This policy explains how Grateful Minds Ltd ("we", "us", "our") collects, uses and protects your personal data, and how we use cookies. Grateful Minds Ltd is a company registered in England and Wales (company number 16984830), registered office 15 Quantock Close, Eastbourne, BN23 8EU, and is the data controller of your personal data.

Contact: alena@grateful-minds.com

Information we collect

  • Information you give us: your name, email address, phone number, city/billing address, and payment details (processed securely by our payment providers — we do not store your full card details). You may give us this when you subscribe, enquire, book or buy.

  • Quiz and assessment responses: when you complete a dosha or wellbeing self-assessment, we collect the answers you give (see "Health-related information" below).

  • Information collected automatically: device and usage information such as your browser, IP address, time zone, the pages you visit, referring sites and how you interact with our site (via cookies and similar tools — see "Cookies").

Health-related information (special category data)

Our self-assessment quizzes may collect or infer information relating to your wellbeing or general health. Under UK GDPR this can be "special category" data, which has extra protection. Where we process it, we rely on your explicit consent, which you can withdraw at any time. You never have to provide this information, and you can use much of our site without it.

Our lawful bases for processing

We only process your data where we have a lawful basis:

  • Consent — e.g. to send you our newsletter, to set non-essential cookies, or to process wellbeing/quiz information.

  • Contract — to provide a service, course or product you have booked or bought.

  • Legal obligation — e.g. to keep records for tax purposes.

  • Legitimate interests — e.g. to improve our website and services, prevent fraud and understand how our site is used, where this does not override your rights.

How we use your information

  • to provide and improve our services, courses and content;

  • to process bookings and payments and deliver what you've purchased;

  • to respond to enquiries and provide support;

  • to send newsletters or updates where you've subscribed;

  • to understand and improve how our website is used.

We never sell or rent your personal data.

Who we share it with

We share data only with trusted providers who help us run our business, and only as far as needed, for example:

  • email/newsletter platform (e.g. Mailchimp)

  • website analytics (e.g. Google Analytics)

  • payment processors (e.g. Stripe, PayPal)

  • advertising tools (e.g. Meta Pixel), where you have consented

(Please confirm or adjust this list to the tools you actually use.)

We may also disclose data where required by law, or to protect our rights or the safety of others.

Cookies

Cookies are small text files placed on your device to help a website work, remember your preferences and understand how it is used. We use:

  • Essential cookies — needed for the site to function and be secure. These cannot be switched off.

  • Functional cookies — remember your preferences.

  • Analytics cookies — help us understand site usage (e.g. Google Analytics).

  • Marketing / third-party cookies — set by tools such as Meta Pixel, embedded videos or affiliate links.

Non-essential cookies (analytics and marketing) are only set with your consent. You can accept or decline these when prompted, and you can manage or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site working. General guidance is available at aboutcookies.org.

International transfers

Some of our providers are based outside the UK (for example in the US or Canada). Where your data is transferred outside the UK, we take steps to ensure it is protected in line with UK GDPR (for example, appropriate safeguards or an adequacy decision).

How long we keep your data

We keep your personal data only for as long as needed to provide our services, comply with legal obligations (such as tax records), resolve disputes and enforce our agreements, then delete or anonymise it.

Your rights

Under UK and EU GDPR you have the right to:

  • access the personal data we hold about you;

  • ask us to correct or delete it;

  • withdraw consent at any time;

  • object to processing based on legitimate interests;

  • ask for a copy of your data in a portable format;

  • restrict processing in certain circumstances.

To exercise any of these, email alena@grateful-minds.com. You also have the right to complain to the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113 — though we would appreciate the chance to put things right first.

Children

Our website and services are not directed at children under 18, and we do not knowingly collect their data. If you believe a child has given us their information, please contact us and we will delete it.

Security

We use appropriate technical and organisational measures to protect your data. However, no method of transmission over the internet can be guaranteed completely secure.

Changes to this policy

We may update this policy from time to time. Changes are posted here with an updated "Last updated" date. Continued use of our website means you accept the updated policy.

Contact

Grateful Minds Ltd · alena@grateful-minds.com

Privacy Policy & COOKIES

Last updated: 8/6/26