PRIVACY POLICY
Last updated: 19 August 2026
Who we are
Elevate Mindset Ltd respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what information we collect, why we use it and the rights you have in relation to it.
Elevate Mindset Ltd provides workplace programmes designed to support awareness, resilience, presence and sustainable performance.
Elevate Mindset Ltd is the controller responsible for the personal information described in this policy.
Company name: Elevate Mindset Ltd
Company number: 16814102
Registered office: 16 Potter Way, Winnersh, Wokingham, England, RG41 5SJ
Email: info@elevatemindset.co.uk
The information we may collect
Depending on how you interact with us, we may collect:
• Your name, job title and organisation.
• Your business or personal email address and telephone number.
• Information included in an enquiry, contact form or correspondence.
• Information needed to prepare proposals, arrange programmes and manage our relationship with a client organisation.
• Programme booking and attendance information.
• Feedback, survey responses and testimonials.
• Payment, invoicing and transaction information.
• Technical information about how you use our website, such as your IP address, browser type and device information.
• Information obtained from publicly available business sources or reputable business-information platforms.
Where necessary to support safe and inclusive participation, we may also receive information about accessibility requirements, health considerations or other adjustments. We will only request and use this information where it is relevant and appropriate.
Please do not provide sensitive personal information through the general website contact form. Where this information is required, we will provide an appropriate and more secure way for you to share it.
How we receive your information
We may receive personal information:
• Directly from you when you contact us, complete a form, attend a programme or communicate with us.
• From the organisation arranging or purchasing a programme.
• From another participant or professional contact where appropriate.
• Through our website and its supporting technology.
• From publicly available professional sources, including company websites, professional directories and LinkedIn.
• From a reputable business-information or lead-generation platform.
Where a client organisation provides participant information, we ask it to ensure that the information has been collected and shared lawfully and that participants have been given appropriate privacy information.
How and why we use your information
Responding to enquiries
We use your contact details and the information contained in your enquiry to respond to you and discuss your organisation’s requirements.
Our lawful basis is our legitimate interest in responding to enquiries and developing our business. Where an enquiry relates to a proposed contract, we may also process information to take steps before entering into that contract.
Delivering and managing our services
We use relevant information to prepare proposals, arrange and deliver programmes, communicate with clients and participants, manage attendance and provide continued support where agreed.
Our lawful basis is the performance of a contract, taking steps before entering into a contract, and our legitimate interest in delivering and administering our services effectively.
Managing payments and business records
We use financial and transaction information to issue invoices, manage payments, maintain accounts and meet our legal and regulatory responsibilities.
Our lawful basis is the performance of a contract and compliance with our legal obligations.
Supporting accessibility and participant wellbeing
Where necessary, we may use information about health, accessibility or adjustment requirements to help participants take part safely and inclusively.
Where this involves special-category personal information, we will only process it where we have both a lawful basis and an appropriate condition under data-protection law. This will generally involve the participant’s explicit consent.
We will only collect the minimum amount of information necessary.
Developing and improving our programmes
We may use feedback, survey responses and appropriately anonymised programme information to assess and improve our services.
Our lawful basis is our legitimate interest in evaluating and improving our programmes. We will request permission before publishing an identifiable testimonial.
Business-to-business communication
We may contact relevant professionals in their business capacity where we reasonably believe that Elevate Mindset’s services may be relevant to their organisation or role.
Contact information may come from publicly available professional sources or reputable business-information platforms.
Our lawful basis is our legitimate interest in promoting our services to appropriate organisations. We balance this interest against the individual’s privacy rights and provide a straightforward way to opt out of further communication.
We will not disguise our identity. Every marketing email will explain how the recipient can unsubscribe or object.
Website operation and security
We may use technical information to operate, protect and maintain our website, prevent misuse and understand its technical performance.
Our lawful basis is our legitimate interest in maintaining a secure and functional website.
Where non-essential cookies or analytics are used, we will request consent where required. Further information is provided in our Cookie Policy.
Legal claims and compliance
We may use personal information to comply with the law, respond to lawful requests, protect our rights, prevent fraud or establish, exercise or defend legal claims.
Our lawful basis is compliance with a legal obligation or our legitimate interest in protecting our business and legal rights.
Photographs and recordings
We will not use identifiable photographs, video recordings or participant contributions for promotional purposes without appropriate permission.
Where photography or filming is planned during a programme, participants will be informed beforehand and given a genuine opportunity not to take part.
Who we may share information with
We may share personal information with trusted organisations that help us operate our business, including:
• Squarespace, which hosts our website and processes website forms.
• Google, where enquiries and business correspondence are received and stored through Gmail.
• Business-information or lead-generation service providers.
• Payment, accounting or administrative service providers.
• Professional advisers, such as accountants, insurers or legal advisers.
• Carefully selected contractors or facilitators involved in delivering an agreed programme.
• Government bodies, regulators, courts or law-enforcement authorities where disclosure is legally required.
These organisations may only use the information for the relevant purpose and must protect it appropriately.
We do not sell personal information.
International transfers
Some of our technology and service providers may store or process information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate safeguard is in place.
This may include a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another safeguard recognised under UK data-protection law.
Further information about the safeguards used by a particular provider can be requested by contacting us.
How long we keep information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
As a general guide:
• General enquiries may be retained for up to two years after our last meaningful contact.
• Client contracts, invoices and associated business records may be retained for up to six years after the end of the relevant financial year or business relationship.
• Routine participant administration information will generally be retained for no longer than 12 months after the programme.
• Health or accessibility information will normally be deleted within three months after the programme unless it is required for an incident, legal claim or continuing service.
• Business-prospect information will be reviewed periodically and deleted when it is no longer relevant.
• Marketing contact information may be retained until you unsubscribe or object.
Where someone opts out of marketing, we may retain limited information on a suppression list so that we can respect that request.
Information may be retained for longer where required by law or where reasonably necessary in connection with a complaint, safeguarding matter, insurance issue or legal claim.
How we protect information
We use reasonable organisational and technical safeguards designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.
However, no website, email system or internet transmission can be guaranteed to be completely secure.
Your data-protection rights
Depending on the circumstances, you may have the right to:
• Ask for access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete your information.
• Ask us to restrict how we use your information.
• Object to processing based on legitimate interests.
• Object at any time to the use of your information for direct marketing.
• Ask for certain information to be transferred to you or another organisation.
• Withdraw consent where processing is based on consent.
Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.
These rights are not absolute and may be subject to legal exceptions. We may need to verify your identity before responding to a request.
To exercise your rights, contact info@elevatemindset.co.uk.
Automated decision-making
We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.
Complaints
If you have a concern about how we use your personal information, please contact us first at info@elevatemindset.co.uk so that we can try to resolve it.
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk/make-a-complaint
External links
Our website may contain links to websites operated by other organisations.
We are not responsible for the privacy practices of external websites, and we recommend reading their privacy information before providing personal information.
Children
Our workplace services and website are not designed for children, and we do not knowingly collect personal information from children through this website.
Changes to this policy
We may update this Privacy Policy when our services, technology or legal responsibilities change.
The latest version will always appear on this page with the date it was last updated.
Contact us
If you have questions about this Privacy Policy or how we use your personal information, contact:
Elevate Mindset Ltd
16 Potter Way
Winnersh
Wokingham
England
RG41 5SJ
Email: info@elevatemindset.co.uk