1. Who we are
Obedient Minds Ltd is a company registered in England and Wales. We are the “data controller” for the personal data described in this notice. You can contact us at hello@obedientminds.com or by post at our registered office in London, United Kingdom.
We are not currently required to register a Data Protection Officer with the Information Commissioner’s Office (ICO). Privacy queries are handled by the founder.
2. The personal data we collect
Depending on how you interact with us, we may collect:
- Contact details — your name, email, employer, role and any message you send us via the pitch form or email.
- Brief and project information — anything you share about your brand, budget, timing or commercial situation in order for us to scope work.
- Client and supplier records — billing details, contracts, purchase orders, invoices and correspondence kept for the life of the engagement and our statutory record-keeping obligations.
- Recruitment data — CVs, work samples and interview notes if you apply to work with us.
- Technical data — IP address, device, browser, referring URL and pages viewed, collected automatically when you visit the website (see Cookies below).
We do not knowingly collect special category data (such as health, ethnicity or political opinions) and we do not knowingly collect personal data from anyone under the age of 16.
3. How we use your data and our lawful bases
We rely on the following UK GDPR lawful bases (Article 6):
- Contract — to respond to your pitch, scope a project, deliver work, and manage invoicing and supplier relationships.
- Legitimate interests — to run, secure and improve our website, reply to enquiries, occasionally contact previous business contacts with relevant consultancy updates, and protect our legal rights. You can object at any time.
- Legal obligation — to keep accounting, tax and statutory business records for the periods required by UK law.
- Consent — where we ask for it explicitly, for example for non-essential cookies or marketing emails. You can withdraw consent at any time.
4. Who we share your data with
We do not sell your personal data. We share it only with:
- Service providers acting on our instructions — for example hosting, email, analytics, accounting and project-management platforms. They are bound by written contracts and may only process data for us.
- Professional advisers — lawyers, accountants and insurers where this is necessary to run the business.
- Authorities — where we are required to disclose data by law, regulation or a valid legal request.
5. International transfers
Some of our suppliers are based outside the UK, including in the European Economic Area and the United States. Where personal data is transferred outside the UK we rely on UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate additional safeguards.
6. How long we keep your data
- Pitches we do not take forward — up to 24 months, so we can respond if you re-engage, then deleted.
- Client and supplier records — for the life of the engagement and at least 6 years afterwards to meet UK tax and contract-law requirements.
- Recruitment data — up to 12 months after a decision, unless you ask us to delete it sooner.
- Website analytics — aggregated and short-lived; see Cookies.
7. Your rights under the UK GDPR
You have the right to:
- access the personal data we hold about you;
- have inaccurate data rectified;
- have your data erased in certain circumstances;
- restrict or object to our processing;
- data portability for data you provided to us;
- withdraw consent where we relied on it; and
- not be subject to solely automated decision-making with legal effect — we do not carry out such decision-making.
To exercise any of these rights, email hello@obedientminds.com. We will respond within one month. If you are unhappy with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ico.org.uk, telephone 0303 123 1113). We would, however, appreciate the chance to put things right first.
8. Cookies and analytics
We use a small number of strictly necessary cookies to make the site work, and privacy-respecting analytics to understand which pages are useful. Non-essential cookies are only set with your consent. You can manage cookies via your browser settings at any time.
9. Security
We use appropriate technical and organisational measures to protect your data, including access controls, encryption in transit and supplier due diligence. No online service can be guaranteed perfectly secure; if we ever become aware of a personal data breach affecting you, we will notify the ICO and you in line with our UK GDPR obligations.
10. Changes to this notice
We may update this notice from time to time. The “last updated” date at the top shows when it was last changed. Material changes will be highlighted on this page.
11. Contact
Questions, requests or complaints about how we handle your personal data should go to hello@obedientminds.com.