Privacy Policy

Your data, handled with care.

This Privacy Policy explains how moodlab collects, uses and protects personal information when you visit our website, buy a digital product, join our mailing list, book a diagnostic or work with us.

Last updated: 18 June 2026 Applies to: moodcolab.io UK GDPR, DPA 2018, PECR and DUAA 2025

The short version

We only collect information that helps us run moodlab, deliver digital products and diagnostics, communicate with customers and improve the website. We do not sell personal data.

Some tools we use, such as website hosting, payment processing, email software, analytics and advertising platforms, may process personal data for us. Where required, we use contracts, consent settings and safeguards to keep this controlled.

You stay in control You can ask to access, correct, delete or restrict your personal data, subject to legal limits.
Marketing is optional You can unsubscribe from emails at any time.
Cookies are configurable Non-essential cookies are only used where permitted and controlled through our cookie banner or settings.

1. Who we are

moodlab is a digital marketing resource and diagnostic studio for founders, marketers and growing ecommerce brands. We sell digital resources, templates, toolkits, courses, downloads and marketing diagnostics through our website.

For the purposes of UK data protection law, the controller of your personal data is Moodstone Ltd, trading as moodlab.

  • Website: moodcolab.io
  • Email: lab@moodco.io
  • Registered address: 82 King St, Manchester M2 4WQ
  • Company number: 10552956

2. What this policy covers

This policy applies when you:

  • visit moodcolab.io or any moodlab landing page;
  • buy or download a moodlab product;
  • sign up to our emails, waitlist or free resources;
  • submit an enquiry, form, diagnostic brief or audit material;
  • book a call, request support or contact us directly;
  • interact with our adverts, social media pages or marketing campaigns;
  • are contacted by us in a business capacity about relevant moodlab services.

This policy does not cover third-party websites or platforms that we do not control. Their own privacy policies will apply.

3. Personal data we collect

The information we collect depends on how you interact with moodlab.

Identity and contact data

Name, email address, business name, job title, social handle, phone number if you provide it, and contact preferences.

Purchase and account data

Products bought, order history, download access, course access, invoices, support requests and customer notes.

Payment data

Payment status, transaction references and billing details. We do not intentionally store full card numbers.

Marketing data

Email sign-ups, preferences, campaign engagement, unsubscribe records and lead source information.

Website and device data

IP address, browser, device, pages viewed, clicks, referral source, approximate location and cookie identifiers where permitted.

Diagnostic and audit data

Business information, website links, screenshots, account exports, ads, analytics, email flows, funnel data, creative assets and written context you choose to send us.

Communication data

Emails, form submissions, call notes, feedback, testimonials, survey responses and customer service messages.

Business prospect data

Publicly available business contact information, such as founder names, LinkedIn profiles, websites, business emails and company information.

We do not ask you to send special category data, such as health data, political opinions, religion, biometric data or similar sensitive information. If you send us audit material, please remove or blur any personal information that is not needed for the work.

4. How we collect personal data

We collect personal data in a few ways:

  • directly from you when you buy, enquire, sign up, submit a form or send us information;
  • automatically through cookies, analytics, pixels and similar technologies where permitted;
  • from third-party platforms we use to run the business, such as our website, payment, email, analytics, advertising, booking and document tools;
  • from public business sources, such as company websites, LinkedIn, social profiles, Companies House and ecommerce discovery tools, where we are identifying relevant business contacts.

5. How we use personal data and our lawful bases

Under UK GDPR, we need a lawful basis to use personal data. The lawful basis depends on the purpose.

To deliver products and services

Lawful basis: contract.

We use your data to process orders, provide downloads, deliver courses, complete diagnostics, respond to support requests and manage customer access.

To answer enquiries

Lawful basis: legitimate interests or steps before entering a contract.

We use your details to reply to questions, send information you requested and follow up about relevant moodlab services.

To take payment and keep records

Lawful basis: contract and legal obligation.

We use billing and transaction data to process payments, issue invoices, manage refunds, handle disputes and meet tax and accounting duties.

To send marketing emails

Lawful basis: consent, soft opt-in where applicable, or legitimate interests for business contacts.

We may send updates about resources, diagnostics, launches, offers and useful marketing content. You can unsubscribe at any time.

To improve the website and products

Lawful basis: legitimate interests and, where required for cookies, consent.

We review website performance, customer behaviour, product feedback and analytics so we can improve moodlab.

To advertise moodlab

Lawful basis: legitimate interests and, where required, consent.

We may use advertising pixels, custom audiences, lookalike audiences, conversion tracking and campaign reporting where permitted.

To contact relevant businesses

Lawful basis: legitimate interests.

We may contact founders, marketers or business contacts where we believe moodlab is relevant to their role or company. We will respect objections and opt-outs.

To protect moodlab

Lawful basis: legitimate interests and legal obligation.

We use data to prevent fraud, secure our website, enforce terms, manage complaints and comply with legal requests.

Where we rely on legitimate interests, we consider whether our use of the data is fair, proportionate and expected. You can object to processing based on legitimate interests at any time.

6. Marketing communications

We may send marketing emails if you have signed up, downloaded a free resource, bought from us, joined a waitlist, requested updates or if we are contacting you in a business capacity about relevant services.

For individual subscribers, we will rely on consent or the soft opt-in where available. For business contacts, we may rely on legitimate interests, but you can opt out at any time.

  • You can unsubscribe using the link in any marketing email.
  • You can also email lab@moodco.io and ask to be removed.
  • We may keep a suppression record so we know not to contact you again.

