How we handle your information, plainly stated.
This policy explains what House of Mastery, the body of work of Dr. Job Mogire, MD, FACP, FACC, collects when you take an assessment, attend a session, or correspond with us, and how we keep that information safe and lawful.
1. Who we are
House of Mastery is the body of work of Dr. Job Mogire, MD, FACP, FACC, a board-certified cardiologist and the founder and architect of the work. House of Mastery delivers diagnostic instruments, including The First Hour and KOORA: The Finishing Protocol, monthly gatherings such as the Pamoja Hour and the Mastery Hour, and related sessions, content, and community correspondence.
For the purposes of the General Data Protection Regulation and equivalent laws, House of Mastery is the data controller of the personal information described in this policy. Dr. Job Mogire is the responsible principal.
Controller details
- Entity
- House of Mastery
- Principal
- Dr. Job Mogire, MD, FACP, FACC
- Privacy contact
- mail@mogire.com
- Postal address
- To be added at production deploy. Until then, written correspondence should be sent to the email address above and we will respond within statutory windows.
- EU representative
- Where required by Article 27 GDPR, House of Mastery will appoint and publish an EU representative. Until that appointment, EU residents may direct enquiries to the privacy contact above.
2. What information we collect
We collect only what is necessary to deliver the assessment, send your report, and maintain a respectful long-form relationship with you over the 180-day path and beyond. The categories below describe the maximum we collect; many participants supply less.
| Category | Examples |
|---|---|
| Identity | First name, the day or return number you select on entry |
| Contact | Email address, optional WhatsApp identifier if you join the cohort group |
| Assessment responses | Your answers to the assessment items (a four-point scale), the chamber or section you reached, time-of-completion timestamp |
| Free-text reflections | If you choose to write them, your thirty-day cost statement, your five-year reflection, your tomorrow first-move statement |
| Threshold selection | If you choose to mark one of the five thresholds in the result page |
| Local-storage record | A record of your past assessment results, kept on your own device only, so you can see how the pattern moves over time |
| Technical | Standard server logs from our hosting provider, including IP address, browser, and approximate region. We do not use these for marketing. |
We do not intentionally collect special-category personal data within the meaning of Article 9 GDPR (race, ethnicity, religion, political opinions, trade-union membership, genetic data, biometric identifiers, health data beyond the self-reflective answers you choose to give, sex life, or sexual orientation). Some assessment items may, by their nature, prompt you to reflect on emotional or somatic experience. You are free to decline any item.
3. How we collect it
- Directly from you, when you complete an assessment, send an email, register for a session, or join a cohort.
- Locally on your own device, through the assessment instruments, which save your answers and report to your browser’s local storage so you can return to your path.
- Through email-delivery infrastructure, when you choose to send your report by email. The email containing your report is generated client-side and sent through a transactional email service operating under contractual data-processing terms.
4. Why we use it, and our legal basis
We use your information for the following purposes, with the corresponding legal basis under GDPR Article 6.
| Purpose | Legal basis |
|---|---|
| Producing your assessment result and report | Performance of a service you requested (Article 6(1)(b)) |
| Sending the report to your email and to our cohort archive | Performance of a service you requested (Article 6(1)(b)) |
| Reminding you to retake the assessment at the cadence we publish | Legitimate interest in supporting your path (Article 6(1)(f)), with an unsubscribe link in every reminder |
| Inviting you to the Pamoja Hour, the Mastery Hour, KOORA, and related offerings | Consent (Article 6(1)(a)), withdrawable at any time |
| Maintaining a private archive that helps Dr. Mogire and the cohort meet you with continuity | Legitimate interest (Article 6(1)(f)) |
| Aggregated, de-identified review of how the instruments perform across the cohort | Legitimate interest (Article 6(1)(f)) |
| Compliance with legal obligations | Article 6(1)(c) |
Where we rely on legitimate interest, we have considered the balance against your rights and freedoms. You may object to such processing at any time, in which case we will stop unless we can demonstrate compelling legitimate grounds.
5. Who we share it with
We do not sell your personal information. We do not share your personal information with anyone except in the limited circumstances below.
- Service providers who process information strictly on our behalf and under written terms that satisfy Article 28 GDPR. The principal categories are email-delivery infrastructure, web hosting, and analytics. Each provider is bound to confidentiality, security, sub-processor restrictions, and data-protection assistance.
- Dr. Job Mogire and the named members of the House of Mastery team who have a need to see your information in order to deliver the work you have engaged us for.
- Authorities when we are required to disclose by law, court order, or to protect rights, safety, or property.
- A successor in the unlikely event of a merger, acquisition, or transfer of the work, on equivalent privacy terms.
6. International data transfers
House of Mastery is operated from East Africa with participants in many jurisdictions. Personal information may therefore travel between Kenya, the United States, the United Kingdom, the European Economic Area, and other countries where our participants and providers are located.
