Privacy & Data Protection
Last updated: 11 November 2026
How information is handled when you visit Minds Across or contact us through this website.
Who is responsible
Minds Across is operated by GMP HMRSMTH HOLDINGS LTD (GMP Hammersmith Holdings), registered in Cyprus under company number HE417924. Registered office: Charalampou Mouskou, 20, 108, Paphos, Cyprus, 8010. The company is the controller for the website and enquiries addressed to us. For privacy questions and requests, contact gdpr@mindsacross.com, or write to our registered office.
What the website does
You can browse without an account. The enquiry form prepares an email in your own email application. Typing into the form does not submit your message to our server; you choose whether to send the draft. The website does not provide a CV upload service or store form entries in a website database.
If you send an email, we receive your email address, message and any details or attachments you include, such as your name, company, recruitment requirements or professional experience. Please share only information relevant to your enquiry. Do not include identity documents, medical information or other sensitive personal details in an initial message.
Purposes and legal bases
We use enquiry information to understand your request, respond and discuss the services or opportunities you ask about. Where applicable, the basis is taking steps at your request before entering a contract (Article 6(1)(b) GDPR), or our legitimate interests in responding to professional enquiries and managing business communications (Article 6(1)(f)). Our interest in providing a reliable and secure website also supports necessary technical processing. A legal obligation may require us to retain or disclose particular records (Article 6(1)(c)).
This notice covers website visits and initial enquiries. A recruitment engagement or use of candidate information for another purpose may require additional information about that processing. Sending an enquiry is not consent to unrelated marketing.
Hosting, email and recipients
Cloudflare delivers and protects the website and routes incoming email to our business inbox. Delivering a page involves technical information such as an IP address, requested URL and browser or device information. Cloudflare may process security and operational data as described in its Privacy Policy. Email is also processed by the providers involved in delivering and hosting the correspondence, and by authorised people handling your request.
Fonts are hosted on this website. The site code includes no advertising pixels or analytics trackers. The website does not make automated recruitment decisions or score visitors.
International processing
Internet delivery and email providers may process information in countries outside the EEA. Where GDPR requires a transfer safeguard, transfers must rely on an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact us for information about the providers and safeguards relevant to your enquiry. Cloudflare describes its international processing in the policy linked above.
Retention
Form text remains in your browser until the page is closed or cleared, subject to your browser’s own form-restoration features. Sent emails are separate records. Their retention depends on whether the enquiry remains active, whether a service relationship follows, and any applicable record-keeping or legal-claim requirements. Information should be deleted or anonymised when those purposes no longer require it. You can ask us about the retention of your particular correspondence.
Your data protection rights
Where GDPR applies, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Rights depend on the circumstances and applicable exceptions.
Send requests to gdpr@mindsacross.com. Please describe your request and the email address used to contact us; we may need proportionate information to verify your identity. GDPR normally requires a response within one month, with a permitted extension for complex requests and notice of that extension. You may complain to the Cyprus Commissioner for Personal Data Protection or the competent authority where you live or work. The EDPB directory lists EU supervisory authorities.
Updates
We update this notice when the website or its processing changes. The date above identifies this version.