Privacy policy

Please read the following privacy policy to understand how we collect, use and protect the information that you provide to us through

Please read the following privacy policy to understand how we collect, use and protect the information that you provide to us through

By signing up with us or purchasing a Momiji Doll from our website you allow us use of the personal data you supply in accordance with this Privacy Policy. Please read the full privacy policy carefully and if you have any questions please contact us and we will be glad to help.

The statute that governs this Privacy Policy is the Data Protection Act 1998 (DPA) and the EU General Data Protection Regulation (GDPR) according to the Laws of England & Wales.

We are MomijiHQ Ltd. We are a company registered in England no. 07966442. We design and market the Momiji Dolls! You can get in touch with us here:

By signing up for our email news about releases, competitions and other activities related to Momiji you are allowing us to email you from time to time. The lawful basis upon which we do this is that of legitimate interest in keeping you informed.

You have the right to unsubscribe at any time. The best way to do this is simply to click the unsubscribe link that is clearly visible at the bottom of every promotional email we send.

If you order through the website you have the option of opting in for our news, competitions, new releases and promotions. You must check the box in order to opt in. If you choose not to check the box we will not send you any emails apart from those relating to your order. If you do not tick the box then, if you are already subscribed, this will not unsubscribe you. This will need to be done by the unsubscribe link on the bottom of each news email.

When you place an order on our site you consent to our using your data in order to fulfill the contract and send the Momiji to you. This contractual necessity is a lawful basis on which we may use your data in order to fulfill our contract with you.

You also have the right to have your data deleted but if there is a financial transaction against that data, in other words you have bought a Momiji Doll, then we are required by law to keep this information for 6 years.

Under English and European Law you have a right to know how we use your information. We only use your information to inform you about Momiji Dolls and to be able to process your orders. We may use information provided to us by you in the following ways:

  1. To send Momiji emails that’ll keep you up to date with the latest from Momiji HQ, including news, events, launches and exclusive offers. This includes an element of automated emails, such as the welcome series, to send you relevant and customised information about Momiji.

  2. To process an order from the Momiji shop

  3. To enable us to comply with any requirements imposed on us by law.

You have a right of access to your information. Typically you would exercise this by logging in to your account if you have one. An account is not created by signing up for our news unless you add a password of your choice. You have the option of placing an order as a guest if you wish. This will give you diminished access to any order history you may have.

You have a right to rectify your information if it is incorrect. You can do this by logging in and making any changes you wish at any time.

You have the right to unsubscribe from email marketing at any time by clicking the unsubscribe link at the base of each marketing email.

You have a right for your information to be deleted. If you have purchased from us then we are legally obliged to hold your data for 6 years. If you only signed up for emails then you may unsubscribe at any time. If you have any queries or concerns then please email us at [email protected]

We only share your information for operational purposes where we have a legitimate interest in doing so. We DO NOT share your information outside of the following:

i. With payment processors - currently PayPal and Braintree (a PayPal company)- so you are able to make payment

ii. With the warehouse hubs so they can send your order to you.

iii. With our email services provider so we can email you and also hold a record not to email you if you have unsubscribed.

iv. With our website developers who require access levels in accordance with their need to maintain and enhance our systems. They do not use or process your data but do have access to it.

This is very secure as we use a “hosted fields” solution. This is like a special gateway direct to PayPal for your credit card data which means this is the most secure method available. Technically this is not shared as we don’t have the data to share, it is straight between you and PayPal or our card processor. When you use PayPal all PayPal transactions are subject to the PayPal Privacy Policy for the EU and for the USA.

Financial information -

We don’t hold or process any credit card details. We use hosted fields as a gateway to the secure card processing platforms. We do hold the billing address you give us within our database. If you create an account with us you may modify this at any time by logging in. If you do not have an account with us then you may simply email any request you may have to [email protected]

Delivery information

We pass delivery information to the hubs (third-party warehouses) and they need your name, email, delivery address and order information so that your orders can be sent out to you. MHQ sub-contracts the order fulfillment to specialists in this area and this is made clear as to which hub we will use for your order during the ordering process. You are informed as to which country the hub is in before you complete your order or enter any personal data. The data required to be able to send the goods to you is only sent when you complete the order. The legal basis for us processing this information is in order to fulfill our contract with you.

Email address

Our email delivery services provider has your email address and location data (country) so that we may customise your experience with us. It is currently a US company covered by the EU-US Privacy Shield arrangement ( Our lawful basis in processing this data is that of legitimate interest. You may opt out at any time by simply clicking the unsubscribe button in any email we send you via this method.

Telephone number

This may be required if we need to contact you and for some international deliveries.

Our legally binding contracts with the third parties ensure that they do not pass on your data and only use it for the specific purpose intended by us as described above.

Data security is paramount in any business. We use virtual private servers run by a reputable company, Linode. For the technical amongst you our databases cannot be accessed remotely and can only be accessed using SSH. Administrator login is protected against brute-force login attempts by Cloudflare.

The website holds an SSL certificate which is confirmation that the site is secure and it only runs over HTTPS which which is a way of encrypting web traffic using TLS so that it can't be inspected by anyone but its intended recipient) The security is demonstrated by the padlock symbol in the url address bar (you can view more information about how your connection is secured by clicking this to view certificate and connection information).

Your order details (dolls, email address, phone number and delivery address) are sent securely to the hubs using HTTPS or SFTP.

Payment details are not held by us and nor do we receive any. When you enter your payment details you are in fact entering them directly into the PayPal or Braintree (card-processing) website through a window through our website. This enables us to meet PCI SAQ A certification. This means that your payment details, whether paying by PayPal or credit/debit card go straight to PayPal or Braintree and are secured by their powerful encryption.

We do not pass your data to anyone outside of our direct fulfilment network, email service provider or web developers.

We only use your data to be able to keep you informed about Momiji if you consent to this and to be able to deliver Momiji Dolls to you when you place an order.

Our partners to whom we pass your information only use it for fulfilment of your order. We have agreements with each of them that they will not pass your data on to third parties and will only use the data in accordance with their services to us and for no other purpose. Where applicable we have seen that they are GDPR compliant.

If you’re a registered member of the Momiji collective, please login to your account where you’ll be able to update your details and choose the information you provide to us. In addition you will be able to view your order history.

"Cookies" are small amounts of basic information that a website can use to recognise repeat site visits and as an example, recall your email address if this has been previously supplied. Most modern browsers allow you to decide whether to accept cookies, and the time frame to keep them, however please be aware that by rejecting cookies some areas of the website may not work correctly. Cookies are also used within our email marketing tools in order to give you a more personal and relevant journey with us.

Our site may contain links to other websites. If you follow a link to any of these websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Legal compliance, governing laws and disputes

The statute that governs this Privacy Policy is the Data Protection Act 1998 (DPA) and the EU General Data Protection Regulation (GDPR) according to the Laws of England & Wales. We process personal data only in strict compliance with this legislation. Any data you enter onto our website will be subject to the Data Protection Act and you’re responsible for its accuracy and relevance. You must have the authority to disclose such information.

Any changes to our privacy policy will be posted in this document so feel free to come back from time to time to check.

The Data Controller at MHQ Ltd is Cameron Read. He is responsible for overseeing the legal obligations and ensuring that we at MomijiHQ comply with the latest privacy regulations. If you have any concerns then feel free to contact him at [email protected]

If you still feel you are being treated unfairly then you have a right to complain to the Information Commissioner’s Office here: