Privacy Notice

Who we are

This portal is run by DEPARTMNT for Mulaa Joans. For everything you share here, DEPARTMNT is the data controller — we decide what is collected and why, and we answer your requests about it.

Mulaa Joans’s team sees audience statistics, and — only for fans who have ticked personalised marketing — the contact details of those fans. Everyone else stays in the aggregate.

Questions, or want your data? Email hello@departmnt.xyz.

One account across DEPARTMNT portals

Creating an account on any DEPARTMNT-powered artist portal creates a single DEPARTMNT account. Signing in to Mulaa Joans’s portal uses that same account — you never need a second one.

A small set of identity facts travels with that account and is visible on any portal you sign in to: your display name, your profile picture, your Instagram handle if you shared one, and your age signal. That is the whole list.

Everything else stays put. Your membership of Mulaa Joans’s portal, your marketing choice, your activity here and anything else you do on this portal belongs to Mulaa Joans’s portal alone and is never shared with another artist’s. Joining another artist’s portal is always an explicit action you take on that portal — it never happens automatically just because you have an account.

If you sign up here with an email that already has a DEPARTMNT account, we tell you by email only. The on-screen response never differs, so nobody can type in your email address and learn whether you have an account.

What we collect

• Name — to greet you and personalise your receipt.
• Email — your sign-in, and how we send you the things you asked for.
• Phone (optional) — only if you choose to share it, so we can text you about drops and shows.
• Instagram handle (optional) — only if you choose to share it, so we can recognise you when you tag us.
• Date of birth (optional) — an age signal, so we know whether we are dealing with an adult and can keep this portal age-appropriate. It is never used to target ads at you.
• Activity on this portal — which pages you open, what you play, and (if you ever arrive by tapping one of our NFC items) which item and when. We store categorised, bounded details only — country, not your location; the domain you came from, not the full link; never your IP address or browser string.

Why we collect it — and our lawful basis

• Running the portal — your account, your membership of Mulaa Joans’s portal and the content it unlocks. Lawful basis: the consent you give when you sign up, and our agreement with you to provide what you asked for.
• Messages from Mulaa Joans — drops, shows and unreleased music. Lawful basis: your explicit consent. The box is never pre-ticked, and you can withdraw at any time.
• Analytics linked to your account — understanding what fans actually enjoy, so we build the right things. Lawful basis: our legitimate interests. It is on by default, we are telling you about it here, and you can object at any time (see below).
• Anonymous audience statistics — counting visits and returning visitors, with no name or email attached. See Analytics below for the identifier and how to switch it off.

We never sell your data, and we never share it with another artist’s portal. Combining insights across artists would be a separate purpose with its own consent — we would ask you first.

Messages from Mulaa Joans

Personalised marketing — drops, ticket releases and unreleased tracks — reaches you only if you explicitly opt in. The tick box at signup starts empty, and leaving it empty never blocks anything else.

You can turn it on or off whenever you like with the “Personalised marketing” toggle in your account menu, or by using the unsubscribe link in any email. A withdrawal takes effect immediately: the next time we build an audience, you are not in it.

Analytics

We run our own first-party analytics to understand how the portal is used — which taps, plays, and pages get attention. It never uses third-party tracking pixels, never fingerprints anonymous visitors, and we never sell or share this data.

To count returning visitors honestly we store one random first-party identifier (“dpt_vid”) in your browser for up to 13 months, after which it is replaced. It is not tied to your name or email and is used only for our own audience statistics. You can switch it off here at any time — no account needed — which deletes the identifier from your browser:

If you have an account you can also object to analytics identity — the part that links activity to you — with the “Analytics identity” toggle in your account menu. Turning it off stops us connecting your activity to you; the anonymous counts carry on.

Cookies and browser storage

We use the cookies that are strictly necessary to keep you signed in, plus the single anonymous statistics identifier described above. No advertising cookies, no third-party trackers, nothing shared with ad networks.

Age

This portal is built for an adult audience and we do not knowingly collect data from children. Sharing your date of birth at signup is optional, and we use it only as an age signal — to keep what we show and send you age-appropriate, and to help us spot an account that should not be here.

If you believe a child has given us their details, email hello@departmnt.xyz and we will delete them.

Who else handles it

A small set of providers processes data on our instructions and on nobody else’s: Supabase (database and sign-in), Vercel (hosting) and Resend (email delivery). Where a provider processes data outside the UK, we rely on the UK’s approved transfer safeguards.

How long we keep it

We keep your details until you ask us to remove them, or until they are no longer needed for the purposes above. The anonymous statistics identifier is capped at 13 months. Aggregate counts, which identify nobody, may be kept longer.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to the analytics we run on legitimate interests. Email hello@departmnt.xyz and we will sort it. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Deleting your data here

Deleting your account from the menu erases what Mulaa Joans’s portal holds about you: your subscriber details, your consent record, the links that connect your activity to you, your access to the demos vault, and your profile picture. Your activity history survives only as anonymous counts that can no longer be traced back to you.

One DEPARTMNT sign-in can be a member of several artists’ portals. Deleting here removes only your Mulaa Joans membership — if you have joined other portals, your shared sign-in is kept and those portals keep working; another artist’s portal keeps its own copy of what you gave it, and you would ask there to have that removed too. If Mulaa Joans was your last membership, your DEPARTMNT sign-in is deleted with it. The delete screen tells you which of those two is about to happen before you confirm.

Changes to this notice

If we change what we collect or why, we update this page and move the date at the top. Anything that needs your consent is asked for again — never assumed.