Privacy Policy

Official Mind Profile ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share information about you when you use our website at officialmindprofile.com and our assessment services.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services you confirm you have read and understood this policy.

1. Information We Collect

Information you provide directly

• Email address — collected when you submit your results or create an account
• Name — collected at checkout
• Payment information — processed securely by Stripe; we do not store card numbers
• Assessment responses — your answers to our tests and questionnaires

Information collected automatically

• IP address — used for currency detection and fraud prevention
• Browser type and device — for technical compatibility
• Pages visited and time spent — for improving our service
• Cookies and similar technologies — see our Cookie Policy

2. How We Use Your Information

We use your personal data for the following purposes:

• To provide and deliver our assessment services and results
• To process payments and manage your subscription
• To send you your results and account-related communications
• To detect and prevent fraud and abuse
• To improve our assessments and platform
• To comply with our legal obligations

Legal basis for processing

• Contract performance — processing necessary to fulfil your subscription
• Legitimate interests — fraud prevention, security, service improvement
• Consent — for any optional marketing communications (you may withdraw consent at any time)
• Legal obligation — where required by law

3. Assessment Data

Your assessment responses and results are personal data. We use this data solely to generate your results and improve our assessment algorithms. We do not share your individual assessment results with any third party without your explicit consent.

Please note: our assessments are for self-discovery and informational purposes only. They do not constitute a clinical diagnosis. We are not a healthcare provider and your results should not be used as a substitute for professional medical or psychological advice.

4. Sharing Your Data

We do not sell your personal data. We share data only with trusted third-party service providers who help us operate our platform:

• Stripe — payment processing (subject to Stripe's own Privacy Policy)
• Resend — transactional email delivery
• Hosting provider (IONOS) — server infrastructure

All third-party processors are contractually required to handle your data securely and in accordance with UK GDPR.

We may disclose your data if required to do so by law, court order or regulatory authority.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you cancel your subscription, we will retain your data for up to 2 years for legal and accounting purposes, after which it will be securely deleted.

You may request deletion of your data at any time (see Your Rights below).

6. Cookies

We use cookies to maintain your session, remember preferences and understand how our site is used. For full details see our Cookie Policy.

7. International Transfers

Our service providers may process data outside the UK and EEA. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data in line with UK GDPR requirements.

8. Your Rights

Under UK GDPR you have the following rights:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — request we limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at hello@officialmindprofile.com. We will respond within 30 days.

If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The "last updated" date at the top of this page will always reflect the most recent version.