link to another site does not mean that we endorse its content or operator, unless the Services say otherwise.

Children's data

The Services are not intended for children, and we do not knowingly collect personal data from minors. If you are the parent or guardian of a child who has given us personal data, you can ask us to delete it using the contact details below.

As of the effective date of this privacy policy, we have no actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) the personal data of people under 16.

Security and retention of your data

No security measure is perfect, and we cannot guarantee absolute security. Information you send us may not be protected in transit, so please do not send sensitive or confidential information through unsecured channels.

We keep personal data only as long as it is needed for its purpose:

  • Order and invoicing data: for the period required by the Finnish Accounting Act, i.e. six years from the end of the financial year in which the order was placed.
  • Customer account data: until you delete the account or ask us to delete it, unless a statutory retention obligation requires longer storage.
  • Calibration data (Molux.fi): for the duration of the customer relationship and a reasonable time after it, to verify the device's service history and certificates.
  • Marketing data: until you withdraw your consent or object to direct marketing.

Your rights and choices

Depending on where you live, you may have some or all of the rights listed below. The rights are not absolute: they may apply only in certain situations, and we may decline a request where the law allows.

  • Right of access: you can ask to see the personal data we hold about you.
  • Right to erasure: you can ask us to delete the personal data we hold about you.
  • Right to rectification: you can ask us to correct inaccurate data.
  • Right to data portability: you can receive a copy of your data and ask us to transfer it to a third party, subject to certain conditions and exceptions.
  • Managing communication preferences: you can opt out of marketing emails at any time using the unsubscribe link in the emails. We may still send you non-marketing messages, such as messages about your account, orders or calibrations.

If you live in the European Economic Area or the United Kingdom, you also have the following rights, subject to local law:

  • Objection and restriction: you can ask us to stop or restrict processing your personal data for certain purposes. You can object to direct marketing at any time.
  • Withdrawing consent: where processing is based on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

You can exercise your rights as indicated in the Services or by contacting us using the details below. For more information about the data Shopify processes and your related rights, see https://privacy.shopify.com/en.

We will not discriminate against you for exercising these rights. We may need to verify your identity before acting on a request. You can authorise a representative to make requests on your behalf. In that case we will ask the representative for proof of authorisation and may ask you to confirm your identity directly with us. We respond to requests without undue delay and at the latest within the time required by applicable law.

Complaints

If you have a complaint about how we process your personal data, contact us using the details below. Depending on where you live, you may have the right to appeal our decision by contacting us or to lodge a complaint with a supervisory authority.

In Finland the supervisory authority is the Office of the Data Protection Ombudsman (www.tietosuoja.fi). A list of supervisory authorities in other EEA countries is available at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

International transfers

We may transfer, store and process your personal data outside the country you live in. If we transfer data outside the European Economic Area or the United Kingdom, we use recognised transfer mechanisms, such as the European Commission's Standard Contractual Clauses or equivalent agreements issued by the competent UK authority. These are not needed where the destination country has been found to provide an adequate level of data protection.

Changes to this privacy policy

We may update this privacy policy from time to time, for example when our practices change or for operational, legal or regulatory reasons. We will publish the updated version on this website, update the "Last updated" date and give notice of changes as required by applicable law.

Contact

If you have questions about our privacy practices or want to exercise your rights, call +358 40 154 8554, email info@molux.fi (Molux.fi) or info@luova.fi (Luova.fi), or write to MoLux Oy, Suvilahdenkatu 10 A 5, 00500 Helsinki, Finland. MoLux Oy is the controller of your personal data.