Privacy

Privacy Policy

Last updated: 29 July 2026

This policy explains what personal data is collected when you use this website or request a free resource, why it is collected, who it is shared with, how long it is kept, and how to have it deleted.

The data controller is:

Mindset Rx'd Ltd 14 High Street, Saffron Walden, Essex, England, CB10 1AY Registered in England and Wales, company number 11770704 ICO registration number ZB102718

For any question about this policy, or to make a request about your data, contact tom@mindsetrxd.com.

What is collected

When you submit a form on this site to request a free resource, we collect:

• Your email address, which you enter yourself.
• Which resource you requested, so we know what to send you.
• Campaign parameters from the web address you arrived on (utm_source, utm_medium, utm_campaign, utm_content). These record which advert or link brought you here. On their own they do not identify you.
• Advertising identifiers set by Meta's tracking pixel and stored as cookies in your browser (_fbp and, if you arrived from an advert, _fbc).

We do not ask for, and do not want, payment details, government identifiers, or any special category data through this website.

Why it is collected, and our lawful basis

• To send you the resource you asked for.
• To send you follow-up emails about related coaching, training and content. You can unsubscribe from any email, at any time, using the link in it.
• To measure which adverts produce sign-ups, so advertising budget is not spent on adverts that do not work.

Our lawful basis is consent. You give it by entering your email address and submitting the form. You can withdraw it at any time by unsubscribing from any email, or by emailing tom@mindsetrxd.com. Withdrawing consent does not affect anything done before you withdrew it.

Where it is stored, and who it is shared with

Your data is handled by the following processors:

• Kit (formerly ConvertKit) stores your email address, the resource you requested, and the campaign parameters, and sends the emails. Kit is based in the United States.
• Vercel hosts this website and processes your form submission in transit. Vercel is based in the United States.
• Meta Platforms receives a record that a sign-up happened, for advertising measurement. This is sent in two ways: from your browser via the Meta pixel, and from our server via Meta's Conversions API. The server-side record includes your email address in hashed form, so Meta can match the sign-up to an advert without receiving your address in readable text.

These providers are based outside the UK and EEA. Where your data is transferred to them, that transfer relies on the safeguards set out in each provider's data processing agreement.

Your data is never sold.

Cookies

This site sets cookies from the Meta pixel for advertising measurement, and uses Vercel's analytics for aggregate traffic statistics. You can block or delete cookies in your browser settings. Doing so will not stop you receiving a resource you have requested.

How long it is kept

Subscriber records are kept for 24 months from your last engagement, and are then deleted. If you unsubscribe or ask for deletion before then, your record is deleted at that point instead. Advertising cookies expire according to Meta's own retention schedule, typically within 90 days.

Your rights

Under UK and EU data protection law you have the right to ask for a copy of the personal data held about you, to have it corrected, to have it deleted, to restrict or object to how it is used, and to withdraw consent at any time.

To exercise any of these, email tom@mindsetrxd.com. Requests are answered within one month.

If you are not satisfied with the response, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA.

Changes to this policy

If this policy changes, the revised version will be posted on this page with an updated date at the top.