Privacy Policy

Last updated: 3 July 2026

Molo Ltd ("the Company," "we," "us," or "our") (82 King Street, Floor 3, Manchester M2 3AE, United Kingdom) is the data controller for personal data processed through wearemolohq.com under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. You can contact us at [email protected].

Molo is a family scheduling service that reads forwarded school and clinic notices, extracts dates and action items, and populates your shared family calendar. This policy explains what personal data we collect to do that, why we hold it, and what rights you have over it.

1. Personal Data We Process

When you use Molo we process the following categories of personal data:

  • Account data - your name and email address, collected when you register.
  • Notice content - the text, attachments, and metadata of emails and documents you forward to Molo for extraction. This is the core processing we perform on your behalf. Content may include dates and times of appointments, names of children and schools, and details of healthcare or educational appointments.
  • Calendar data - extracted event details (title, date, time, source) written to your connected calendar.
  • Family member data - names and email addresses of additional family members you invite to share your Molo calendar, which you provide and are responsible for notifying.
  • Payment data - for paid plans, billing details are handled by our payment processor under a separate data-processing agreement; we retain only plan tier and renewal status.
  • Technical data - IP address, browser type, device identifiers, and pages visited, collected automatically through server logs and, with your consent, analytics tools.

We do not use notice content or extracted calendar data to train or improve machine-learning models without your explicit written consent. The extraction processing is performed on your data solely to provide the Molo service to you.

2. Lawful Bases (Article 6 UK GDPR)

We rely on the following lawful bases:

  • Contract performance (Article 6(1)(b)) - processing your account data and notice content is necessary to provide the service you have signed up to.
  • Legitimate interests (Article 6(1)(f)) - we process technical data to maintain service security, detect abuse, and operate our infrastructure. Our interests are not overridden by your rights because the processing is limited in scope and you can object at any time.
  • Legal obligation (Article 6(1)(c)) - we retain certain records as required by applicable UK law.
  • Consent (Article 6(1)(a)) - non-essential cookies and analytics are only activated after you give consent through our cookie banner.

3. How We Use Your Data

We use your personal data to:

  • Create and maintain your Molo account;
  • Parse forwarded notices and extract calendar events;
  • Sync extracted events to your connected calendar application (Google Calendar, Apple Calendar, or Microsoft Outlook);
  • Send you an email digest of upcoming events where you have enabled that feature;
  • Respond to your support requests;
  • Improve service reliability and security.

4. Recipients and International Transfers

We share personal data with processors under written Article 28 contracts. Our processors include cloud infrastructure providers, email delivery services, and calendar API intermediaries. Where any processor is located outside the United Kingdom, transfers are protected by the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or an applicable UK adequacy regulation.

We do not sell your personal data to third parties. We do not share notice content or extracted calendar data with any party other than you and your invited family members.

5. Retention

We retain personal data only as long as necessary for the purpose for which it was collected:

  • Account data and notice content - held while your account is active, then deleted within 60 days of account closure on request;
  • Extracted calendar events - retained until you delete them from your Molo calendar or close your account;
  • Payment records - retained for 6 years to meet UK financial record-keeping obligations;
  • Access logs and technical data - retained 90 days, then automatically purged;
  • Support correspondence - retained 24 months after resolution.

6. Your UK GDPR Rights

As a data subject under the UK GDPR you have the following rights:

  • Right of access - you may request a copy of the personal data we hold about you;
  • Right to rectification - you may ask us to correct inaccurate data;
  • Right to erasure - you may ask us to delete your personal data in certain circumstances;
  • Right to restriction of processing - you may ask us to pause processing while a dispute is resolved;
  • Right to data portability - you may receive your data in a structured, machine-readable format;
  • Right to object - you may object to processing based on legitimate interests; and to direct marketing at any time without conditions;
  • Rights related to automated decision-making - we do not make decisions about you solely through automated processing with legal or similarly significant effects.

To exercise any of these rights, email [email protected]. We will respond within one calendar month. For complex or multiple requests we may extend this by two further months and will notify you.

7. Right to Complain to the ICO

If you believe we are handling your personal data unlawfully, you have the right to lodge a complaint with the UK Information Commissioner's Office. The ICO's website is ico.org.uk; helpline 0303 123 1113. We would welcome the opportunity to address your concerns directly before you contact the ICO.

8. Cookies

See our Cookie Policy for full details of the cookies and similar technologies we use. Non-essential cookies (analytics, preferences) are not set until you give prior consent through our cookie banner, as required by the Privacy and Electronic Communications Regulations (PECR).

9. Security

We implement technical and organisational security measures appropriate to the risk, including encryption of data in transit (TLS) and at rest, access controls, and regular security reviews. No transmission over the internet is entirely secure; you use the service at your own risk in that respect.

10. Changes to This Policy

We may update this policy as our processing activities change. Material changes will be indicated by an updated "Last updated" date at the top of this page. We will notify you by email if a change significantly affects how we process your notice content.

11. Contact

Molo Ltd
82 King Street, Floor 3
Manchester M2 3AE
United Kingdom
Email: [email protected]
Phone: +44 161 850 3320