Privacy Policy

Last updated: March 2026

Mind and Method Academy Ltd ("we", "us", "our") is committed to protecting the privacy of individuals who visit our website, register for our programmes, or otherwise engage with our services. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:

Mind and Method Academy Ltd
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Company Registration Number: 16932969
ICO Registration Number: ZC073024
Email: hello@mindandmethodacademy.com

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: first name, last name
• Contact data: email address, telephone number
• Professional data: organisation name, job title or role
• Enquiry data: the content of messages submitted through our contact form
• Programme data: registration details, attendance records, programme progress, and feedback provided during or after participation in our programmes
• Technical data: IP address, browser type, operating system, and browsing behaviour on our website (collected via cookies — see our Cookie Policy)

3. How We Collect Your Data

We collect personal data through the following methods:

• When you complete our website contact form
• When you register for or participate in one of our programmes
• When you correspond with us by email
• When you interact with our website (via cookies and similar technologies)
• When you engage with us on social media platforms

4. How We Use Your Data

We process your personal data for the following purposes:

• To respond to enquiries submitted through our website or by email
• To deliver and administer our education programmes
• To communicate with you about programme updates, schedules, and materials
• To process payments for our services
• To improve our website and services based on usage patterns
• To comply with legal obligations

5. Legal Basis for Processing

We rely on the following legal bases under Article 6 of the UK GDPR:

• Consent: Where you have provided clear consent for us to contact you or process your data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract (e.g., delivering a programme you have enrolled in)
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights (e.g., improving our services, responding to enquiries)
• Legal obligation: Where processing is necessary to comply with a legal requirement

6. Data Sharing

We do not sell your personal data to third parties. We may share your data with:

• Service providers who assist in delivering our programmes and operating our website (e.g., email service providers, payment processors, hosting providers)
• Professional advisers such as accountants or legal advisers, where necessary
• Regulatory authorities where required by law

All third-party service providers are required to process your data in accordance with applicable data protection law and our instructions.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy. Enquiry data is retained for 24 months from the date of the enquiry. Programme participant data is retained for 36 months following the end of the programme. Financial records are retained for 7 years in accordance with HMRC requirements.

8. Your Rights

Under the UK GDPR, you have the following rights:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw consent at any time

To exercise any of these rights, please contact us at hello@mindandmethodacademy.com. We will respond to your request within 30 days.

9. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Where your data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements.

11. Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.