Privacy notice
This explains what personal data Mine Ready collects, why, who sees it, how long we keep it and what your rights are. It follows the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
The data controller is Mineready Ltd, company number TODO, registered office TODO address ("we", "us"). Our ICO registration number is TODO. For anything in this notice, email TODO privacy email.
2. What we collect, why, and our legal basis
| What | Why | Legal basis |
|---|---|---|
| Name, email, billing address, payment confirmation, the date you accepted our terms and the cancellation waiver | Take payment, give you access, keep proof of what you agreed, handle refunds and support | Contract (Art 6(1)(b)); legal obligation for accounts and tax (6(1)(c)); legitimate interests in proving consent and defending claims (6(1)(f)) |
| Email address and your free passport check results (which of the nine stamps you cleared or not) | Send the results and fixes you asked for | Consent (6(1)(a)), which you can withdraw at any time |
| Email address if you ask to be put forward for the founding group | Contact you about a place | Consent (6(1)(a)) |
| Email address when you ask for a sign in link | Send the one time link | Contract (6(1)(b)) |
| Messages you send us, and technical logs such as IP address and browser type from our hosting and security | Support, security, preventing fraud and abuse | Legitimate interests (6(1)(f)) |
| Marketing emails to people who have bought from us | Tell you about similar products. Every email has an unsubscribe link | Legitimate interests, and the PECR soft opt in (we only email buyers about similar things, and you can opt out at any time) |
Where payment is needed to enter the contract, we cannot give you access without your name, email and payment. Everything else is your choice.
3. What stays on your own device
The programme tools (timeline, screening date, CV scanner, money calculator, Perth planner), your answers, reflections, passport entries and your certificate name run in your browser. They are saved in your browser's local storage and are not sent to us. That includes anything you type about drug use, health or your CV. We never receive it. Clear your browser data and it is gone.
4. Special category and criminal offence data
We do not ask for, collect or store health, drug use or criminal record information. The programme discusses these topics in general terms only.
5. Cookies and similar technologies
We use only what is strictly necessary to give you what you asked for. These do not need your consent under PECR, and we do not use advertising, tracking or analytics cookies.
- mr_access cookie: a signed, secure, HttpOnly token that proves you have paid so the members area opens. It lasts one year.
- Local storage in your browser: your programme progress and passport (see section 3).
- Stripe sets its own cookies on its checkout page for fraud prevention. See Stripe's policy.
6. Who we share data with
- Stripe Payments Europe, Ltd and Stripe, Inc. process your payment. Stripe is an independent controller for fraud, regulatory and its own legal duties. We never see or store your full card number.
- Netlify, Inc. hosts the website and runs our functions.
- Resend sends the emails you ask for: your passport results, the founding list confirmation and sign in links. We also get a copy of each sign up in our own mailbox.
- Our accountants, lawyers and insurers when needed, and the authorities if the law requires.
We do not sell your data.
7. Transfers outside the UK
Some of these providers are based in or process data in the United States. Where that happens we rely on a UK adequacy route, such as the UK Extension to the EU US Data Privacy Framework where the provider is certified, or the ICO's International Data Transfer Agreement or Addendum with the provider. Ask us if you want details.
8. How long we keep it
- Payment and accounting records: six years, as tax and company law require.
- Proof of your terms and cancellation waiver: six years from purchase, to deal with any claim.
- Free passport check and founding group emails: until you unsubscribe or ask us to delete, or 24 months after your last contact, whichever comes first.
- Support emails: up to two years after the matter closes.
- Hosting logs: as set by Netlify, normally a short period.
9. Your rights
You can ask us to access your data, correct it, delete it, restrict or object to how we use it, move it to another service, and withdraw consent at any time (withdrawing does not affect what we did before). Email TODO privacy email. We will reply within one month. There is no fee unless a request is clearly unfounded or excessive. We may need to check who you are first.
You have an absolute right to object to direct marketing. Say so and we stop.
We do not make decisions about you using solely automated processing that has legal or similarly significant effects. Access to the members area is switched on and off automatically by your payment status, which is a technical check and not a judgement about you.
10. Complaints
Please tell us first at TODO privacy email so we can try to put it right, and we will acknowledge within 30 days. You can also complain at any time to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.
11. Children
The programme is for adults. The visa it prepares you for requires you to be 18 or over, and we do not knowingly collect data from anyone under 18.
12. Changes
If we change this notice in a way that matters we will update the date above and, for buyers, tell you by email.