Privacy Policy

Last updated: August 25, 2026

MOKU ("MOKU," "we," "us," or "our") is a design studio established in Belgrade, Serbia, also operating out of Miami, USA. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit www.bymoku.com (the "Site") or otherwise interact with us, and it explains your rights under the EU General Data Protection Regulation (GDPR) and other applicable data protection law.

Data Controller: MOKU

Contact / Data Protection queries: info@bymoku.com

1. What Personal Data We Collect

a) Data you provide directly

Through our "Start a project" contact form or by emailing us, we may collect:

• Name
• Email address
• Project details, business information, or current website
• Any other information you choose to share with us

b) Data collected automatically

When you browse the Site, we (and our service providers, such as Google Analytics, once implemented) may automatically collect:

• IP address
• Browser and device type
• Pages viewed, time on page, referring/exit pages
• Approximate location (city/country, derived from IP)
• Date and time of visit

This data is collected through cookies and similar technologies — see our separate Cookie Policy for full details on what is used and why.

2. Legal Basis for Processing (GDPR Art. 6)

We only process personal data where we have a valid legal basis:

Where we rely on consent (e.g. analytics cookies), you may withdraw it at any time with future effect — see Section 8.

3. How We Use Your Data

We use personal data to:

• Respond to inquiries and discuss potential projects
• Deliver and manage services if we begin working together
• Understand how visitors use the Site, in aggregate, to improve its design and content
• Maintain Site security
• Meet legal and accounting obligations

We do not sell personal data, and we do not use it for automated decision-making or profiling that produces legal effects.

4. Cookies and Analytics

We use cookies and similar technologies on the Site, including (once implemented) Google Analytics, provided by Google Ireland Limited / Google LLC, to understand aggregate visitor behaviour.

Non-essential cookies (including analytics) are only set after you give consent via our cookie banner, in line with GDPR and the ePrivacy Directive. Full details of every cookie we use, its purpose, and its retention period are set out in our separate Cookie Policy.

5. Who We Share Data With

We may share personal data with:

• Google LLC / Google Ireland Ltd, for Site analytics (once GA is enabled), under Google's own data processing terms
• Service providers who support our operations (e.g. website hosting, form-handling), acting as processors under written data processing agreements
• Public authorities, where required by law

We do not share personal data with third parties for their own independent marketing purposes.

6. International Data Transfers

MOKU operates between Serbia and the United States, and uses tools (such as Google Analytics) that may process data outside the European Economic Area (EEA), including in the United States.

Where personal data is transferred outside the EEA, we rely on appropriate safeguards recognised under GDPR, such as the European Commission's Standard Contractual Clauses (SCCs) or a supplier's participation in the EU–U.S. Data Privacy Framework. You may request more information about these safeguards by contacting us.

7. Data Retention

• Contact form / email inquiries: retained only as long as necessary to respond to you and, if a working relationship begins, for the duration of that relationship plus any period required by law (e.g. accounting/tax retention rules).
• Analytics data: retained according to the retention window configured in Google Analytics (typically 14 months by default), which we set in line with data minimisation principles.

8. Your Rights Under GDPR

If you are located in the EEA, UK, or Serbia, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), where applicable
• Restrict processing in certain circumstances
• Object to processing based on legitimate interest
• Data portability, where processing is based on consent or contract and carried out by automated means
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (e.g. via our cookie banner)
• Lodge a complaint with your local data protection authority — in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik); EU residents may also contact their national supervisory authority

To exercise any of these rights, contact us at info@bymoku.com. We will respond within one month, as required by GDPR.

9. Data Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Children's Privacy

The Site is not directed at children under 16, and we do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, tools, or legal requirements. The "Last updated" date above reflects the most recent revision. Material changes will be reflected on this page.

12. Contact Us

MOKU
Email: info@bymoku.com
Belgrade, Serbia · Miami, USA

‍