How we handle your personal data.

Last updated: 10 October 2026

Who we are

This website is operated by Masters of Mindset Ltd ("we", "us", "our"), a company registered in England and Wales under company number 12505228, with its registered office at Parkview, 82 Oxford Road, Uxbridge, England, UB8 1UX.

We are the data controller for personal data collected through this website. That means we decide why and how it is used. For any privacy matter, including a request to exercise your rights, contact us at [email protected].

Scope of this policy

This policy covers personal data collected through this website, whether you send it to us by email or your browser sends it automatically when you visit. It is written for the UK GDPR and the Data Protection Act 2018.

It does not cover personal data we hold about clients, candidates or employees under a separate agreement, or websites that we link to but do not operate. Those are covered by their own notices.

What we collect

We collect personal data in two ways.

• By email. When you email us at one of the addresses on our contact page we receive your name, your email address, and anything you choose to write in your message.
• Automatically. Like most websites, our hosting provider records standard technical data needed to serve and protect the site, such as your IP address, browser and device type, the pages you request, and the date and time of your visit.

You do not need to create an account to use this website, and we do not ask for any special category data. Please do not include sensitive information in a message unless we have asked for it.

How we use it and our lawful basis

UK data protection law requires us to have a lawful basis for each use of your personal data. We use it as follows.

• To respond to and manage your enquiry. Our lawful basis is our legitimate interest in dealing with enquiries sent to us. Where your enquiry is about working with us, we also rely on taking steps at your request before entering into a contract.
• To operate, maintain, secure and improve the website. Our lawful basis is our legitimate interest in running a safe and reliable website, including detecting and preventing abuse.
• To comply with a legal obligation, where we are required to keep or disclose information by law.

Where we rely on legitimate interests, we have considered the effect on you and we believe our interests are not outweighed by your rights. You can object to this processing at any time (see the section on your rights below).

We do not use your personal data for marketing unless you have asked us to contact you. We do not sell personal data, and we do not use it for automated decision making or profiling.

Service providers

We use a small number of trusted third parties to run the website. They act on our instructions as data processors.

• Hosting. The site is hosted by Krystal Hosting Ltd, a company registered in England and Wales, on servers located in the United Kingdom. Krystal processes server log data to serve and protect the site.
• Email. Messages you send us by email, and our replies, are handled by our email provider.

The fonts and scripts used on this site are served from our own domain, so loading the site does not share your data with any other third party. We may also disclose personal data where the law requires it, or to professional advisers under a duty of confidentiality.

International transfers

The website is hosted in the United Kingdom and the personal data described in this policy is held in the United Kingdom.

If we ever use a provider based outside the UK, any transfer of personal data will be protected by safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and we will update this policy to say so.

How long we keep it

We keep email enquiries for as long as we need them to deal with your enquiry and for a reasonable period afterwards for our records. If an enquiry leads to a working relationship, the information becomes part of that relationship and is kept under the terms that apply to it.

Technical log data is retained by our hosting provider for a short period for security and operational purposes.

Your rights and the ICO

Under the UK GDPR you have the following rights in relation to your personal data.

• The right to be informed about how your data is used, which this policy is intended to meet.
• The right of access to the personal data we hold about you.
• The right to have inaccurate data corrected and incomplete data completed.
• The right to erasure in certain circumstances.
• The right to restrict processing in certain circumstances.
• The right to data portability for data you have given us that we process by automated means on the basis of a contract or consent.
• The right to object to processing based on our legitimate interests, and to object at any time to direct marketing.
• Rights in relation to automated decision making and profiling. We do not carry out either on this website.

To exercise any of these rights, email [email protected]. We will not normally charge a fee and we will respond within the time allowed by law. We may need to confirm your identity before acting on a request.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk. We would welcome the chance to address your concern first, so please contact us before you do.

Links to other websites

This website may contain links to websites operated by other organisations. We are not responsible for the privacy practices or content of those websites. When you follow a link, the privacy notice of the website you arrive at applies.

Changes of business ownership

If we sell or transfer all or part of our business, or merge with another organisation, personal data we hold may be transferred to the new owner so that they can continue to deal with your enquiry. The new owner will be bound by this policy, or by one offering at least the same level of protection, and we will tell you if a transfer affects you.

Changes to this policy

We may update this policy from time to time to reflect changes in the website, our providers or the law. The current version is always available on this page, with the date it was last updated shown at the top. If a change materially affects how we use your personal data, we will take reasonable steps to bring it to your attention.