Privacy Policy

Last updated: 25 June 2026

This Privacy Policy explains how Mindacks (the brand name of Mindaks Global Pvt. Ltd., a company registered in India) collects, uses, stores, and protects your personal data when you visit mindacks.comor interact with our services. It is aligned with India's Digital Personal Data Protection (DPDP) Act, 2023 and reflects global privacy best practices.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the website.

1. Who We Are

Data Fiduciary: Mindaks Global Pvt. Ltd.
Brand Name: Mindacks
Website: mindacks.com
Email: info@mindacks.com
Country of Registration: India

2. Information We Collect

We collect personal data in the following ways:

Information You Provide Directly

Contact Forms: Name, email address, company name, job title, and your message.
AI Readiness Assessment: Responses to assessment questions, organisation details, and email address for result delivery.
Newsletter Subscriptions: Email address and optionally your name.
Service Enquiries: Details about your organisation's AI needs and preferred services.
Coaching or Training Programmes: Name, email, organisation, and programme-specific information.

Information Collected Automatically

Usage Data: Pages visited, time spent, referring URLs, browser type, and device type.
IP Address: Collected for security and analytics purposes. We do not use IP addresses to identify individuals.
Cookies and Tracking Technologies: See Section 6 (Cookies) for full details.

Information from Third Parties

If you engage with us via LinkedIn or other professional platforms, we may receive information that you have made publicly available on those platforms.

3. How We Use Your Information

We use your personal data only for the following purposes:

To respond to your enquiries and provide customer support.
To deliver AI readiness assessments, reports, and related services.
To send relevant communications, newsletters, and programme updates (only with your consent).
To improve our website, content, and service offerings.
To conduct internal research and analytics (using anonymised or aggregated data where possible).
To comply with applicable legal obligations.
To detect and prevent fraud, abuse, and security threats.

We do not sell, rent, or trade your personal data to any third party for commercial purposes.

4. Legal Basis for Processing

Under India's DPDP Act 2023 and applicable data protection principles, we process personal data under the following lawful bases:

Consent: When you submit a contact form, subscribe to our newsletter, or opt in to marketing communications.
Contractual Necessity: When we need your data to deliver services you have requested or to fulfil a contract.
Legitimate Interests: For website analytics, security, and improving our services — provided your fundamental rights are not overridden.
Legal Obligation: When required by applicable law or regulatory authority.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law:

Contact form submissions: Up to 12 months after the last communication, unless an ongoing relationship exists.
Assessment responses: Up to 24 months for programme improvement purposes.
Newsletter subscribers: Until you unsubscribe or withdraw consent.
Service client data: Retained for the duration of the engagement plus 5 years for legal and contractual compliance purposes.
Website analytics data: Retained in aggregated or anonymised form for up to 26 months.

After the applicable retention period, personal data is securely deleted or anonymised.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our website. For full details, including how to manage your preferences, please see our Cookie Policy.

We use the following types of cookies:

Essential Cookies: Required for the website to function. Cannot be disabled.
Functional Cookies: Remember your preferences and settings.
Analytics Cookies: Help us understand how visitors use our site (e.g. Google Analytics). Used only with your consent.
Marketing Cookies: Used to deliver relevant content. Used only with your explicit consent.

7. Third-Party Services

We use carefully selected third-party services to operate our website and deliver our services. These providers process data on our behalf under appropriate data processing agreements:

Email Delivery: Resend (for transactional email)
Website Hosting: Vercel (infrastructure hosting)
Analytics: Google Analytics (with anonymised IP addresses and only with your consent)
Calendar Scheduling: Cal.com (for booking sessions with Amit Kumar Soni)
Newsletter: Substack (for the Mind First, Future Ready newsletter)

Each of these providers has their own privacy policy. We encourage you to review them. We do not allow third-party service providers to use your data for their own marketing purposes.

8. International Data Transfers

Mindacks is based in India and our primary operations are within India. Some of our third-party service providers operate internationally (including in the United States and European Union). When personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

Contractual clauses (Standard Contractual Clauses where applicable).
Using providers who maintain adequate security and privacy standards.

9. Your Rights

Under India's DPDP Act 2023 and applicable privacy principles, you have the following rights:

Right to Access: Request a copy of the personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes collected.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent (e.g. unsubscribe from newsletters).
Right to Data Portability: Receive your data in a structured, machine-readable format where technically feasible.
Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 12).

To exercise any of these rights, please contact us at info@mindacks.com. We will respond within 30 days of receiving your request.

10. Security Practices

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, alteration, or destruction. These include:

HTTPS encryption for all website traffic.
Access controls limiting data access to authorised personnel only.
Regular review of our security practices.
Use of reputable, security-certified third-party providers.

For more information, see our Security & Data Protection page.

11. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

12. Grievance Officer (India — DPDP Act)

In accordance with India's Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address privacy-related concerns:

Name: Amit Kumar Soni
Designation: Founder & CEO, Mindaks Global Pvt. Ltd.
Email: info@mindacks.com
Response Time: Within 30 days of receipt of a complaint.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: info@mindacks.com
Company: Mindaks Global Pvt. Ltd.
Country: India
Website: mindacks.com