When personal information is transferred from the European Economic Area, the United Kingdom, or Switzerland, we rely on one or more of the following safeguards as required by Articles 44 to 49 GDPR:
- The European Commission’s Standard Contractual Clauses (or the UK International Data Transfer Addendum) with each non-EEA recipient;
- An adequacy decision where one applies;
- Your explicit consent, where appropriate and after receiving the information required by Article 49(1)(a).
You may request a copy of the relevant safeguard at any time by writing to mail@mogire.com.
7. How long we keep it
| Category | Retention |
|---|---|
| Email and assessment archive of active participants | For as long as you remain in correspondence with House of Mastery, plus thirty-six months thereafter, unless you ask us to delete sooner. |
| Cohort participation records | For the life of the cohort plus seven years, to support continuity for alumni rejoining the work. |
| Local-storage records on your own device | For as long as you choose. You may clear these at any time using the “Reset history” control inside each instrument or by clearing your browser data. |
| Server logs | Up to thirty days, after which they are aggregated or deleted. |
| Records we are legally required to keep | For the period required by the relevant law, then deleted. |
8. Your rights
Wherever you live, you have the right to ask us:
- What information we hold about you (the right of access);
- To correct information that is inaccurate or incomplete (the right to rectification);
- To delete information that is no longer required, where the law permits (the right to erasure);
- To restrict the way we process your information in specific circumstances;
- To receive your information in a portable format and to send it to another controller (the right to data portability);
- To object to processing where we rely on legitimate interest;
- To withdraw consent at any time, where we rely on consent;
- To lodge a complaint with your supervisory authority. In the European Union your local data-protection authority has jurisdiction. In the United Kingdom, the Information Commissioner’s Office. In Kenya, the Office of the Data Protection Commissioner.
To exercise any of these rights, write to mail@mogire.com. We respond within statutory windows, usually within thirty days, and we do not charge a fee for routine requests.
9. California-specific rights
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights below in addition to the rights in the previous section.
Notice at collection
The categories of personal information we collect are listed in Section 2 above. We have collected each of those categories within the past twelve months.
Sources, purposes, and recipients
We collect personal information from you directly, from your device’s local storage, and from our hosting infrastructure as described in Section 3. The business and commercial purposes are listed in Section 4. The categories of recipients are listed in Section 5.
Sensitive personal information
We do not collect sensitive personal information for the purpose of inferring characteristics about you. We do not use or disclose sensitive personal information for purposes other than those permitted by California Civil Code Section 1798.121(a). You therefore have no need to exercise the right to limit the use and disclosure of sensitive personal information, but if you wish to do so anyway, please write to us.
Sale and sharing
We do not sell or share your personal information within the meaning of the CCPA, the CPRA, or any equivalent law. There is therefore no “Do Not Sell or Share My Personal Information” opt-out for you to exercise, because the opt-out has effectively already been applied.
Your California rights
- The right to know the categories and specific pieces of personal information we have collected, the categories of sources, the purposes for which we use the information, and the categories of third parties with whom we share it.
- The right to delete your personal information, subject to the statutory exceptions.
- The right to correct inaccurate personal information.
- The right to limit the use and disclosure of sensitive personal information.
- The right to opt out of sale or sharing. As noted, we do not sell or share, but the right is yours nonetheless.
- The right not to receive discriminatory treatment for exercising any of the rights above.
- The right to designate an authorized agent to exercise these rights on your behalf, with proof of authorization.
To exercise any California right, write to mail@mogire.com with the words California request in the subject line. We will verify your identity by matching the email address you used to engage with us, or by another reasonable method, before responding.
10. Children
The instruments and services of House of Mastery are designed for adult professionals. We do not knowingly collect personal information from children under the age of sixteen. If you believe we have inadvertently collected information from a child, please notify us at mail@mogire.com and we will delete it promptly.
11. Security
We use reasonable administrative, technical, and physical safeguards to protect your personal information, including transport-layer encryption for data in motion, encryption at rest where supported by our providers, access controls, and regular review of our security posture. No system on the public internet is perfectly secure; if a breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority within the windows required by law.
12. Cookies and similar technologies
The assessment instruments do not set tracking cookies. They use your browser’s local storage to save your assessment history on your own device. The website may, where deployed, set strictly necessary cookies (for example, to maintain a session) and may use privacy-respecting analytics that do not track individuals across sites. We will publish a separate cookie notice if and when this changes.
13. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in the law. The version number and last-updated date at the top of the page record the change. For material changes, we will give you reasonable notice by email or by a banner on the website before the change takes effect.
14. How to reach us
- Privacy contact
- mail@mogire.com
- Subject line
- Use Privacy request, California request, Access request, Deletion request, or Correction request as appropriate
- Postal address
- To be added at production deploy
- Response window
- Up to thirty days for routine requests, extendable by a further sixty days for complex matters with prior notice to you