Privacy Policy
Mindora is committed to protecting your privacy and handling your personal information securely and transparently.
This Privacy Policy explains how Mindora Ltd (“Mindora”, “we”, “us” or “our”) collects, uses, stores and shares personal information when you use the Mindora website, platform and related services.
1. Who We Are
Mindora Ltd is a company registered in England and Wales under company number 16543991.
Registered office:
128 City Road
London
EC1V 2NX
United Kingdom
ICO registration: ZC006816
For privacy enquiries, please contact:
For personal data for which Mindora determines the purposes and means of processing, Mindora Ltd acts as a data controller under the UK General Data Protection Regulation (“UK GDPR”) and Data Protection Act 2018.
Where healthcare services are provided by an independent healthcare provider or clinician, that provider or clinician may also act as a separate data controller in relation to information processed as part of the clinical relationship. Where applicable, further information about the relevant healthcare provider will be provided to you as part of the service.
2. Information We Collect
Depending on how you use Mindora, we may collect and process:
Identity and contact information, including your name, date of birth, email address, telephone number and other information required to create and manage your account.
Account and authentication information, including account identifiers, login information and information used to verify your identity and secure your account.
Health and assessment information, including information you provide through questionnaires, assessment tools, interviews, consultations and other interactions with the platform. This may include information relating to ADHD, autism, mental health, medical history, medication and other health information.
Information provided by others, where relevant to an assessment, such as information provided by an informant or other person you have asked or authorised to contribute information.
Clinical information, where applicable, including consultation information, assessment outcomes, reports and correspondence relating to your care.
Payment and transaction information, including information about services purchased and payment status. Payment-card information may be processed directly by our payment providers rather than stored by Mindora.
Technical and usage information, including IP address, browser and device information, login activity, security information and information about how you interact with the Mindora platform.
Communications, including emails, messages and other communications you send to us or through the platform.
3. How We Use Your Information
We may use your personal information to:
- create and manage your Mindora account;
- verify your identity and authenticate access to the platform;
- provide assessments and other services you request;
- enable healthcare professionals to provide services to you;
- collect and process assessment questionnaires and information;
- generate information and materials to support clinical assessment and review;
- facilitate communications between you and healthcare professionals;
- process payments and administer transactions;
- operate, maintain and secure the Mindora platform;
- maintain appropriate clinical, security and audit records;
- respond to enquiries, complaints and requests;
- monitor and improve the safety, reliability and performance of our services;
- comply with our legal, regulatory and professional obligations; and
- establish, exercise or defend legal claims where necessary.
4. Health and Special Category Data
Information concerning your health is “special category data” under UK GDPR and receives additional legal protection.
Where we process health information, we will only do so where we have both a lawful basis under Article 6 UK GDPR and an applicable condition under Article 9 UK GDPR.
Depending on the circumstances, these may include providing services under a contract with you, compliance with legal obligations, your explicit consent where consent is appropriate, and processing necessary for the provision or management of health or social care by, or under the responsibility of, an appropriately regulated professional or service.
The particular lawful basis depends on the purpose for which the information is being processed.
5. Google Sign-In and Google User Data
If you choose to sign in to Mindora using your Google account, Google may provide us with information associated with your Google account in accordance with the permissions you grant.
For Google Sign-In, this may include your name, email address, profile information and a Google account identifier.
We use this information to authenticate you, create or link your Mindora account, maintain account security and provide access to the Mindora service.
Mindora does not sell Google user data.
We do not use Google user data for advertising.
We do not use Google user data to train external artificial intelligence models.
We only access Google user data that is necessary for the functionality you have chosen to use and in accordance with the permissions you grant.
If Mindora introduces additional Google integrations, such as Google Calendar, we will explain what information is accessed and how it is used before requesting the relevant permissions.
6. Artificial Intelligence
Mindora uses artificial intelligence and other software technologies to support aspects of its services.
These technologies may assist with activities such as collecting information, structuring assessment information, generating summaries or draft materials, and supporting clinicians in reviewing information.
Where AI is used to support a clinical service, it is intended to assist rather than replace appropriate professional clinical judgement.
We do not sell your health information or other personal information for AI training.
We do not permit external AI providers to use your personal data to train their general-purpose AI models where they process personal data on our behalf.
7. Sharing Your Information
We may share personal information where necessary with:
- healthcare professionals and healthcare providers involved in providing services to you;
- technology and hosting providers supporting the operation and security of Mindora;
- communications, identity-verification and payment providers;
- professional advisers, insurers, auditors and regulatory bodies where appropriate;
- public authorities where disclosure is required by law; and
- other organisations where you have specifically authorised us to share information.
Where another organisation processes personal information on our behalf, we require appropriate contractual and data-protection safeguards.
We do not sell your personal data.
8. International Data Transfers
Some of the technology providers we use may process information outside the United Kingdom.
Where personal information is transferred internationally, we use appropriate safeguards required by UK data-protection law, where applicable. These may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved Standard Contractual Clauses, or another legally recognised transfer mechanism.
9. Data Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.
These measures include access controls, authentication, encryption where appropriate, logging and monitoring, and controls designed to limit access to information according to role and need.
No internet-based service can guarantee absolute security, but we continually review the measures used to protect information processed through Mindora.
10. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, regulatory, contractual, clinical-record and professional requirements.
Different categories of information may therefore have different retention periods.
Where clinical records are created, applicable healthcare record-retention requirements may require those records to be retained for specified periods.
11. Your Data Protection Rights
Depending on the circumstances, UK data-protection law may give you the right to:
- request access to your personal information;
- request correction of inaccurate or incomplete information;
- request deletion of your information in certain circumstances;
- request restriction of processing;
- object to certain processing;
- request transfer of information you have provided to us;
- withdraw consent where processing is based on consent; and
- raise concerns about how your information is being used.
These rights are not absolute and may be subject to legal or regulatory exceptions, including requirements relating to clinical records.
To exercise your rights, contact:
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
12. Cookies and Similar Technologies
We may use cookies and similar technologies that are necessary to operate, secure and improve the Mindora website and platform.
Where required by law, we will ask for your consent before using non-essential cookies or similar technologies.
Further information may be provided through our cookie notice or cookie settings.
13. Third-Party Services
The Mindora platform may use or link to services provided by third parties.
Those organisations may process information under their own privacy policies where they act as independent controllers. We encourage you to review relevant third-party privacy information where applicable.
14. Children
Our initial services are intended for adults aged 18 and over unless we expressly state otherwise.
If Mindora introduces services for children or young people, we will provide appropriate privacy information and safeguards before those services are made available.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or data-processing practices.
The latest version will be published on our website and the “Last updated” date will be changed accordingly.
16. Contact Us
If you have questions about this Privacy Policy or how Mindora uses your personal information, please contact:
Mindora Ltd
128 City Road
London EC1V 2NX
United Kingdom
Email: privacy@mindora.ai
ICO registration: ZC006816