Your GDPR Rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have important rights over your personal data. Mindful is committed to upholding these rights.
Right of Access
Article 15 UK GDPR
You have the right to request a copy of all personal data we hold about you, including your health tracking data, journal entries, and account information. We will respond within 30 days.
Right to Rectification
Article 16 UK GDPR
If any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. You can also update most of your information directly in your account settings.
Right to Erasure
Article 17 UK GDPR
You have the right to ask us to delete your personal data ('right to be forgotten'). We will delete your account and all associated data within 30 days, except where retention is required by law.
Right to Restriction
Article 18 UK GDPR
You can ask us to restrict how we process your data in certain circumstances, such as while we verify the accuracy of your data or while an objection is being considered.
Right to Data Portability
Article 20 UK GDPR
You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV), and to transfer it to another service.
Right to Object
Article 21 UK GDPR
You have the right to object to processing of your personal data based on our legitimate interests. You can also withdraw consent for Special Category health data at any time.
How to Exercise Your Rights
To make a request regarding any of your GDPR rights, please contact our Data Protection team. We will acknowledge your request within 72 hours and respond fully within 30 days. In complex cases we may extend this by a further two months, and we will notify you if this is necessary.
privacy@mindful.app
Data Controller
Mindful Mental Health Ltd
Right to Lodge a Complaint
If you are not satisfied with how we have handled your data or responded to your request, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO).
Visit the ICO websiteSpecial Category Data
Because Mindful handles mental health and wellbeing data, much of your information is classified as "Special Category Data" under UK GDPR Article 9. This data receives the highest level of protection, and we only process it with your explicit consent.
You can withdraw your consent to processing of Special Category data at any time by contacting us or deleting your account. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.
72 hours
Acknowledgement
30 days
Full Response
Free
No Charge