7. Cookies, analytics and tracking

moodlab may use cookies, pixels, tags and similar technologies to operate the website, remember preferences, understand performance, measure campaigns and improve user experience.

Some cookies are essential and are needed for the website, checkout, security or product access to work. Non-essential cookies, such as analytics and advertising cookies, are used where permitted and controlled through our cookie banner or settings.

  • Essential cookies: used for security, checkout, account access and website functionality.
  • Analytics cookies: used to understand visits, pages, clicks, traffic sources and performance.
  • Advertising cookies and pixels: used to measure ad performance, build audiences and understand campaign results.
  • Preference cookies: used to remember choices such as cookie settings.

Cookie settings: manage your cookie preferences here. If your browser allows it, you can also block or delete cookies through your browser settings.

8. Payments and checkout

Payments are processed through third-party payment providers and website commerce tools. We receive limited information about the transaction, such as your name, email address, billing details, product purchased, payment status and transaction reference.

We do not intentionally collect or store full debit or credit card numbers. Your payment provider will process payment details under its own privacy and security terms.

9. Diagnostics, audits and submitted materials

If you buy a moodlab diagnostic, audit, Lab Report or strategy service, you may send us access links, screenshots, reports, analytics, ads, email flows, website data, creative assets, customer journey information or other business materials.

We use this information to deliver the work you requested, prepare recommendations and communicate findings. Please only share what is needed for the diagnostic.

  • Remove or blur customer names, emails and order IDs where they are not necessary.
  • Do not send special category data unless we have specifically agreed in writing.
  • Use read-only access wherever possible.
  • Tell us if any material is confidential or commercially sensitive.

10. Who we share personal data with

We may share personal data with trusted providers who help us run moodlab. They may include:

  • website hosting and ecommerce platforms;
  • payment processors and accounting software;
  • email marketing and customer communication tools;
  • analytics, advertising and conversion tracking platforms;
  • booking, survey, form and workflow tools;
  • cloud storage, document, spreadsheet and project management tools;
  • professional advisers, such as accountants, lawyers or insurers;
  • public authorities, regulators or law enforcement where legally required.

We do not sell personal data. We only share what is reasonably necessary for the purpose.

11. International transfers

Some of the tools and platforms we use may process personal data outside the UK. Where this happens, we take steps designed to protect your data in line with UK data protection law.

This may include relying on UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses or another lawful transfer mechanism.

12. How long we keep personal data

We keep personal data only for as long as we need it for the purpose collected, including to meet legal, accounting, tax, reporting, support and dispute resolution requirements.

Customer and order records

Usually kept for up to 6 years for tax, accounting and business record purposes.

Enquiries and support messages

Usually kept for up to 24 months after the last meaningful contact, unless needed for a longer purpose.

Marketing subscribers

Kept until you unsubscribe, withdraw consent or become inactive for a prolonged period.

Diagnostic and audit materials

Usually kept for up to 12 months after delivery, unless we agree otherwise or need to keep records for legal reasons.

Analytics and cookie data

Kept according to the settings of the analytics or advertising platform and your cookie preferences.

Suppression records

Kept so we can respect unsubscribe requests and avoid contacting people who have opted out.

These are typical retention periods. We may keep data for a shorter or longer period where necessary, lawful and proportionate.

13. Security

We use reasonable technical and organisational measures to protect personal data from accidental loss, misuse, unauthorised access, disclosure, alteration or destruction.

  • We limit access to people and providers who need it.
  • We use account security features such as passwords, permissions and, where available, multi-factor authentication.
  • We choose reputable third-party platforms for hosting, payments, communications and operations.
  • We ask clients not to send unnecessary personal data in diagnostic materials.

No website, platform or email system can be guaranteed completely secure. Please take care when sending sensitive or confidential information online.

14. Your data protection rights

Depending on the situation, you may have the following rights under UK data protection law:

  • Access: ask for a copy of the personal data we hold about you.
  • Correction: ask us to correct inaccurate or incomplete data.
  • Erasure: ask us to delete personal data in certain circumstances.
  • Restriction: ask us to limit how we use your data in certain circumstances.
  • Portability: ask for certain data in a portable format.
  • Objection: object to processing based on legitimate interests or direct marketing.
  • Withdraw consent: withdraw consent where we rely on consent.

To exercise your rights, email lab@moodco.io. We may need to verify your identity before responding. We will usually respond within one month, unless the request is complex or we are legally allowed more time.

Some rights are not absolute. For example, we may need to keep certain records for tax, accounting, legal, fraud prevention or dispute purposes.

15. Complaints

If you have a concern about how we use your personal data, please contact us first so we can investigate and respond.

  • Email: lab@moodco.io
  • Subject line: Data protection complaint
  • Please include your name, contact details and a clear description of the concern.

We will acknowledge your complaint and aim to resolve it fairly and promptly. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator.

ICO website: ico.org.uk

16. Children

moodlab is intended for business users, founders, marketers and adults aged 18 or over. We do not knowingly target children or collect children's personal data.

If you believe a child has provided us with personal data, please contact us so we can review and remove it where appropriate.

17. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to moodlab, our tools, our services or legal requirements.

The latest version will be published on this page with the updated date at the top.

18. Contact moodlab

For privacy questions, data requests, marketing opt-outs or complaints, contact us at:

lab@moodco.io

Moodstone Ltd
82 King St, Manchester M2 4WQ
Company number: 10552956