Legal
Privacy Policy
What this website collects, why, and what it does not do with it. Written in plain language, and limited to the things this site actually does.
1. Who we are
MindShift Guru is an education-first personal growth practice centred on mindset, discipline, focus, confidence and constructive habit-building.
This policy applies to this website only. Details of the operating entity, its registered address and its privacy contact must be added here before publication.
2. Information we collect
We collect only what you choose to give us, in two ways:
- Newsletter subscription. Your email address and the fact that you consented. Nothing more.
- Contact and interest forms. The full name, email address, enquiry type and message you provide. Please do not include sensitive personal, medical or financial information.
We do not ask for, and you should not send, special-category data (such as health, political or religious information) through these forms.
3. How we use it
- To send the MindShift Letter, if you have subscribed.
- To reply to your enquiry or interest registration.
- To maintain a record of correspondence where it is relevant to a continuing conversation.
- To detect and block automated or fraudulent form submissions.
We do not sell, rent or trade your information. We do not use it for third-party advertising or profiling. We do not add you to a mailing list you did not ask for.
4. Cookies and analytics
This website does not set advertising cookies, does not embed third-party advertising pixels, and does not use cross-site tracking.
The site loads web fonts from Google Fonts, which means your browser makes a request to Google's servers when a page loads. If you would prefer to avoid that, the site is fully usable with local system fonts instead. Any analytics service added in the future must be disclosed here before it is enabled.
5. Third-party services
Form submissions require a delivery service. At the time of writing, no endpoint is configured, and the website's forms explicitly report that nothing has been sent rather than pretending otherwise.
When a provider is selected, this section must name it, explain what data it receives, and link to its own privacy policy. If the chosen provider requires an API secret, a small server-side function must be used so that no secret is ever exposed in browser code.
6. Retention
Newsletter subscriptions are kept until you unsubscribe. Enquiry records are kept only as long as needed to deal with your enquiry and any continuing conversation, and are then deleted.
Specific retention periods must be confirmed by the site owner and inserted here before publication.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or export your personal data, and to object to its use. Every newsletter message includes a one-click unsubscribe link.
To exercise any other right, use the contact page. A verified contact address for privacy requests must be published here before launch.
8. Security
The site is served over HTTPS in production. Form data is transmitted directly to the configured provider and is not stored in the browser beyond the values you typed. No credential, API key or private token is present in any publicly readable file in this project.
No system is perfectly secure, but we will not collect data we do not need, and we will be straightforward if anything goes wrong.
9. Children
This site is intended for adults. We do not knowingly collect information from children, and if we learn that we have, we will delete it.
10. Changes
If this policy changes, the updated version will be published on this page with a revised date. Material changes affecting existing subscribers will be communicated directly by email.
11. Contact
Privacy questions and requests can be submitted through the contact page. Please choose “General enquiry” and mention “privacy” in your message.
Document status
Draft version 1.0. Prepared to match the implemented functionality of this static website. It has not been reviewed by a qualified legal professional, and it must be completed with the operating entity's details and adapted to the applicable jurisdiction before publication.