Privacy Policy

1. Who we are

The Mindful Foundation is a registered charity in England and Wales (Charity No. 1209439). We are committed to preventing domestic abuse and harmful behaviour through trauma-informed education and early intervention.

For the purposes of UK data protection law, The Mindful Foundation is the Data Controller of personal information collected through this website.

If you have any questions about this policy or how we handle your data, please contact us at info@themindfulfoundation.org.

2. What personal data we collect

We only collect personal data that you voluntarily provide to us. This includes:

3. How we use your data

We use the personal data you provide solely to:

• Respond to your enquiry or request for support
• Connect you with the right member of our team
• Improve our services and communications where you have given consent

We will never use your data for unsolicited marketing, and we will never sell your data to third parties.

4. Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:

• Consent — where you have ticked the consent box on our contact form.
• Legitimate interests — to respond to your enquiry and manage our charitable activities, where this does not override your rights.

5. How long we keep your data

We retain contact form submissions for up to 12 months after your enquiry is resolved, after which it is securely deleted unless we are required by law to retain it longer.

If you request that we delete your data earlier, we will do so unless we are legally obliged to retain it.

6. Who we share your data with

We do not sell or share your personal data with third parties for their own purposes. We use the following trusted service providers to operate our website, who process data only on our behalf:

• Netlify — website hosting and form submission handling (USA, EU-US Data Privacy Framework)
• Sanity — content management system (USA, standard contractual clauses)
• Google — website analytics (Google Analytics) and advertising measurement (Google Ads), used only where you have given consent (USA, EU-US Data Privacy Framework)

All providers are contractually required to protect your data and may not use it for any other purpose.

7. Cookies

We use essential cookies that are necessary for the site to function. These are always active and do not require your consent.

With your consent, we also use analytics cookies (Google Analytics) to understand how visitors use our site, and advertising cookies (Google Ads) to measure the performance of our campaigns. These are not set unless you accept them via our cookie banner.

You can withdraw your consent at any time by clearing this site's cookies and site data in your browser, which will prompt the cookie banner to appear again on your next visit. Declining non-essential cookies will not affect your ability to use the site.

8. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit how we use your data
• Portability — request your data in a portable format
• Objection — object to our processing of your data based on legitimate interests
• Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at info@themindfulfoundation.org. We will respond within 30 days.

9. How we protect your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data transmitted via our contact form is encrypted in transit using HTTPS.

10. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at info@themindfulfoundation.org and we will do our best to resolve your concern.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or by calling 0303 123 1113.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page will always reflect when it was last revised. We encourage you to review this page periodically.