Last updated: 16 August 2026
Privacy notice
Minding builds websites, booking journeys and practice systems for therapy practices. This notice explains how Minding handles personal data when you use this website, submit a practice-build enquiry or ask us to review your current setup.
Who is responsible
For this website and Minding's own enquiries, Minding is the data controller. You can contact us at hello@minding.ie.
When Minding later configures systems for a therapy practice and handles that practice's client data on written instructions, the practice is normally the controller and Minding acts as a processor. That work must be covered by a separate data-processing agreement before client personal data is shared with Minding.
What this website collects
- Your name, email address, practice name and website address, if you submit them.
- Your build choices, such as style preferences, workflows, software used, service level, customisation notes and estimated pricing.
- Basic technical data needed to operate and protect the site, such as IP-derived rate limiting, request metadata, device/browser information and error logs.
- Analytics or campaign data only where a production analytics provider is configured and any required cookie consent has been obtained.
Why we use it
- To respond to your enquiry and prepare a relevant practice-build conversation.
- To estimate setup and ongoing costs based on the workflows you select.
- To protect the site from spam, abuse and excessive automated submissions.
- To improve the website and understand which pages or routes lead to enquiries.
- To keep records needed for contracts, accounting, legal claims and compliance.
Legal bases
- Pre-contract steps: responding to your enquiry, preparing a quote and discussing a possible Minding service.
- Legitimate interests: operating the website, preventing abuse, improving the service and keeping proportionate business records.
- Consent: non-essential cookies, optional analytics or direct marketing where consent is legally required.
- Legal obligation: tax, accounting, regulatory or lawful-request records where applicable.
Special-category and therapy data
Health information and therapy records can be special-category data under GDPR. Minding does not intentionally collect therapy-client health data through this website. If you accidentally send client or clinical data to Minding through a website form, we will minimise, restrict or delete it where appropriate and may ask you to resend the enquiry without client details.
Who receives data
Minding only shares personal data where needed to run the website, respond to enquiries or provide services. Recipients may include hosting providers, Supabase or compatible storage/database services, email providers, analytics providers used with consent, professional advisers and authorities where required by law.
If a project requires integrations such as Stripe, Google Workspace, Zoom, Twilio, WhatsApp Business, Resend or a practice-management platform, those providers are selected and documented as part of the project scope.
International transfers
Some providers may process data outside Ireland or the EEA. Where that happens, Minding will use appropriate safeguards such as adequacy decisions, standard contractual clauses or provider data-processing terms, as applicable.
How long we keep it
- Unconverted enquiries and practice-build submissions: normally up to 24 months.
- Project and contract records: normally up to 7 years for accounting and claims.
- Security, rate-limit and error logs: normally up to 90 days unless needed longer.
- Analytics data: according to the configured analytics provider and consent settings.
Shorter or longer retention may apply where law, a dispute, fraud prevention, tax records or a signed client agreement requires it.
Your rights
Subject to GDPR limits, you can ask for access, correction, deletion, restriction, portability or objection. Where processing is based on consent, you can withdraw that consent. You can contact Minding at hello@minding.ie.
You may also complain to the Irish Data Protection Commission or your local supervisory authority.
Security
Minding uses proportionate technical and organisational measures, including server-side secrets, validation, rate limiting, least-access project workflows and provider security controls. No website or internet transmission is completely risk-free, so therapy-client records should only be shared through the agreed secure project channel.
Changes
Minding may update this notice as the service, providers or legal requirements change. The date at the top shows when it was last updated.