Privacy Policy

Section 1

Who we are

Money Mind Shift (“we”, “us”, “our”) is a free financial wellbeing website operated by an individual based in England. The website is accessible at moneymindshift.co.uk.

We are committed to protecting your personal data and being transparent about how we use it. This policy explains what data we collect, why we collect it, and what your rights are under UK data protection law — specifically the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Section 2

What data we collect

Data you give us directly — when you use our contact form, you may provide:

• Your name (first name only if you prefer)
• Your email address
• The content of your message

Data collected automatically — when you visit our website, basic technical data may be collected automatically by our hosting provider (WordPress.com) and any analytics services we use, including:

• IP address
• Browser type and version
• Pages visited and time spent on them
• Referring website
• Device type

Data we do not collect — we do not collect payment information, government identifiers, or sensitive personal data as defined under UK GDPR.

Section 3

How we use your data

We use the data we collect only for the following purposes:

• To respond to contact form enquiries — your name and email address are used solely to reply to your message. We do not add you to any mailing list without your explicit consent.
• To improve the website — anonymised, aggregated analytics data (such as which pages are most visited) helps us understand how people use the site and where we can make improvements.
• To maintain website security — technical data such as IP addresses may be processed by our hosting provider to protect against malicious activity.

We will never use your data for marketing purposes without your explicit consent, and we will never sell your data to any third party.

Section 4

Legal basis for processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Legitimate interests — for analytics and website security, where our legitimate interest in running a functional and secure website is balanced against your rights.
• Consent — where you voluntarily submit a contact form, you are providing data to receive a response. You may withdraw this at any time by contacting us.
• Legal obligation — if we are ever required to retain or share data by law, we will do so only to the extent required.

Section 5

Cookies and tracking

Cookies are small text files placed on your device when you visit a website. Our website may use the following types of cookies:

• Essential cookies — required for the website to function. These cannot be disabled.
• Analytics cookies — if we use a service such as Google Analytics, these cookies help us understand how visitors use the site. No personally identifiable information is collected. You may opt out via your browser settings or a cookie management tool.
• WordPress platform cookies — as our site is hosted on WordPress.com, their platform may set cookies as part of normal operation. See the Automattic Privacy Policy for details.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling certain cookies may affect how the website functions.

If we add an analytics or cookie management tool in future, this policy will be updated to reflect that.

Section 6

Third parties and data sharing

We do not sell, trade or rent your personal data to third parties. We may share data only in the following limited circumstances:

• WordPress.com (Automattic) — our hosting provider processes data as part of providing our website infrastructure. See their privacy policy.
• Contact form providers — if you submit a contact form, the data may be processed by our form plugin provider (e.g. WPForms or Contact Form 7). These services process data in accordance with their own privacy policies.
• Analytics providers — if we use Google Analytics or similar, anonymised usage data may be processed by those providers. We will update this policy if and when we add such services.
• Legal requirements — we may disclose your data if required to do so by law or in response to a valid legal request.

Where third-party services are used, we take reasonable steps to ensure they handle data appropriately and in compliance with UK GDPR.

Section 7

How long we keep your data

• Contact form submissions — we retain the content of messages only as long as necessary to respond to and resolve your enquiry, and no longer than 12 months from the date of submission.
• Analytics data — anonymised analytics data may be retained for up to 26 months, in line with standard analytics platform defaults.
• Technical logs — server logs maintained by our hosting provider are typically retained for a short period (usually 30–90 days) in line with their standard practices.

Once data is no longer needed for the purpose for which it was collected, we delete it securely.

Section 8

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate or incomplete data.
• Right to erasure — you can ask us to delete your personal data in certain circumstances.
• Right to restrict processing — you can ask us to pause processing of your data in certain circumstances.
• Right to data portability — you can request your data in a portable, machine-readable format.
• Right to object — you can object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 12. We will respond within one calendar month.

You also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113.

Section 9

Data security

We take reasonable steps to protect your personal data from unauthorised access, loss or disclosure. These measures include:

• Using HTTPS (SSL encryption) across the entire website
• Relying on reputable hosting and form providers who maintain their own security standards
• Not storing financial data entered into our tools at any point

However, no method of transmission over the internet is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security.

Section 10

Children’s privacy

Money Mind Shift is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

Section 11

Changes to this policy

We may update this privacy policy from time to time to reflect changes in the law, our practices or the services we use. When we do, we will update the “last updated” date at the top of this page.

We encourage you to review this policy periodically. Continued use of the website following any changes constitutes your acceptance of the updated policy.

Section 12

How to contact us

If you have any questions about this privacy policy, or wish to exercise your data rights, please use the contact form on our Contact page.

We aim to respond to all data-related requests within one calendar month as required by UK GDPR.