A plain-language policy. Honest. Written to be readable, not legalistic. The summary at the top and the detailed sections below say the same thing — one short, one thorough.
We collect the bare minimum we need to run the site, send you what you asked for, and deliver the kits you buy. We don’t sell your data. We don’t share it with advertisers. We don’t run any tracking pixels or third-party analytics. You can ask us to delete everything we have on you at any time, and we will.
This site (moodmap.com) and the products sold on it are operated by Moodmap, an independent small business based in Cape Town, South Africa. We are the ‘responsible party’ under POPIA (South Africa’s Protection of Personal Information Act) and the ‘data controller’ under the GDPR. In plain English: we decide what happens with your information, and we are accountable for it.
For any privacy question, complaint, or request, contact us at hello@moodmap.com.
We only collect information in three places, for three specific reasons.
From the quiz: your twelve answers (used only to calculate your archetype, not stored permanently), your email address if you choose to enter it, your resulting archetype, and the timestamp.
From the website: anonymous, aggregated analytics from Plausible (cookieless, no individual tracking). No Google Analytics. No Facebook Pixel. No advertising cookies. No fingerprinting.
When you buy a kit: your name, your email, your billing country (for tax compliance), and a record of which kit you bought. Card details are never seen by us — they’re handled directly by Yoco.
Each piece of information has one specific purpose. We don’t collect anything ‘just in case’.
Your email is used to send you what you asked for. Your archetype tag is used to make sure the content we send is relevant. Your order details are used to fulfil your purchase and comply with tax law. Site analytics are used to understand which pages are useful.
The legal basis under POPIA and GDPR is either performance of a contract, legitimate interest, or consent — depending on the specific use.
We share your information only with the third-party providers we need to run the business: ConvertKit (email), Yoco (payments), WebSpaceBar (hosting), Plausible (analytics), and Vercel (quiz hosting). We have data processing agreements in place with each.
Beyond this list, we do not sell, rent, or share your data with anyone. No advertisers. No data brokers. If law enforcement requests data under valid legal process, we will comply with our legal obligations and notify you where lawfully permitted.
Quiz responses (the individual answers) are not stored after the archetype is calculated. Only your archetype label and email (if given) are retained.
Email subscribers: until you unsubscribe or ask us to delete.
Order records: seven years, as required by South African tax law.
Support correspondence: two years, then deleted unless tied to an open issue.
Site analytics: aggregated and anonymous, retained indefinitely (contains no personal data).
Under POPIA, GDPR, and similar laws, you have specific rights regarding your personal information:
— Access: ask us what data we hold on you. — Correction: ask us to correct anything that’s wrong. — Deletion: ask us to delete everything we hold on you. — Portability: ask us to send you your data in a portable format. — Objection: object to any specific use of your data. — Withdraw consent at any time. — Lodge a complaint with a regulator if you’re unhappy with us.
To exercise any of these, email hello@moodmap.com. We respond within 14 days, usually within 48 hours.
We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We use one cookie if you make a purchase — a session cookie that disappears when you close your browser, and is needed only to process the order. Plausible Analytics is explicitly cookieless.
You will not see a cookie banner on this site because we don’t need consent for the bare-minimum functional cookies we use.
The site and kits are not directed at people under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have, please contact us and we will delete it.
Your data is stored on servers using industry-standard encryption: HTTPS for data in transit, encrypted databases at rest. Payment data never touches our servers — it is handled directly by Yoco. If we ever experience a data breach affecting your personal information, we will notify the South African Information Regulator within 72 hours, as required by POPIA Section 22, and notify you directly if the breach is likely to result in real risk.
If you’re outside South Africa, your data may be transferred to servers in countries including the United States and the European Union. For EU/UK users, these transfers are made under Standard Contractual Clauses approved by the European Commission, or under the legitimate-interest provisions of GDPR Article 49. By using the site, you consent to these transfers.
If you give us your email, we may email you about what you signed up for, new kits or content, and updates to our terms or this policy. You can unsubscribe from marketing emails at any time, with one click in the footer of any email. Even if you unsubscribe, we may still send essential transactional emails (order receipts, support replies).
If we update this policy in any meaningful way, we’ll update the ‘Last updated’ date and notify existing email subscribers. We will not make material retroactive changes to how we use data you’ve already given us.
For questions about this policy, email hello@moodmap.com.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the South African Information Regulator (inforegulator.org.za, POPIAComplaints@inforegulator.org.za, +27 (0)10 023 5200). EU users may also lodge with their national data protection authority.
This policy is written to be readable, not legalistic. We’ve tried to say plainly what we do and don’t do. If anything here is unclear, or if you want a more formal version for a specific compliance need, email us and we’ll send one.