privacy policy.

General data protection regulation (GDPR) policy

mergingminds is owned by Lisa Newell, who is responsible for looking after any personal information you share with us. We collect and use your information in line with this Privacy Policy. We take your privacy seriously and aim to keep your information safe and confidential.

What information do we collect?

The public website consists of static pages and does not run Google Analytics, advertising pixels or other analytics scripts. We do not analyse your browsing activity using Google Analytics.

The hosting provider receives technical information, such as your IP address and requested files, to deliver the website and may keep access and security logs. Fonts are currently loaded from Google Fonts, which receives the technical information needed to deliver them. This is separate from analytics.

Our website colour preference is saved in your browser’s local storage as mm-colour. This contains no personal details. See our website privacy and cookies notice for details of website features and storage.

We may also collect information that you choose to give us, such as your:

  • Name
  • Email address
  • Telephone number
  • Address or city
  • Organisation
  • Payment information, where relevant

Why do we collect your information?

We only collect information that is necessary to run and improve our website and services.

We may use your information to:

  • Keep the website safe and prevent misuse or fraud
  • Provide services or products you have requested
  • Process orders or agreements with you
  • Send newsletters, if you choose to sign up
  • Respond to messages or enquiries

You can visit our website without giving us any personal information. However, if you want to use certain features, such as signing up for a newsletter or contacting us through the website, you may need to provide some personal details.

Your rights

If you live in Europe, you have rights over your personal information. These include the right to:

  • Know what information we hold about you
  • Access your information
  • Correct inaccurate information
  • Ask us to delete your information
  • Limit how we use your information
  • Receive a copy of your information
  • Object to certain uses of your information
  • Ask about automated decision-making or profiling

If you would like to use any of these rights, please contact us at support@mergingminds.co.

International transfers

Your information may sometimes be stored or processed outside Europe, including in countries such as Canada or the United States.

Links to other websites

Our website may contain links to other websites. We are not responsible for how those websites collect or use your information, so we recommend reading their privacy policies before sharing any personal details.

Keeping your information safe

We take reasonable steps to protect your personal information from unauthorised access, loss, misuse, or disclosure. However, please remember that no information sent over the internet can ever be guaranteed to be completely secure.

When might we share your information?

We may share your information if we are legally required to do so, or if it is necessary to:

  • Follow the law or a legal process
  • Protect our rights or property
  • Protect your safety or the safety of others
  • Investigate possible fraud
  • Respond to a valid government or legal request

Contact us

If you have any questions about this Privacy Policy or how we use your personal information, please contact us at: support@mergingminds.co.

Last Updated 20/08/2026


1. Inroduction

mergingminds is committed to protecting your personal data and being transparent about how we collect, use and store it.

This policy explains:

  • What personal data we collect.
  • Where we obtain your personal data from.
  • How and why we use your information.
  • Who we may share your information with.
  • How we keep your information secure.
  • Your rights in relation to your personal data.

For the purposes of the Data Protection Act 1998, the data controller is Lisa Newell, ICO: ZC099507 and  UKPRN: 10098652.

2. Definitions

Personal data means any information relating to an individual who can be identified from that information.

Processing means any action carried out using personal data, including:

  • Collecting
  • Recording
  • Storing
  • Amending
  • Using
  • Sharing
  • Disclosing
  • Deleting or destroying information

3. General Provisions

This policy applies to all personal data processed by the company.

The company will:

  • Take responsibility for ongoing compliance with this policy.
  • Review this policy at least once a year.
  • Maintain registration with the Information Commissioner’s Office (ICO) where required.

Take appropriate steps to ensure personal data is handled securely and responsibly.

4. Our Data Protection Principles

We process personal data in accordance with the following principles:

  • Personal data will be processed lawfully, fairly and transparently.
  • Personal data will only be collected for specific, clear and legitimate purposes.
  • We will only collect information that is relevant and necessary.
  • We will take reasonable steps to ensure that personal data is accurate and kept up to date.
  • Inaccurate information will be corrected or deleted without unnecessary delay.
  • Personal data will only be kept for as long as necessary.
  • Appropriate measures will be taken to protect personal data from unauthorised access, loss, destruction, misuse or damage.

5. Where We Obtain Your Personal Data

We may obtain personal data from:

  • You, when you contact us by email, telephone or post.
  • Your Study Needs Assessor, in relation to your Study Needs Assessment, where you have given permission for this information to be shared.
  • Your Access to Work assessment, if you choose to share it with us.

