Privacy notice

Who we are

Mindkindle is a trading name of Pharmed Global Ltd, registered in England and Wales. Company number: 14277818. Registered office: 128 City Road, London, EC1V 2NX.

Contact us about privacy through our contact/request form. We do not currently have a public contact email. To be confirmed: formal data-controller responsibilities.

What we collect

When you request a session we collect: your name, email address, preferred contact method, phone number (if given), preferred days and times, and anything you choose to tell us about what you’d like help with or your accessibility or communication preferences. We do not ask for medical histories, medication details or documents.

Why we use it

• To review your request, contact you by Email or Phone, agree a time and explain payment.
• When email delivery is configured, to send a request acknowledgement and notify the service about your request.

Submitting a request does not confirm a booking. Requests are stored for review in a restricted admin area, where authorised administrators can update request statuses and internal notes. Email delivery status and errors are recorded, and retries reuse the existing request.

The same form can be used for enquiries, privacy requests and complaints. These submissions are stored in the protected admin area, not received into an incoming email mailbox.

Safeguards and optional information

Optional help and accessibility fields have length limits. Please do not include medical histories or medication details. Requests are validated and rate-limited on the server; public visitors cannot read or insert directly into the requests table. Admin access requires an authorised role checked on the server. These controls do not automatically remove sensitive details you choose to type.

Lawful basis: To be confirmed: lawful basis for each use and handling of any sensitive information voluntarily supplied.

Who we share it with

The request workflow uses Lovable Cloud for database storage and authentication. Requests are stored in a PostgreSQL database; no file-upload storage buckets are configured. Email delivery remains unconfigured, with Lovable’s built-in email service intended once the sending domain and public reply-to arrangements are ready. Microsoft Teams session links are arranged manually; this site has no Teams API integration.

The website loads its Figtree and Outfit fonts from Google Fonts, which involves requests to Google’s font servers. To be confirmed: the related processor and transfer assessment.

To be confirmed: verified processor contractual details, database region, hosting locations, safeguards and any international transfers, including Microsoft Teams session arrangements.

How long we keep it

To be confirmed: retention period for requests that do and do not become bookings.

Cookies and browser storage

To be confirmed: final cookie and browser-storage information, including hosting behaviour and any consent requirements, before launch. We have not added analytics or marketing tracking. Administrator sign-in uses browser storage for authentication; any essential storage must be described accurately in the final notice.

Your rights

You can ask to access, correct or delete your information, or object to its use. You can also complain to the Information Commissioner’s Office (ico.org.uk).