Privacy policy

Last updated: 27th October 2026

This policy explains how Mindfort collects and uses your personal information when you use mindfort.co, join our founding waitlist or contact us.

Who we are

Mindfort is run by IP Interests Limited, a company registered in England 07259362, whose registered office is at 128 City Road, London, England, EC1V 2NX. We are the “controller” of your personal information.

If you have any questions about this policy or your information, email us at info@mindfort.co.

What we collect

When you join the founding waitlist

  • Your first name and email address
  • The country and time zone you’re in
  • Your answers to our questions: what you’d like Mindfort to help you change, which areas feel most relevant to you, how you feel about the expected price, whether you’d like to attend a live session, and anything else you’d like to know
  • A record of your consent: what you agreed to and when

Please don’t include medical or health details in your answers. If you do, we’ll delete them.

How you found us and your device

When you join the waitlist, we also record:

  • how you arrived at the page, for example from Instagram, TikTok, a Google search, an email or a link with a campaign tag
  • the web page you came from
  • your type of device, operating system and browser
  • your language setting

We don’t use this to identify you on other websites.

When you contact us

  • Your name, email address and anything you include in your message

When you visit the site

Our hosting and security providers process technical information such as your IP address, browser type and the pages you request. They use it to deliver the site and protect it from attacks and spam.

Why we use it and our lawful basis

PurposeLawful basis
Adding you to the founding waitlist and emailing you about Mindfort, the first cohort and the live introductory sessionConsent, which you give by ticking the box. You can withdraw it at any time.
Using waitlist answers to understand demand and shape the programme, pricing and live sessionsLegitimate interests: designing a programme that meets people’s needs
Understanding which channels (for example Instagram or Google) bring people to MindfortLegitimate interests: knowing where to spend our time and budget
Replying to your messagesLegitimate interests: responding to enquiries
Keeping the site secure and preventing spamLegitimate interests: protecting our site and visitors

We never sell your personal information, and we don’t use it for automated decisions that affect you.

Who we share it with

We use trusted service providers who process information on our behalf and only under our instructions:

  • Google (Google Workspace / Google Sheets) stores waitlist responses.
  • Rocket.net and Cloudflare host the website, deliver it securely and filter out malicious traffic. Cloudflare Turnstile checks that contact form submissions come from a person.
  • jsDelivr and cdnjs deliver some of the site’s code, which means they receive your IP address.

Some of these providers are based in, or process data in, the United States. Where they do, we rely on the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Agreement/Addendum, so your information stays protected.

We may also disclose information if the law requires us to.

How long we keep it

  • Waitlist: until you unsubscribe or ask us to delete it, and in any case no longer than 24 months after you join, unless you become a Mindfort member.
  • Messages to us: up to 12 months after we last correspond, unless they lead to an ongoing relationship.
  • Security logs: kept by our providers for short periods, in line with their own policies.

Your rights

You have the right to:

  • access the personal information we hold about you
  • correct it if it’s wrong
  • delete it
  • restrict or object to how we use it, including any use based on legitimate interests
  • receive a copy of it in a portable format
  • withdraw your consent at any time. Every email includes an unsubscribe link, or you can email us. This doesn’t affect anything we did before you withdrew.

To use any of these rights, email info@mindfort.co. We’ll reply within one month.

If you’re unhappy with how we’ve handled your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies and similar technologies

We keep cookies to a minimum.

NameProviderPurposeTypeDuration
__cf_bmCloudflareDistinguishes people from bots to protect the siteStrictly necessary30 minutes
cf_clearanceCloudflareRecords that a security check has been passedStrictly necessaryUp to 1 year
Cloudflare TurnstileCloudflareSpam protection on our contact formStrictly necessarySession
mf_attribution (stored in your browser)MindfortRemembers how you first found us, if you come back later and join the waitlistStatistics, only with your consent90 days

Strictly necessary cookies don’t need your consent. We only use mf_attribution if you accept statistics cookies. You can withdraw that at any time by clearing your browser’s storage for this site.

Children

Mindfort is intended for adults. We don’t knowingly collect information from anyone under 18.

Changes to this policy

We’ll update this page if anything changes, and change the date at the top.

GDPR and Privacy Policy

European Union GDPR (General Data Protection Regulations)

The EU GDPR is designed to help all of us have more control over our personal data, and how is it used.

Who does the information GDPR apply to?

Data subjects, being all visitors and users of any website who are members of the European Union, and therefore who submit personal data. [replace name]  is the data processor and data controller of this site. You can find out more about this law here.

Privacy Policy

Effective from 25th May, 2018

This Privacy Policy sets out how we use and protect information that you may provide when you use this website.  Your privacy is protected and important to us. If you provide identifiable personal information it will only be used to help us fulfil your project requirements.

[replace name]  is the company who collects any personal data submitted through [replace url] 

We may update this policy periodically, please check this page to ensure that you are in agreement with any changes.

What We Collect

Personal information, basically any data that can be used to identify or contact you is collected so we can service your requirements.  This could include your name, business name, address details, email, telephone numbers, or information pertaining to your exhibition stand requirements. You may also at times be asked to leave a message about your enquiry or project brief. Websites also collect your IP address through the use of Cookies (find out more about cookies below).

If you opted-in to our mailing list, you may receive occasional emails on important updates or service information. You have the right to opt-out or and have any personal details removed at any time, please email [replace email address]

What We Do With The Information We Collect

Information is saved until the enquiry is dealt with, and then archived with the project or on cloud based systems if you are an ongoing client. We also retain your contact details and information in the emails you have sent, but you can request to have your personal details deleted at any time.

We will not sell, distribute, or lease your personal information to third parties unless we have your express permission, or are required by law to do so. We may use your personal information to send you relevant information about services we offer, or information you need as part of the services we offer.

Data Security

In our continued commitment to ensuring that your information is secure and to prevent unauthorised access or disclosure, we have suitable physical, electronic and managerial procedures in place to safeguard and secure the information we collect online.

  • Data is stored on a secure cloud-based server or on a secure, password protected computer with limited user access.
  • Sending information over the internet is generally not completely secure, and we can’t guarantee the security of your data while it’s in transit. Any data you send is at your own risk.
  • We have procedures including 2FA, passwords, restricted access and other security features in place to keep your data secure once we receive it.
  • [replace name]  will NEVER pass on your personal data to third parties without first getting your explicit consent.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

  • Whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used for direct marketing purposes
  • If you have previously opted-in to a mailing list, or provided other information, you can find out what information we hold, and ask us to remove or not to use any of it, by writing to, or emailing [replace email address]
  • You may request details of personal information which we hold about you.
  • If you believe that any information we are holding on you is incorrect or incomplete, please write to, or email us as soon as possible at [replace email address]  We will promptly correct any information.

Google Analytics

User and Event Data Retention

User-level and event-level data associated with Google Analytics cookies is retained for 14 months and then automatically deleted.

IP Anonymization

I have implemented IP Anonymization, simply put, the last three digits of your IP address are set to zeros in memory shortly after being sent to the Analytics Collection Network. The full IP address is never retained, or written to disk.

Cookies

This site also uses Cookies, find out more or manage them here.