MOLA — Privacy Policy
MOLA
Book audit →
How we handle your data

Privacy Policy.

What we collect, why we collect it, who we share it with, and how to ask us to delete it. GDPR-aligned, written without legal cosplay.

J.H. MOLA Business Support Ltd Christou Kefaloniti 15a, 8025 Paphos, Cyprus +357 99 770052 [email protected] Last updated · 10 May 2026
This Privacy Policy explains how J.H. MOLA Business Support Ltd collects, uses, and protects personal data when you visit mola-solutions.com or use the MOLA AI Concierge service. We comply with the EU General Data Protection Regulation (GDPR) and the Cyprus data-protection law that implements it.

1. Who is the data controller

J.H. MOLA Business Support Ltd, Christou Kefaloniti 15a, 8025 Paphos, Cyprus, is the data controller for personal data collected through this website and the AI Concierge service.

2. What we collect

From visitors to the website

  • Contact data you submit through forms (name, email, phone, business name, message).
  • Booking data when you reserve an audit (calendar slot, timezone, optional notes).
  • Technical data (IP address, browser type, pages viewed, referring URL).
  • Cookies and similar tracking — see Section 7.

From customers using the AI Concierge

  • Account and billing data (company details, contact people, payment details processed by Stripe).
  • Configuration data we use to train Rachel (services, pricing, FAQs, opening hours, voice samples you provide).
  • Call and message data routed through the AI agent: caller phone number, recordings, transcripts, SMS history, booking outcomes.
  • Customer-database records you import or sync (CRM contacts, past appointments, follow-up status).

3. How we use it

  • To deliver the service — answer calls, book appointments, send follow-ups, generate reviews.
  • To improve Rachel's accuracy on your business (call review, prompt-tuning, voice quality).
  • To bill you and prevent fraud.
  • To support you (responding to emails, calls, and chat messages).
  • To send service-related notices and, with your consent, marketing emails you can unsubscribe from at any time.
  • To meet legal obligations (tax, accounting, lawful requests from regulators).

4. Legal bases

We process data under one or more of these GDPR bases: contract (delivering the service to you), legitimate interest (running and securing the business), consent (cookies, marketing email), and legal obligation (tax records, lawful requests).

5. Call recordings & transcripts

The AI Concierge records and transcribes inbound calls so it can answer accurately, hand off to your team, and improve over time. You, as the business owner, are responsible for telling your callers that calls are recorded, where the law of your jurisdiction requires it. We provide configurable greeting templates that include a recording disclosure.

6. Sharing & sub-processors

We do not sell your data. We share it only with vetted sub-processors who help us deliver the service:

  • HighLevel (LeadConnector) — CRM, booking, voice + chat infrastructure.
  • Stripe — payment processing.
  • Google Workspace — email, calendar, document storage.
  • Voice + transcription providers contracted by HighLevel for AI voice synthesis and speech-to-text.
  • Cloud hosting providers in the EU and US, used by the above.

All sub-processors are bound by data-processing agreements and, where data leaves the European Economic Area, by Standard Contractual Clauses or equivalent safeguards.

7. Cookies

The website uses essential cookies (to remember your preferences and keep the site working) and optional analytics cookies (to understand how visitors use the site). You can accept, decline, or change your choice at any time from your browser settings.

8. How long we keep it

  • Marketing-form submissions: up to 24 months from last contact.
  • Customer account data: for the duration of your subscription, plus 6 years to meet Cyprus tax-record requirements.
  • Call recordings & transcripts: 12 months by default, configurable per customer.
  • Backups: rolling 30-day window.

9. Your rights

Under GDPR you can ask us to access, correct, delete, export, or restrict your personal data, and you can object to certain processing. To exercise any of these rights, email [email protected]. We respond within 30 days. You also have the right to complain to the Cyprus Data Protection Commissioner.

10. Security

We protect data with encryption in transit (TLS), encryption at rest where supported by our sub-processors, role-based access controls, and short-lived admin credentials. No system is perfect — if a breach affects you, we will notify you and the regulator within the timelines GDPR requires.

11. Children

The service is for businesses. We do not knowingly collect data from children under 16. If you believe a child has submitted data to us, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy. The "Last updated" date at the top of the page tells you when. Material changes will also be sent to active customers by email.

Contact

Questions about your data? Email [email protected] or write to J.H. MOLA Business Support Ltd, Christou Kefaloniti 15a, 8025 Paphos, Cyprus.