Privacy Notice

Who we are

Patricia Elliot (trading as MindCircles) operates MindBites and is the data controller for the personal data described here. Contact: pat@mindcircles.co.uk.

What we collect and why

• Account details (email address, password, or your Google sign-in identity) — to create your account and remember which meditations you own. Legal basis: performance of our contract with you.
• Purchase records (which meditation, order reference, date, status) — to give you access to what you paid for and handle refunds. Legal basis: contract.
• Messages you send us (contact form, email, chat assistant) — to answer you. Legal basis: our legitimate interest in supporting customers.
• Technical and usage data (IP address, device and browser type, pages viewed, error logs) — to keep the service secure, prevent fraud and improve it. Legal basis: legitimate interests.

Card details are never seen or stored by us — they are collected directly by Paddle.

Who we share it with

• Paddle, our Merchant of Record, for the sale, payment, invoicing and tax compliance of your order.
• Service providers who host the app, store the videos, send our emails and power the chat assistant, acting on our instructions.
• Professional advisers and authorities where we are legally required to disclose information.

We never sell your personal data.

International transfers

Some of our providers process data outside the UK/EEA. Where they do, we rely on UK adequacy decisions or Standard Contractual Clauses with appropriate safeguards.

How long we keep it

Account and purchase records are kept while your account is open and for up to 7 years afterwards where tax law requires it. Support messages are kept for up to 2 years. Technical logs are kept for up to 12 months. After that, data is deleted or anonymised.

Your rights

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it elsewhere, and you can withdraw consent where we rely on it. Email pat@mindcircles.co.uk and we will respond within one month. You may also complain to the Information Commissioner’s Office (ico.org.uk).

Security

We use encryption in transit, access controls and audited hosting to protect your data, and only give access to those who need it.

Cookies and similar technology

We use essential storage to keep you signed in and to remember your purchases. Our payment provider sets cookies needed to complete checkout. We do not run advertising cookies. You can clear or block cookies in your browser settings, but sign-in and checkout will stop working.