Privacy notice
MoolResha is a research project, not a shop. This page says what we collect when you use this website, why, who handles it for us, how long we keep it, and how you can withdraw consent, ask us to delete your data or raise a complaint. You can use the whole site without giving us your name, email address or phone number.
What we collect and why
This is the full list. We collect nothing else, and we use each item only for the purpose written next to it.
| Data item | Purpose | Where it is stored | How long we keep it |
|---|---|---|---|
| Your answers about the five design conceptsWhether you would wear a piece, what you would change, a preferred colour, what matters most to you, and the price band you pick or your choice to skip that question. Stored together with a random Anonymous ID. | Product research | Cloudflare D1 database | Until the research phase ends, and at most 24 months. ⚠️ founder and lawyer to confirm |
| Your answer about your biggest clothing frustrationThe options you tick, and any short note you choose to write. | Product research | Cloudflare D1 database | Same as your concept answers. ⚠️ founder and lawyer to confirm |
| Anonymous IDA random code made in your browser and kept in your browser's local storage. It is not a cookie and is not made from your device or your details. It is sent with your answers so that your answers on different concepts stay together, and so that sending the same form again updates your earlier answer instead of counting twice. | Grouping your own answers, and avoiding double counting | Your browser (local storage), and Cloudflare D1 database with your answers | In your browser until you clear site data. On our side, same as your concept answers. ⚠️ founder and lawyer to confirm |
| Email address (optional)Only if you fill in the interest form and tick the email consent.Personal data, only if you choose to give it | Sending results and launch updates | Cloudflare D1 database and MailerLite | Until you withdraw consent, or 12 months after the last email we sent you. ⚠️ founder and lawyer to confirm |
| WhatsApp number (optional)Only if you fill in the interest form and tick the WhatsApp consent.Personal data, only if you choose to give it | A confirmation message when you submit, and close updates such as fit tests and launch day | Cloudflare D1 database and Meta's WhatsApp Business Platform (to send the confirmation message) | Until you withdraw consent. ⚠️ founder and lawyer to confirm |
| Usual size (optional)Only if you choose one in the interest form.Personal data, only if you choose to give it | Planning which sizes to make | Cloudflare D1 database | Same as the contact detail it is stored with. ⚠️ founder and lawyer to confirm |
| Consent recordsFor each consent you tick (email, WhatsApp, linking your contact details to your answers, and confirming you are 18 or older): which consent, the version of this notice you saw, and the time you gave it.Personal data, only if you choose to give it | Proof of what you agreed to | Cloudflare D1 database | As long as the data you consented to, plus 12 months. ⚠️ founder and lawyer to confirm |
| Day-level counts of page eventsHow many times a section was viewed or a form was sent on a given day, and which campaign link brought the visit (the utm_source, utm_medium and utm_campaign values in the address). These are totals per day. They hold no Anonymous ID, IP address or other detail about you. | Seeing which parts of the page work, and where visitors come from | Cloudflare D1 database | No fixed end, because the counts do not identify anyone |
| Short-lived anonymised request codeTo stop automated abuse, each request is turned into a one-way code using a salt that changes every day. We cannot work back from the code to your IP address or device. | Limiting how often one visitor can send forms | Cloudflare D1 database | Deleted when the rate-limit window ends, within 24 hours. ⚠️ founder and lawyer to confirm |
| Visit countsPage visits counted by Cloudflare Web Analytics, which sets no cookies. | Counting visits | Cloudflare | As set by Cloudflare's own terms |
Your answers about the concepts and frustrations are anonymous unless you fill in the interest form and tick the box that lets us link your contact details to your answers. If you do not tick that box, your contact details are kept apart from your answers.
Who handles it for us
These services process data on our behalf. We do not sell your data and we do not share it with anyone else.
- Cloudflare. Hosts this website, runs the form endpoints, stores the database, and provides the cookieless visit counts.What it receives: Everything in the table above except email and WhatsApp message delivery.
- Cloudflare Turnstile. Checks that a form is sent by a person and not by a bot. It runs when you send a form. Turnstile may look at details of your browser to decide.What it receives: A one-time check token and your IP address, at the moment you send a form.
- MailerLite. Stores your email address and sends the confirmation email and any later emails, only if you give email consent.What it receives: Your email address, only if you tick the email consent.
- Meta (WhatsApp Business Platform). Sends the WhatsApp confirmation message, only if you give WhatsApp consent. We do not keep a separate contact list with Meta the way we do with MailerLite: it only receives your number at the moment we send you a message.What it receives: Your WhatsApp number, only if you tick the WhatsApp consent.
Withdraw consent
You can withdraw any consent at any time. Withdrawing does not affect what we did before you withdrew.
- Email: use the unsubscribe link at the bottom of any email we send. We stop emailing you straight away.
- Any consent, including WhatsApp and linking: write to the Grievance Contact below, from the address or number you gave us, and say which consent you are withdrawing.
Ask us to delete your data
You can ask us to delete your email address, WhatsApp number, size, consent records and anything linked to them, from our database and from MailerLite.
- Write to the Grievance Contact below and say what you want deleted.
- We will ask you to confirm you control the email address or number. For an email address we reply to it. For a WhatsApp number we ask you to message us from it.
- We delete the data from our database and from MailerLite, then tell you it is done. We do not hold a separate WhatsApp contact list to delete from; the one confirmation message already sent is subject to Meta's own retention policy, which is outside our control.
Answers that were never linked to your contact details are anonymous. We cannot tell which answers are yours, so we cannot find or delete them for you.
How fast we reply
We aim to acknowledge a request within 7 days and complete it within 30 days. ⚠️ founder and lawyer to confirm
This applies to withdrawal requests, deletion requests and complaints.
Grievance Contact
For any question or complaint about your data, write to the Grievance Contact:
MoolResha
[email protected]
No studio name or address is disclosed while the site is online-only. ⚠️ founder and lawyer to confirm this is sufficient under applicable grievance-contact rules before launch.