Privacy
How we handle your information.
Our approach
Privacy is part of care.
Moya Group works with sensitive topics — mental health, neurodivergence, relationships and human potential. We believe the same respect that shapes our clinical and programme work should extend to the information people share with us online.
We collect only what we need, use it only for the purpose we collected it for, and keep it only as long as that purpose requires. We do not sell personal information, and we do not use it to profile people for advertising.
What we collect
The information we collect depends on how you engage with us:
- Website visitors: basic browsing data such as pages viewed, device type and approximate location, collected through standard server logs and analytics tools.
- Enquiries and contacts: name, email address, phone number, organisation and the content of your message when you use our contact forms or email us directly.
- Programme interest: name, contact details and relevant context when you express interest in a Moya Group programme, pilot or partnership.
- Newsletter subscribers: email address and optional preferences, managed through our email service provider.
- Clinical services: if you book through Moya Psychology, that division collects health and personal information under its own clinical privacy practices, which are provided at booking.
How we use information
- Respond to enquiries and route them to the right person or division.
- Run, evaluate and improve our programmes and partnerships.
- Send newsletters and updates to people who have opted in.
- Understand how the site is used so we can improve it.
- Meet legal, regulatory and clinical governance obligations.
Legal basis and POPIA
Our information practices are designed to align with the South African Protection of Personal Information Act (POPIA). That means we process personal information lawfully, minimise what we collect, keep it accurate, protect it appropriately, and respect your rights to access, correct or delete it.
Where we process special personal information — such as health-related details shared in a programme or clinical context — we do so only with consent or another lawful basis recognised by POPIA, and with additional safeguards in place.
Sharing and subprocessors
We do not sell personal information. We share it only when necessary and only with trusted service providers who help us operate the site, send emails, host data or run programmes. These providers are bound to use the information only for the service they provide to us.
We may also disclose information if required by law, regulation or a valid legal process, or to protect the rights, safety or wellbeing of individuals.
Security
We apply reasonable technical and organisational safeguards to protect the information we hold — including access controls, encryption in transit and regular review of our tools and practices. No system is completely immune to risk, so we also monitor, respond to incidents and review our controls as the organisation grows.
Cookies and analytics
We use a small number of cookies and similar technologies to keep the site working, understand how visitors move through it and improve their experience. We do not use third-party advertising cookies or track people across unrelated websites.
You can manage cookies through your browser settings. Some site features may be less reliable if cookies are disabled.
Your rights
You have the right to:
- Ask what personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal information where appropriate.
- Object to or restrict certain processing.
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise these rights, email privacy@moya.biz or use our Contact page.
Retention
We keep personal information only for as long as the purpose for which it was collected requires, or as long as law or professional obligations require. When information is no longer needed, we delete or anonymise it.
Children
Some of our programmes are designed for young people and families. We take additional care when collecting or processing information relating to children, and we require appropriate consent from a parent or guardian in line with POPIA and our clinical governance standards.
Changes to this page
We update this page from time to time as our services, partners and legal obligations evolve. The latest version will always be available at this URL, and significant changes will be reflected in the date below.
Last updated: 2026.
Contact
For privacy questions, data requests or concerns about how we handle your information, please contact us at privacy@moya.biz.
