privacy notice

This notice explains how Moriah Labs handles personal information under South Africa's Protection of Personal Information Act (POPIA) and, for visitors in the European Economic Area, the GDPR. It covers this website, the Sleipnir page under /sleipnir/ and the demo sites under /sites/.

Who is responsible

Moriah Labs is the responsible party. The Information Officer details will be published here. We have no email domain yet, so every request below goes through the contact form.

What we collect

Only what you type into a form: your name, email address, business name, industry, phone number, preferred contact time, and the message you write. For class bookings on the gym demo we also collect the class you choose, your experience level and any note.

With each form we record technical details: the page you sent it from, the site that referred you, campaign tags in the link, your country, and your browser's user agent. Your IP address is turned into a salted hash to limit abuse and is not stored in readable form. When a client signs an agreement in the portal we also record the IP address and time, as proof of signing.

Why we collect it

To reply to your enquiry, book the call or class you asked for, and keep a record of the conversation. We also use the technical details to block spam and repeated submissions. We do not sell your information and we do not use it for automated decisions.

Who handles it

• Cloudflare hosts the website and stores form submissions in its database.
• n8n, running on our own server, receives booking details and passes them on. It sends us a Telegram message so we see your request quickly.
• Telegram delivers that notification to us.
• We may also use an email delivery service (Resend) to email us a copy of your enquiry.

These providers may process data outside South Africa. We share your details with no one else unless the law requires it.

How long we keep it

We keep enquiries only as long as we need them to deal with you, and review them at least every 24 months. You can ask us to delete yours sooner at any time.

Cookies and tracking

This site sets no cookies and shows no cookie banner. Nothing is stored on your device to follow you.

We count visits with a small counter on our own server. Each time a page is opened, one is added to a tally for that page and that day. The tally records the page, the website you came from (its name only, such as instagram.com) and whether your screen is a phone, a tablet or a desktop. It does not record your IP address or your browser details, and it holds nothing that identifies you. Buttons that matter, such as asking for an audit or downloading Sleipnir, are counted by name only, never with what you typed.

No analytics service run by anyone else sees your visit, and we run no advertising trackers.

The demo shops keep a shopping cart in your own browser storage on your device. It is never sent to us.

Your rights

You can ask to see what we hold about you, correct it, or have it deleted, and you can object to us using it. Send the request through the contact form and say "privacy request" in the message, with the email address you used before so we can find your record. We may ask you to confirm your identity first.

If you are not happy with how we handled a request, you can complain to the Information Regulator of South Africa at inforegulator.org.za.

Security

Traffic to this site is encrypted. Access to submissions is limited to us behind a password. No system is perfectly secure, and we will tell you and the Regulator if a breach affects your information.

Changes

We update this page when something changes and show the date at the top.