Privacy Highlights

These “Privacy Highlights” provide a summary of core elements of our data handling practices. Please read the full Privacy Policy below for complete details.

UK GDPR Compliance

MYndspan Ltd. complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This ensures you have rights to access, control, and protect your personal data. You can learn more about your rights from the Information Commissioner’s Office (ICO).

Information We Collect

We generally collect:

• Information from using our Services – Web-Behaviour Information via cookies and similar technologies when you use our website, mobile apps, or other services. See our Cookie Policy for details.

• Information you share directly – e.g., when you create an account, make a purchase, complete surveys, or contact support. This may include Registration Information, Self-Reported Information, and/or User Content.

• Information from our imaging services – With your consent, we process and analyse information from your brain scans to produce Imaging Information and deliver MYndspan results.

How We Use Information

We process personal data:

• To provide our Services – including account setup, secure access, processing payments, delivering results, and enabling MYndspan tools.

• To improve our Services – through analytics, feature updates, bug fixes, and user experience improvements.

• For MYndspan Research (with your consent) – using de-identified data to contribute to scientific understanding.

Your Choices

You decide:

• When and with whom you share your information.

• Whether to participate in MYndspan Research.

• To delete your MYndspan account and data at any time.

How We Share Information

We may share:

• With service providers who support our operations.

• With research collaborators, only with your explicit consent.

• When required by UK law or valid legal request.
  We do not sell or rent your personal data, nor share it with insurers, employers, or public databases.

How We Protect Information

We use:

• De-identification/pseudonymisation of sensitive data.

• Encryption at rest and in transit.

• Role-based access controls.

• Intrusion detection and prevention systems.

Risks & Considerations

You may discover personal insights from your results that are unexpected or emotional. In the unlikely event of a data breach, re-identification risk exists despite our security measures.

Full Privacy Policy

This Privacy Policy applies to all websites, applications, and services operated by MYndspan Ltd. (“MYndspan,” “we,” “us,” “our”), including www.myndspan.com, and your use of any MYndspan-related products or tools.

By using our Services, you agree to this Privacy Policy and our Terms of Service. If you do not agree, please discontinue use of our Services.

1. Key Definitions

We follow the same definitions as in the UK GDPR, including:

• Personal Data – information relating to an identified or identifiable person.

• Special Category Data – sensitive data such as health information, racial or ethnic origin, or biometric data.

• Pseudonymised Data – personal data processed to remove identifying elements, with safeguards to prevent re-identification.

• Aggregate Data – combined data sets that do not identify individuals.

We collect:

• Registration Information – name, contact details, payment details, login credentials.

• Imaging Information – results derived from your brain scans.

• Self-Reported Information – health history, lifestyle details, survey responses.

• Web-Behaviour Information – usage data collected via cookies and analytics tools.

• User Content – any other material you submit via our platforms.

2. Information We Collect

• Directly from you – via account creation, orders, surveys, or support requests.

• From imaging services – when you consent to analysis of your brain scan.

• Through technology – cookies, device identifiers, and analytics tools like Google Analytics (configured to respect UK GDPR requirements).

3. How We Use Your Information

We use your information to:

• Provide services – account setup, processing transactions, delivering results.

• Enhance services – feature development, performance monitoring.

• Research – only if you consent, we may include pseudonymised data in scientific studies.

• Comply with legal obligations – responding to lawful UK requests and fulfilling regulatory duties.

Our legal bases for processing include: performance of a contract, legitimate interests, consent, and legal obligations.

4. How We Share Your Information

We only share personal data:

• With trusted service providers under contract.

• With research partners, only when you have consented.

• As required by UK law (e.g., court order, ICO investigation).
  We do not:

• Sell your data.

• Share your data with employers or insurers.

5. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

• Access your data.

• Rectify inaccurate data.

• Erase your data (“right to be forgotten”).

• Restrict processing.

• Data portability.

• Object to processing.

• Withdraw consent at any time.

To exercise these rights, contact: info@myndspan.com.

6. Data Security

We use:

• Encryption (data in transit & at rest).

• Pseudonymisation for sensitive data.

• Access controls and role-based permissions.

• Security monitoring and vulnerability management.

7. Data Retention

We keep your personal data only as long as necessary for the purposes described here or to meet legal requirements. You can request deletion at any time.

8. Children’s Privacy

Our Services are not intended for those under 18, except with parental consent and supervision.

9. Changes to This Policy

We will post updates on our website and notify you of material changes by email, giving you at least 10 days’ notice before they take effect.

10. Contact Us

MYndspan Ltd.
1 Chapel Street,
Warwick,
United Kingdom,
CV34 4HL
Email: info@myndspan.com