Privacy Policy

1. Introduction

Mindcraft Tech Ltd, trading as Mindcraftech (“Mindcraftech”, “we”, “us” or “our”), is committed to protecting personal information. This Privacy Policy explains how we collect, use, retain and share personal information when you visit our website, complete MindAssess™, submit an enquiry, apply for a role or otherwise interact with us.

We are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). By using our website, you confirm that you have read and understood how we handle your personal data.

2. Who We Are

Company Name: Mindcraft Tech Ltd.

Trading As: Mindcraftech.ai

Registered Office: 21 Heath Drive, Romford, Essex, RM2 5QH, United Kingdom

Company Number: 16363234

Registered In: England and Wales

Contact Email: consult@mindcraftech.ai

We act as the Data Controller for personal data collected through our website and services.

3. Data Protection Officer / Privacy Contact

We have not appointed a statutory Data Protection Officer as we are not required to do so under UK GDPR. All privacy queries, data subject requests, and complaints should be directed to: consult@mindcraftech.ai.

4. What Personal Data We Collect

We may collect and process the following categories of personal data:

•Identity Data: name, job title, company name

•Contact Data: email address, telephone number, postal address

•Technical Data: IP address, browser type, device information, operating system

•Usage Data: pages visited, time spent on site, referral source, interactions with our AI Assessment tool

•Marketing Data: preferences in receiving communications from us

•Enquiry Data: information you submit via our contact forms or AI assessment tool

Assessment Data

Information and responses provided when completing MindAssess™, including organisational characteristics, AI-readiness information, priorities and assessment responses.

Recruitment Data

Information submitted when applying for opportunities, including CV information, employment history, qualifications, skills and contact details.

5. How We Collect Your Data

We collect data directly from you when you: complete a contact or enquiry form; take our AI assessment; subscribe to communications; or otherwise interact with our website. We also collect data automatically through cookies and similar tracking technologies (see Section 9).

6. Legal Basis and Purpose for Processing

We process your personal data under the following lawful bases:

•Consent — where you have given clear consent, e.g. for marketing communications or non-essential cookies

•Legitimate Interests — to respond to enquiries, improve our website and services, and conduct business development, provided this does not override your rights and interests

•Contract — where processing is necessary to perform a contract with you or take steps prior to entering into one

•Legal Obligation — where we must comply with a legal or regulatory requirement

Activity	Purpose
Contact enquiries	Respond to enquiries and business discussions
MindAssess™	Generate assessment outputs and relevant follow-up
Recruitment	Process applications and communicate with candidates
Security	Protect the website and systems
Analytics	Understand website usage
Marketing	Provide relevant communications where permitted

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

•Enquiries: generally retained for up to 24 months from the last contact.

•Assessment Data: generally retained for up to 24 months from completion of the assessment.

•Recruitment applications: generally retained for up to 24 months after the recruitment process concludes.

•Customer and contract records: retained for the duration of the customer relationship and for any applicable statutory or contractual retention period.

•Technical and security logs: generally retained for up to 24 months where required for security, investigation, and system maintenance.

Actual retention periods will be confirmed and inserted in accordance with company policy.

8. How We Share Your Data

We may share your personal data with:

•Trusted third-party service providers who support our website hosting, analytics, email, and CRM operations, under appropriate data processing agreements

•Professional advisers including lawyers, auditors, and accountants where necessary

•Regulatory or governmental bodies where required by law

We do not sell your personal data to third parties.

9. International Data Transfers

Some of our service providers or personnel may be located outside the UK/EEA, including in India. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), UK-approved Standard Contractual Clauses (SCCs), or transfers to jurisdictions covered by adequacy regulations, in accordance with UK GDPR Chapter V.

10. Cookies and Tracking Technologies

You can choose to Accept All cookies, Reject Non-Essential cookies, or Manage Preferences through our cookie controls. You can manage or withdraw consent at any time through the Cookie Settings link in the website footer or through your browser settings. Disabling certain cookies may affect website functionality.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including encryption, access controls, and regular security reviews.

12. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours where required, and will inform affected individuals without undue delay where the breach is likely to result in a high risk to them.

13. Your Rights Under UK GDPR

You have the right to:

•Access the personal data we hold about you

•Request correction of inaccurate data

•Request erasure of your data ("right to be forgotten")

•Object to or restrict processing

•Request data portability

•Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at consult@mindcraftech.ai. We will respond within one month as required by UK GDPR.

14. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the opportunity to address your concerns directly first — please contact us at consult@mindcraftech.ai.

15. Automated Processing and MindAssess™

MindAssess™ may use automated logic to generate indicative scores, observations or recommendations based on information provided by users. These outputs are designed to support business decision-making and do not produce legal or similarly significant decisions about individuals without appropriate human involvement.

You may request human review of any automated output by contacting consult@mindcraftech.ai.

16. Children's Privacy

Our website and services are intended for business use and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

17. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date.

18. Contact Us

Mindcraft Tech Ltd. (trading as Mindcraftech.ai)