Privacy notice
Last updated: September 2026
This notice explains what happens to the information you send us. It is short because we do very little with your data: we read your enquiry and we answer it.
Who is responsible
| Controller | MALUMA TOYS LLC |
|---|---|
| Registration no. | 44654648 |
| Address | 18 Sahaidachnoho St., apt. 32 Truskavets, Lviv Oblast, 82200, Ukraine |
| malumatoys@gmail.com |
What we collect
Only what you type into the enquiry form:
- Company name
- Your name
- Email address
- Country
- Your product interest and estimated order size
- Whatever you write in the message field
We do not use analytics, advertising trackers or cookies on this website. Nothing is stored in your browser and nothing about your visit is recorded unless you choose to send the form.
Why we process it, and on what basis
We process these details for one purpose: to reply to your enquiry and, if it goes further, to prepare a quotation. The legal basis is your consent, given by ticking the box on the form (Art. 6(1)(a) GDPR), and our legitimate interest in responding to business enquiries addressed to us (Art. 6(1)(f) GDPR).
We do not use your details for marketing, we do not add you to a mailing list, and we do not sell or rent them to anyone.
Who else sees it
Your enquiry arrives as an email and is read by the people at Maluma Toys who handle partner requests. Two service providers are technically involved:
- Web3Forms — passes the form submission to our inbox. It acts as a processor and does not use the content for its own purposes.
- Our email provider — stores the message in our mailbox in the ordinary way any email is stored.
Fonts on this site are loaded from Google Fonts, which means your browser's IP address is visible to Google when the page loads. If you would rather that did not happen, tell us and we will self-host the fonts.
Transfers outside the EU
We are based in Ukraine, which is outside the European Economic Area. Ukraine has not been granted an adequacy decision by the European Commission, so your enquiry is transferred to a third country. By sending the form you are consenting to that transfer (Art. 49(1)(a) GDPR). We handle the data to the standards described here regardless of where it sits.
How long we keep it
Enquiries that do not lead anywhere are deleted within 24 months. If we enter a business relationship, correspondence is kept for as long as that relationship lasts and for the retention periods required by Ukrainian accounting and tax law.
Your rights
Under the GDPR you can ask us for a copy of the data we hold on you, ask us to correct it, ask us to delete it, object to our processing of it, or withdraw the consent you gave — at any time, without giving a reason, and without it affecting anything we did before you withdrew it.
Write to malumatoys@gmail.com and we will deal with it. If you think we have handled your data badly, you are entitled to complain to the data protection authority in your country.
Changes
If this notice changes, the date at the top changes with it. There is no version history to dig through — what is on this page is what applies.
← Back to the site