Privacy Policy

  • About this Privacy Policy

    Mindgard Limited, a company registered in England with company number 14120558 (“Mindgard”, “we”, “our” or “us”) is the ‘data controller’ of the personal data described below. Our address is: Second Floor, 34 Lime Street, London, EC3M 7AT

    This Privacy Policy below explains why and how we process your personal data, whether you are:

    A visitor to our website (https://mindgard.ai/), or our social media pages;

    Part of an account management or IT support team at an organisation we sell our products and services to (including where we communicate with you via email or telephone). This organisation (“your organisation”) could include your employer or other organisation or entity with whom you are connected, who has purchased a license to deploy Mindgard Copilot, or use of our Mindgard Academy via our Marketplace offering, subject to the applicable Mindgard Academy End User License Agreement (“EULA”).

    In this Privacy Policy, “you” refers to any individual whose personal data we process in accordance with the General Data Protection Regulation, as implemented in the United Kingdom where Mindgard is established (the “GDPR”).

    This Privacy Policy was last updated in November 2023. We reserve the right to update this Privacy Policy from time to time. Any updates will be published at https://mindgard.ai/.
  • Personal data we may collect and the purposes for which we use that data

    Information you provide to us – you may provide us with personal data, if you are an existing or potential account manager / IT team member within your organisation, sign up for a demo through our website, apply for an open job position through our website, and when you contact us through any other channel to enquire about our products and services. This data may include your name, contact details (email address and telephone number) and information pertaining to your organisation.

    We use this information to communicate with you about our products and to provide our services to your organisation, as is necessary for the performance of our contract with your organisation and on the basis of our legitimate interest in promoting our business (via our website and social media pages and, occasionally, via direct marketing to your organisation, e.g. where we send you communications about new product features, etc.).

    Information we collect automatically – we may collect data about your device (including your IP address) when you visit our website and use this to facilitate your interactions with our website or our social media pages, as is necessary for our legitimate interest in providing a fully functioning website.

    When you visit or log in to our website, cookies  and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email. You may opt out of receiving this advertising by visiting https://app.retention.com/optout
  • When we may share your personal data with others

    We may share your personal data with third parties in the following circumstances:

    Our employees, contractors and/or professional advisers, for the purpose of connecting you to the right members of staff who can help you with enquiries about our products and services, to improve those products and services, to obtain advice from our professional advisers, or, if necessary, to enforce any applicable terms and conditions or agreements for our products and services;

    If we are under a duty to disclose or share your personal data in order to comply with any legal obligation (for example, if required to do so by a court order or for the purposes of prevention of fraud or other crimes);

    We may also transfer your personal information to a third party as part of a sale of a part or all of our business and assets to any third party or as part of any business restructuring or reorganization process.

    If we do share your personal data with a third party, we will take the necessary steps to ensure that your privacy rights are protected in accordance with this Privacy Policy.
  • How we keep your personal data secure (including transference outside the UK / EEA)

    In relation to the limited personal data for which we are a data controller (regarding website visitors, account managers and IT staff within your organisation), we host the majority of such data on secure servers located in the UK / EEA where personal data is protected by robust data protection laws, including the GDPR. We take all appropriate technical and organisational measures to ensure the effective and secure processing of your personal data.

    Where we use third parties to process personal data on our behalf, we ensure that appropriate agreements are in place that adhere to the same data security standards that we have at Mindgard. You can find out more about the protection of your personal data (including when it is transferred outside the UK / EEA) by contacting us using the contact details below.
  • How long we store your personal data

    Our current data retention policy is to delete or destroy (to the extent we are able to) personal data in accordance with the following rules:

    Records related to contracts – seven years from either the end of our contract with your organisation or the date you last used our products or placed an order with us; and

    Marketing and sales contact records – four years from the date of your last interaction with us, if your organisation has not proceeded to purchase our products or services.

    For any category of personal data not specifically defined in this Privacy Policy, and unless otherwise specified by applicable law, we will typically retain such information for at least six years from date of receipt. The retention periods stated in this notice can be prolonged or shortened as may be required (for example, where archived copies of records are required for legal, tax or regulatory purposes).
  • Your privacy rights

    With respect to your personal data for which we are the data controller, the GDPR gives you rights to:

    - Request access to, and copies of, the personal data that we hold about you;
    - Require us to correct the personal data we hold about you if it is incorrect;
    - Require us to erase your personal data, in certain circumstances;
    - Require us to restrict our data processing activities, in certain circumstances;
    - Where our processing is based on your consent, you may withdraw that consent;

    Where our processing is carried out by automated means, you may request information on the personal data we hold about you in a reasonable format specified by you (including for the purpose of you transmitting that personal data to another data controller); and

    To object, on grounds relating to your particular situation, to any of our processing activities where you feel this has a disproportionate impact on your rights.

    Please note that these rights are not absolute, and we may be entitled or required to refuse requests where exceptions apply. If you wish to exercise any of these rights, please contact us using the contact details below.

    If you are not satisfied with how we are processing your personal data, you can make a complaint to a data protection supervisory authority in the UK / EEA, including the data protection regulator in the UK / EEA country where your organisation is based. For the UK, this is the Information Commissioner’s Office (“ICO”). The ICO’s contact details can be found on their website at: https://ico.org.uk/.
  • Contact us

    If you would like to contact us with your views about our privacy practices, or with any enquiry or complaint relating to your personal information or how it is processed by Mindgard, you can do so using the details below:

    Email: info@mindgard.ai;

    Post: Second Floor, 34 Lime Street, London, EC3M 7AT