Privacy Policy

Who we are

Moralyze is a software consultancy based in Cape Town, South Africa. We run this website (moralyze.com) and the contact form on it. The full registered company details live in our PAIA Manual.

For privacy questions, our acting Information Officer is reachable at contact@moralyze.com.

What we collect

When you fill in our contact form, we collect:

• Your name
• Your email address
• Your phone number (optional)
• Your company name (optional)
• The service you're asking about (optional)
• Company size and budget range (optional)
• The message you send us
• Whether you want to subscribe to our newsletter

The required fields are name, email, and your message. The others are optional. If you skip them, we'll still reply.

We also collect aggregated traffic stats. Plausible Analytics runs on every page and is cookieless — it stores no personal data. If you accept the analytics or marketing categories in our consent banner, Google Analytics 4 and the Meta (Facebook) Pixel run too. See our Cookie Policy for the per-cookie breakdown.

Why we collect it

Our lawful basis under POPIA section 11(1) — and the equivalent GDPR Article 6(1):

• 11(1)(b) — necessary to act on your request. Replying to your contact-form message.
• 11(1)(f) — legitimate interest. Following up on the conversation you started.
• 11(1)(a) — consent. The newsletter opt-in, and the Analytics + Marketing consent categories. For non-essential cookies the basis is consent only — not legitimate interest. You can withdraw consent at any time via Manage your consent ; withdrawal is as easy as granting.

Third-party processors

We use the following third parties to operate the site and the marketing/analytics tools you opt into:

• Amazon Web Services (AWS). Hosts the site and processes contact-form submissions. Bound by AWS's Data Processing Addendum. Some processing may involve servers outside South Africa (POPIA section 72 disclosure).
• Plausible Analytics. Cookieless first-party traffic stats. Processes aggregated, non-personal data only.
• Google LLC (United States). Provides Google Analytics 4 when you accept the Analytics category. Certified under the EU–US Data Privacy Framework (DPF). IP anonymisation is enforced at ingest; data retention is 14 months.
• Meta Platforms Ireland Ltd is our controller for the Meta (Facebook) Pixel when you accept the Marketing category. Data is shared with Meta Platforms Inc (United States), also DPF-certified, under Standard Contractual Clauses as a fallback. Pixel events are retained per Meta's standard policy (approx. 180 days for the relevant identifiers).

We don't sell, rent, or share your data with anyone else.

How long we keep it

Contact-form submissions that don't go anywhere are deleted after 90 days. If you become a client, your info moves to our client records and we keep it as long as we have to under tax and contract law (typically 5 to 7 years).

You can ask us to delete your data sooner. See "Your rights" below.

Your rights

Under POPIA (and the equivalent GDPR/UK GDPR provisions), you can:

• Ask what data we hold about you
• Ask us to correct it
• Ask us to delete it
• Object to how we use it (including withdrawing newsletter consent)
• Withdraw consent for non-essential cookies at any time — click Manage your consent
• Complain to the Information Regulator

Email contact@moralyze.com to exercise any of these. We'll respond within 30 days.

You can also complain directly to the Information Regulator: complaints.IR@justice.gov.za, or via inforegulator.org.za.

Children

We don't knowingly collect data from anyone under 18. If you think we have, email us and we'll delete it.

Changes to this policy

If we change anything material, we'll update this page and refresh the "Last updated" date at the top.