Privacy Notice
Privacy Notice
How we collect, use and protect personal data, and the rights you have.
Who we are
The controller of your personal data is MOU INTERNATIONAL GROUP FOR BUSINESS AND TECHNOLOGY AND MARKETING SOLUTION LTD, trading as MOU International Group (MOUIG), a company registered in England and Wales under company number 15639680. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
This notice applies to this website and everything requested through it: enquiries, project ideas sent through “Submit your idea”, Training Membership applications, the newsletter and our marketing emails, training, consulting and memberships, the Annual Conference, the services store, payments, and certificate records and verification. It is issued under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). Venture websites publish their own privacy notices, which apply to those websites.
How to contact us about your data
Email info@mouig.com, or write to the registered office above. Please mark your message "Data protection".
Data we collect
| Context | Data | Source |
|---|---|---|
| Enquiries through the website forms, by email or WhatsApp Business | Name, email, telephone (optional), organisation, the content of your message and any files you send. Messages sent through the website forms are stored encrypted. | You |
| Project ideas sent through “Submit your idea” | Name, email, telephone (optional), company or team, country, and the description of your idea. Stored encrypted. | You |
| Training membership applications | Name, email, telephone (optional), country, current status, area of interest, preferences and your reasons for applying. For an applicant under 18: the parent or guardian’s details, and only the young person’s first name and age. Stored encrypted. | You, or the parent or guardian |
| Newsletter | Email, language, the consent wording you agreed to and when you confirmed. Your subscription starts only after you click the confirmation link we email you. | You |
| Our marketing emails | Name, email, organisation, job title, sector, country, where your details came from and the lawful basis, the emails sent to you and the links you clicked in them. We do not use tracking images to detect when an email is opened. | You, or your earlier dealings with us |
| Training bookings and in-house training requests | Name, email, telephone, organisation, job title, country, number of participants, invoice details, your notes and payment status. | You, or your employer |
| Applications to join our experts and trainers network | Contact details, experience and specialisms, CV, and a photo if you send one. Files are checked before saving and stored encrypted. Your profile appears on the website only with your written agreement. | You |
| Memberships | Contact details, field, goals and interests, membership level, and payment and renewal records. | You |
| Annual Conference: registration | Contact details, organisation, job title, country, ticket, proof of category (such as a student number) and attendance. Accessibility or dietary needs, if you tell us, with your explicit consent. | You |
| Annual Conference: papers | Contact details and affiliation, the abstract and files, co-authors' names and details, and review notes. | You, and the submitting author for co-authors |
| Annual Conference: speakers | Name, title, biography and photo, published only with written agreement. | The speaker |
| Services store and quote requests | Name, email, telephone, country, organisation, your answers to the service's questions (such as your website and goals), your notes, invoice details, and order and payment status. | You |
| Payments | Reference, amount, currency, method, status and date. Card details are entered on Stripe's secure page; we never see or store them. | You, Stripe, our bank |
| Discount codes | The code used and the discount, and your email in hashed form only, to apply "once per person". | You |
| Private links (company profiles, price quotes, sales proposals) | The name of the organisation the link was sent to, how many times it was opened, and when it was first and last opened. | Your device |
| Security and misuse prevention | Your IP address in hashed form to limit requests, and technical error logs. | Your device |
| Certificate verification lookups | The reference entered, date and time, the result, and your IP address in hashed form (converted by a one-way function and not stored in readable form). | Your device |
| Certificate records | Holder name, programme, issue date, issuer, reference and status. | The issuer, at issue |
| Strictly necessary cookies | Language version, cookie choice and, if you choose one, light or dark mode. | Your device |
| Google Analytics — only if you accept | Pages visited, device and browser type, approximate location (country or city), referring page, and an online identifier stored in a cookie. Google Analytics 4 does not log or store IP addresses. | Your device, with consent |
Children's data
This website is intended for adults. Some training programmes delivered by the Group, including through Moucademy, accept participants under 18.
Where a participant is under 18, we collect their details from, or with the agreement of, a parent or guardian, and we use them only to deliver the programme and issue its certificate. A parent or guardian can exercise the rights below on the child’s behalf by emailing info@mouig.com.
Young people under 18 should not use the website forms themselves. For the Training Membership, a parent or guardian applies on their behalf; we then collect only the young person’s first name and age, and we correspond with the parent or guardian.
Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Replying to enquiries and taking steps you request before a contract, including quote requests | Legitimate interests (6(1)(f)); steps prior to a contract (6(1)(b)) |
| Reviewing project ideas sent to the Group and replying | Legitimate interests (6(1)(f)); steps prior to a contract (6(1)(b)) |
| Responding to training membership applications | Steps prior to a contract (6(1)(b)); legitimate interests (6(1)(f)) |
| Delivering what you buy or book: programmes, memberships, conference tickets and store services, and taking payment | Contract (6(1)(b)) |
| Considering trainer applications and conference papers | Steps prior to a contract (6(1)(b)); legitimate interests (6(1)(f)) in running the conference |
| Publishing trainer and speaker profiles | Consent (6(1)(a)) |
| Accessibility or dietary needs at the conference | Explicit consent (6(1)(a) and 9(2)(a)) |
| The newsletter and emails to people who agreed to receive them | Consent (6(1)(a); PECR regulation 22) |
| Emails about similar services to people who dealt with us and did not opt out | Legitimate interests (6(1)(f)); soft opt-in (PECR regulation 22(3)) |
| Knowing which links in our emails are clicked, and how often private links are opened | Legitimate interests (6(1)(f)): improving our emails and following up proposals |
| Keeping certificate records and confirming certificates to third parties | Legitimate interests (6(1)(f)): allowing holders and employers to rely on certificates and preventing fraud |
| Security, rate-limiting, preventing misuse of the website, and backups | Legitimate interests (6(1)(f)) |
| Website analytics | Consent (6(1)(a)) |
| Accounting, tax and other legal obligations | Legal obligation (6(1)(c)) |
We do not use your data for decisions based solely on automated processing that have legal or similarly significant effects on you.
Marketing emails: every email says why you are receiving it and has a one-click unsubscribe. After you unsubscribe we send you no more marketing, and we keep your record with the date you unsubscribed so that we do not contact you again. You can ask us to delete your data completely at any time by emailing info@mouig.com.
Who receives your data
We do not sell personal data. We share it only where needed for the purposes above:
- Hostinger, which hosts the website, its databases and our email (including messages sent to info@mouig.com and marketing@mouig.com), including newsletter and marketing emails, and the website’s encrypted backups, as our processor.
- WhatsApp, provided in the UK by WhatsApp Ireland Limited (part of Meta), when you contact us through WhatsApp Business. WhatsApp processes your messages under its own terms and privacy policy.
- Google (Google Ireland Limited and Google LLC), which provides Google Analytics, only if you accept analytics cookies. We have switched off Google signals and advertising features.
- Stripe, our card payment provider. You enter your card details on its secure page, and it receives your name, email, the amount and the reference from us. Stripe processes the data to make the payment as our processor, and for fraud prevention and its legal obligations as an independent controller under its own privacy policy.
- Our bank, which sees the payer's name and the reference when you pay by bank transfer.
- Professional advisers, and public authorities where the law requires it.
International transfers
Google Analytics data may be processed in the United States. For that transfer we rely on the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge), under which Google LLC is certified. Where any other transfer outside the United Kingdom takes place, we rely on UK adequacy regulations or on appropriate safeguards, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. This includes any hosting of website data outside the United Kingdom. Stripe may process payment data in the United States, with the same safeguards described above.
How long we keep data
| Data | Retention |
|---|---|
| Enquiries that do not lead to an engagement, and in-house training requests | 12 months after the last contact, then deleted automatically |
| Project ideas and training membership applications that do not lead to an engagement | 12 months after they arrive. Deleted automatically. |
| Paid bookings, orders and tickets, and payment records | 6 years (accounting records), then deleted automatically |
| Client and contract records | 6 years after the end of the contract |
| Unpaid orders and registrations, quote requests not taken up, and free registrations | 2 years, then deleted automatically |
| Accessibility or dietary needs for the conference | 30 days after the conference ends |
| Trainer applications and memberships that were not accepted or not completed | 2 years after the last change, with any files |
| Active memberships and accepted trainers | 6 years after the last change |
| Conference papers | 2 years; accepted papers 6 years; withdrawn papers 1 month |
| Newsletter | Until you unsubscribe (your address is deleted at once); unconfirmed addresses 7 days |
| Marketing email contacts | 24 months after your last interaction (clicking a link in our emails or dealing with us), then deleted automatically. If you unsubscribe, we keep your record to make sure we do not email you again, until you ask us to delete it |
| Security and technical error logs | 90 days |
| Encrypted backups | Replaced on a rolling basis and used only to restore the website |
| Certificate records | For as long as the certificate can be verified, then 6 years |
| Verification lookup logs (hashed IP) | 90 days |
| Training records of participants under 18 | Until the participant turns 18, then as for certificate records |
| Google Analytics data | 14 months |
Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected (rectification).
- Have your data erased, where the law allows.
- Restrict how we use your data.
- Object to processing based on legitimate interests.
- Receive your data in a portable format (portability).
- Withdraw consent at any time. This does not affect processing carried out before withdrawal.
To exercise a right, email info@mouig.com. We may ask you to confirm your identity. We respond within one month, extendable where the law allows.
Complaints
If you are concerned about how we use your data, contact us first at info@mouig.com. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk.
Changes to this notice
We may update this notice. The current version is always published on this page with its effective date.
Effective date: 30 October 2026.