Policies
Data retention schedule
How long MindHug keeps each kind of personal data, and why.
Version 1 · Effective 23 September 2026
How long we keep things
We keep personal data only as long as we need it for the purpose we collected it, or as long as the law requires. When a period ends, we delete the data or irreversibly anonymise it. These periods are reviewed as our services change.
- Enquiry and contact submissions — while we are in contact and up to 24 months after our last contact, unless a contract forms, then deleted
- MindHug Zero waitlist — until launch or until you unsubscribe; removed on request, and reviewed within 12 months of launch if not taken up
- The Signal newsletter — until you unsubscribe
- Consent records — kept for the life of the consent plus 6 years, as evidence of what you agreed and when
- Programme participant data — identifiable data held for the period set in the client agreement, normally no more than 24 months; evaluation results are anonymised or aggregated for research and kept longer in that form only
- Financial and tax records (invoices, payments) — the current financial year plus 6 years, as UK law requires
- Website analytics — first-party server analytics up to 26 months; server access logs up to 12 months
- Email delivery logs — for the short period our email provider retains them operationally
Deletion and your rights
You can ask us to delete your data sooner where we do not have a legal reason to keep it. To make a request, email [email protected]. This schedule sits alongside our privacy notice.