Legal
Privacy Policy
Last updated: April 11, 2026 · Applies to users in the UK and EEA
🔒 Our Commitment
4LittleMoods is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK GDPR, the Data Protection Act 2018, and (for users in the EEA) the EU GDPR (Regulation 2016/679). We collect only what is necessary to provide our service — nothing more.
🏢 1. Who We Are (Data Controller)
The data controller for 4LittleMoods is the individual operator of this website.
- Service name: 4LittleMoods
- Website: 4littlemoods.com
- Contact email: hello@4littlemoods.com
- Operating jurisdiction: England and Wales
If you have any questions about how we handle your data, please contact us at the email above.
📋 2. What Data We Collect & Why
| Data | Why we collect it | Legal basis (UK GDPR) |
|---|---|---|
| Email address | To send you your quiz results and PDF report | Contract performance (Art. 6(1)(b)) — you request this service |
| Quiz answers | To calculate your child's temperament result | Contract performance (Art. 6(1)(b)) |
| Result & percentages | To display your results page and personalise the PDF report | Contract performance (Art. 6(1)(b)) |
| Email address (newsletter) | To send occasional educational parenting content | Consent (Art. 6(1)(a)) — you can withdraw at any time |
We do not collect names, addresses, payment information, or any data about your child beyond what you choose to share through quiz answers.
👶 3. Children's Data
Our service is directed at parents and caregivers, not children. We do not knowingly collect personal data from children under 13. Quiz answers relate to observations about a child's behaviour — they are provided by an adult and do not directly identify the child. No child's name, image, or identifying information is ever requested or stored.
📤 4. How We Use Your Data
- To generate your temperament result and personalised PDF report
- To send that report to the email address you provided
- To send you relevant educational articles and parenting tips (with your consent, unsubscribe anytime)
- To improve our quiz questions and content over time (anonymised, aggregated analysis only)
We will never:
- Sell your email address or data to any third party
- Use your data for advertising profiling
- Share your data with third parties for their own marketing purposes
🔗 5. Third-Party Services
We use the following third-party services to operate the site:
| Service | Purpose | Data involved |
|---|---|---|
| Resend (resend.com) | Sending results emails via HTTPS API | Your email address and report content |
| Railway (railway.app) | Hosting the application (EU West — Amsterdam) | Server-side request logs (IP address, timestamps) |
These providers act as data processors on our behalf and are bound by their own privacy and security obligations. We do not use cookies, tracking pixels, or third-party analytics (e.g. Google Analytics) at this time.
⏳ 6. How Long We Keep Your Data
| Data | Retention period |
|---|---|
| Email address + quiz result | Up to 2 years, or until you request deletion |
| Quiz answers | Up to 2 years, or until you request deletion |
| Newsletter subscription | Until you unsubscribe or request deletion |
After the retention period, data is permanently deleted from our database.
✅ 7. Your Rights Under UK & EU GDPR
You have the following rights regarding your personal data (applicable under UK GDPR and/or EU GDPR depending on your location):
- Right of access — request a copy of the data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure ("right to be forgotten") — ask us to delete all your data
- Right to restrict processing — ask us to pause how we use your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — unsubscribe from emails at any time without affecting your results
To exercise any of these rights, email us at hello@4littlemoods.com. We will respond within 30 days.
🛡️ 8. Security
We take reasonable technical and organisational measures to protect your data, including:
- Encrypted connections (HTTPS) for all data in transit
- Secure credential storage using environment variables (not hardcoded)
- Email delivered via Resend's HTTPS API (no SMTP credentials exposed)
- Application hosted in EU (Amsterdam) on Railway's infrastructure
- No payment data is ever collected or stored
No internet transmission or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
🌍 9. International Transfers
Your data is hosted on Railway servers in the EU (Amsterdam, Netherlands) — within the EEA. Email delivery uses Resend, which processes data in the EU (Ireland region). No transfers outside the UK or EEA occur in normal operation.
🔄 10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date at the top. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the updated policy.
⚖️ 11. Right to Complain
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's data protection authority:
- Website: ico.org.uk
- Phone: 0303 123 1113
We would, however, appreciate the chance to address your concerns first — please contact us at hello@4littlemoods.com before escalating.
📬 12. Contact Us
For any privacy-related questions or to exercise your rights: hello@4littlemoods.com