6. Why We Process Your Personal Data

We process your personal data to enable us to administer and deliver services, including:

  • ADHD Coaching
  • Assistive Technology Training
  • BrainBoost (Zing Performance)
  • Career Development Coaching
  • Corporate Coaching
  • Crystal Reiki
  • Dyslexia Coping Strategies Training
  • Neurodivergence Awareness Speaker
  • Relaxing Reiki
  • Specialist Autism/ADHD Mentoring
  • Specialist Study Skills Tutoring
  • SELF-EMDR Coaching sessions
  • Workplace Strategy Coaching

7. Information We May Collect

We may collect and process information including:

  • Your name, address, telephone number and email address.
  • DSA correspondence, including DSA2 entitlement letters.
  • Information you provide when completing forms on our website or administrative systems.
  • Information provided when registering for our services.
  • Feedback, compliments and complaints.
  • Information discussed or recorded during support sessions.
  • Correspondence between you and the company.
  • Survey responses, where you choose to participate.
  • Details of transactions carried out through our website.
  • Information about your use of our website, such as traffic, location and communication data.
  • Information relating to services you receive, including session dates and times, people involved, topics discussed and actions taken.

8. IP Addresses and Website Information

We may collect information about the device you use to access our website, including:

  • IP address
  • Operating system
  • Browser type

Technical request information may be used to deliver the website, maintain security and administer the hosting service. We do not run analytics scripts to measure visitor behaviour.

9. Cookies

The public static pages do not set analytics or advertising cookies and contain no analytics script. Your chosen colour preference is saved in local storage. The password-protected editor uses an essential session cookie. See the website privacy and cookies notice for details. Earlier community-related cookie and analytics wording does not describe this website.

10. Who We May Share Your Data With

We may need to share your personal data with third parties where this is necessary to provide or support the services you receive.

This may include:

  • Organisations involved in funding or delivering your disability-related support, such as Student Finance.
  • Support Workers who need the information to provide your support.
  • Technical support providers for your Assistive Technology, where applicable.

We will not share your information for purposes unrelated to the reason it was collected and processed.

11. Your Rights

As a data subject, you have several rights in relation to your personal data.

These include the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate information.
  • Request the deletion of your personal data in certain circumstances.
  • Withdraw consent where consent is the legal basis for processing.
  • Restrict how your information is processed in certain circumstances.
  • Object to certain types of processing.
  • Receive a copy of your data in a commonly used electronic format.
  • Make a complaint to the Information Commissioner’s Office if you believe your data protection rights have not been respected.

12. Subject Access Requests

You have the right to request access to the personal data we hold about you.

If you make a Subject Access Request, we will provide information about:

  • Whether we process your personal data and why.
  • The types of personal data we hold.
  • Where the information came from, if it was not collected directly from you.
  • Who your information has been or may be shared with.
  • How long we keep your information.
  • Your rights to correct, delete, restrict or object to the processing of your data.
  • Your right to complain to the Information Commissioner.
  • Whether automated decision-making is used.
  • We will also provide you with a copy of the personal data being processed.

To make a Subject Access Request, please contact Lisa Newell lisa@mergingminds.co

We may ask you to provide proof of identity before processing your request.

We will normally respond within one month of receiving your request.

13. Keeping Your Information Up to Date

You are responsible for informing us if your personal information changes.

For example, you should let us know if you:

  • Move house.
  • Change your telephone number.
  • Change your email address.
  • Have any other relevant changes to your personal information.

14. Data Security

We take the security of personal data seriously and have measures in place to protect information from:

  • Loss
  • Accidental destruction
  • Misuse
  • Unauthorised disclosure
  • Unauthorised access

Access to personal data will be limited to employees and other authorised individuals who need the information to carry out their duties.

Where we use third parties to process personal data on our behalf, they will be required to:

  • Follow our written instructions.
  • Maintain confidentiality.
  • Put appropriate technical and organisational security measures in place.

We will also take appropriate steps to ensure that:

  • Personal data is stored securely using up-to-date software.
  • Deleted information is disposed of securely and, where appropriate, made irrecoverable.
  • Suitable backup and disaster recovery arrangements are in place.
  • Data is transferred securely.

15. Data Breaches

If we become aware of a personal data breach that poses a risk to your rights and freedoms, we will report it to the Information Commissioner within 72 hours of becoming aware of the breach, where required.

We will keep a record of all personal data breaches.

If a breach is likely to result in a high risk to your rights and freedoms, we will inform you and provide information about:

  • The likely consequences of the breach.
  • The steps being taken to reduce or manage the impact.

16. International Data Transfers

The organisation will not transfer personal data to countries outside the European Economic Area (EEA).

17. How we store your data

The retention schedule table below shows what data we collect, where we store it and how long we have to store it for.

Retention schedule