Privacy Policy

Last Updated: 9 March 2025

This Privacy Policy explains how EfficientMinds ("we," "us," or "our") collects, uses, and protects your personal data when you use our website at www.efficientminds.co.uk ("Site"). We’re committed to safeguarding your privacy under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

1. Who We Are

We are EfficientMinds, a UK-based consultancy helping businesses transform through AI and staff insights. Contact us at:

Email: mail@jamespickering.info

2. What Data We Collect

We collect:

Personal Data: Full name, email address, organisation name, and messages you submit via our Contact form.
Login Data: Email and password (hashed) if you use our login feature, processed via Supabase.
Usage Data: Device info, IP address, browser type, and pages visited, collected automatically via server logs.
RSS Data: We fetch public RSS feeds from third parties (Azure, Google, DeepMind) but don’t collect your data here.

3. How We Use Your Data

We process your data to:

Respond to your Contact form inquiries via email, using Resend (legal basis: legitimate interest).
Authenticate users via Supabase for secure access (legal basis: contract).
Monitor and improve our Site’s performance (legal basis: legitimate interest).

4. Who We Share Data With

We share data with:

Resend: For sending Contact form emails (see their Privacy Policy).
Supabase: For user authentication (see their Privacy Policy).
Hosting Providers: UK/EU-based services compliant with UK GDPR.
Legal Authorities: If required by UK law.

5. Your Rights

Under UK GDPR, you can:

Access, correct, or delete your data.
Restrict or object to processing.
Request data portability.
Withdraw consent (if applicable).

Email us at mail@jamespickering.info to exercise these rights. Complaints? Contact the UK ICO at ico.org.uk.

6. Data Security

We use firewalls, encryption (e.g., HTTPS, hashed passwords), and secure hosting to protect your data. However, no online system is 100% secure.

7. Data Retention

We keep Contact form data for 12 months unless you request deletion. Login data is retained while your account is active, deleted within 30 days of closure.

8. International Transfers

Data may be processed in the US (e.g., Resend and Supabase servers) under UK GDPR adequacy or standard contractual clauses.

9. Cookies

We don’t currently use cookies, but if we add analytics later, we’ll update this policy and seek consent where required.

10. Changes

We may update this policy—check back here. Significant changes will be emailed to registered users.

Questions? Reach us at mail@jamespickering.info.