// Legal

Privacy Policy

Last updated: 15 July 2026

1. Who we are

NEXTGEN MIND LTD (company number 16341325, registered office: Centro House, 20-23 Mandela Street, London, NW1 0DU, United Kingdom) is the data controller for personal data collected through this website. Contact: info@nextgenmindltd.online, +44 7476 651941.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

  • Order data: name, delivery address, email, phone number and order details when you buy from our shop.
  • Payment data: processed directly by Stripe. We never see or store your full card number or bank account details.
  • Contact data: name, email, phone and message content when you use our contact form.
  • Technical data: basic usage information (browser type, pages visited) collected by our hosting provider for security and performance.

3. Why we use it (lawful bases)

  • Performance of a contract — to process and deliver your orders and provide our courses and services.
  • Legal obligation — to keep accounting and tax records (typically 6 years).
  • Legitimate interests — to respond to enquiries, prevent fraud and improve the website.
  • Consent — for any marketing emails; you may withdraw consent at any time via the unsubscribe link or by contacting us.

4. Who we share data with

We share data only with service providers who help us run the business: Stripe (payments), Netlify (website hosting and form handling) and delivery couriers (name and address to fulfil your order). We do not sell personal data. Where a provider processes data outside the UK, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

5. How long we keep data

Order and invoicing records: 6 years (HMRC requirement). Contact enquiries: up to 2 years. Marketing preferences: until you unsubscribe.

6. Your rights

Under the UK GDPR you have the right to access your data, correct it, ask us to delete it, restrict or object to processing, and to data portability. To exercise any right, email info@nextgenmindltd.online. We respond within one month.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, helpline 0303 123 1113.

7. Cookies and local storage

This website uses your browser's local storage solely to remember the contents of your shopping cart on your own device. This information never leaves your browser until you proceed to checkout. Stripe may set strictly necessary cookies on its checkout pages to process your payment securely.

8. Children

Our courses welcome young learners, but purchases and form submissions on this website must be made by a parent or guardian aged 18 or over.

9. Security

The website is served over HTTPS, payments are handled by a PCI-DSS compliant provider (Stripe), and access to order data is limited to staff who need it.

10. Changes

We may update this policy from time to time. The latest version will always be published on this page with the date above.