Myndy is committed to ensuring that your privacy is protected, and this policy sets out how we use and protect any information that you give Myndy when using this website or making use of our services.

Should we ask you to provide certain information by which you can be identified then you can be assured that it will only be used in accordance with this privacy statement.

Myndy may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from November 2020.

Personal Data Collected

Myndy provides an online experience for consumers and local businesses to buy or gift digital vouchers to friends and family with a focus on supporting your independent local businesses, services and trades

The data we collect is limited to only the information we need to provide and fulfil these services and will be processed as a data controller. The personal information which we use will be taken when:

• you enquire to use our services
• you contact us or use our website
• you register as a ‘Lister’ and provide a wish list of gifts or local business you like
• you register as a ‘Gifter’ to purchase the digital vouchers that you will gift or donate
• you register as a Business to offer your goods and services to our Listers
• you are a recipient of a donated gift or voucher
• you enquire, apply to join or work for Myndy

We may collect the following types of information:

Listers

• your name and email address
• details of our services that you have used and your wish list of gifts or local business you like
• your IP address and digital or network stats

Gifters

• your name and email address
• your organisation name
• details of our services that you have used or gifted
• the facilitation of . Details of these transaction are not stored by Myndy
• your IP address and digital or network stats

Recipient of gifts

• your name and email address.
• details of our services that you have been gifted
• your IP address and digital or network stats

Businesses

• your name and email address
• your organisation name
• your IP address and digital or network stats

Myndy do not collect any special category data for processing in our own right as a data controller and to use our site you must be of a minimum of 13 years of .

Why do we collect this information?

We collect your personal information:

• to provide you with services that we promote
• to allow digital vouchers to be purchased and gifted to you under our contracted agreements
• for internal record keeping and the administration of the services to you as a Lister, Gifter, Recipient or a Business
• for our legitimate interests in the relationship we have with you as a someone who has enquired about the services or requested more information from us through our contact us or chat box pages
• to meet our legal and regulatory obligations

We may also periodically send promotional emails about new local businesses, products, special offers or other information which we think you may find interesting using the email address which you have provided.

How do we collect this information?

We collect personal information:

• directly from you: e.g. when you register to receive our services; enquire on our website
• directly from businesses g where you wish to make your products or services available to be purchased
• from publicly available sources: social media, internet services.

We are committed to keeping your information up to date as far as is reasonably possible. However, if you believe that we have made an error, then please contact us as we have outlined below and we will use reasonable endeavours to correct.

Keeping your information safe and secure.

Your personal data is importation and we are committed to ensuring that it is secure and protected from being inappropriately or accidentally accessed, used, shared or destroyed, and against it being lost.

In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect and will only provide access to your data to staff who require access.

Sharing your data with Third parties

Access to your personal information is only allowed when required by the law or is required as part our fulfilling our service obligations.  We do not, and will never, sell or share your personal information with other third parties.

For our general data processing activities, we use the following to help us administer and monitor the services we provide:

• for the online platform and website where we store details of our Listers and Businesses
• for payroll and financial accounting
• to help us promote Myndy to Listers, Gifters and Business who have registered an interest in the services we provide
• for the administration of payments from Gifters to our Businesses using Stripe. Note; Myndy does not hold or process your payments details. This is all administered by Stripe
• for any legal guidance in the provision of our services

In our normal business activities, we do not share data outside the EEA. In any circumstances where this may become necessary in the future it will be undertaken in full compliance with the legal requirements

How long do we keep personal information?

We will only keep your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

In general terms we will retain the data:

• For our Listers for up to 12 months after the last entry or update in the platform (or sooner should you require).
• For our Gifters up to 12 months after the last completed transaction
• For our Businesses until such time as you wish your details to be removed subject to our periodic 24 monthly internal checks and processes
• For our staff the records are held in line with HMRC requirements for up to 6 years after you leave us

Marketing & Market Research

Myndy will only undertake marketing activity where you have given your consent or where there is a genuine business legitimate interest in the information we will provide that we know will be interest or benefit for you.

We may make unsolicited approaches and calling to new potential businesses where our Listers have requested or nominated your business. We will only complete these approaches using information held within our records or using information drawn from publicly-available sources. These approaches are made in a fully complaint manner as governed by PECR (the Privacy of Electronic Communications Regulation), with the contacts being given the option to opt out from such contact

Any changes to our marketing activities will be up dated in this Policy and we will ensure that the activity we undertake will be compliant with UK and European data protection regulations

How we use Cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual.

The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

For more details of the cookies Myndy will use please refer to our Cookies Policy.

Links to Other Websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

In addition, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the policy of that third-party site.

Controlling your personal information (Your Rights)

It is important that the personal information we hold about you is accurate and current. If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect.

Under certain circumstances, you have rights under UK Data Protection Act 2018 (DPA) and the EU General Data Protection Regulation 2016/679 (GDPR) in relation to your personal information. You may have the right to:

• access information held about you. Your right of access can be exercised in accordance with data protection law;
• object to us processing, or ask us to restrict our processing of your personal information for any of the purposes listed in this policy, at any time.
• ask us to update and correct any out-of-date or incorrect personal information that we hold about you free of charge.
• ask us to erase or delete your personal information (in certain circumstances). We will do our best to respond to such requests, but these are subject to certain limitations such as legal requirements
• Request a transfer of your personal information (in certain circumstances).

If you wish to exercise any of the above rights or to review, verify, correct or question anything detailed in this policy or are unhappy with any aspect of how we use your data please contact us at [email protected] or by writing to Data Protection Lead, Myndy c/o Noisegate Media Ltd. Unit 19 Rigby Close, Heathcote Industrial Estate, Warwick CV34 6TH.  Alternatively, you can telephone us on 01926 330135

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Myndy is a trading name of Noisegate Media Ltd who are a registered Data controller with the Information Commissioner’s Office our ICO registration number is: ZA299273