PRIVACY POLICY

Last Updated: 22 July 2026

Beyond Mind Ltd trading as Beyond Neuroscience (“Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit our website, take our Neural Profile Quiz, enrol in our digital programs (RESET), attend our live immersions (FEEL), or engage our B2B corporate team services (OPTIMIZE).

It also informs you of your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  1. IMPORTANT INFORMATION & WHO WE ARE

Data Controller

Beyond Mind Ltd is the Data Controller responsible for your personal data.

If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact us using the details below:

Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to address your concerns before you approach the ICO, so please contact us first.

  1. THE DATA WE COLLECT ABOUT YOU

We may collect, use, store, and transfer different kinds of personal data about you, categorized as follows:

  • Identity Data: First name, last name, title, company name, job title (for corporate B2B clients).
  • Contact Data: Email address, telephone number, billing address, delivery address.
  • Quiz & Profile Data: Answers provided during the Neural Profile Quiz (e.g., focus tendencies, daily routines, meditation preferences) and your resulting mindset profile.
  • Special Category (Health/Wellbeing) Data: Self-reported safety disclosures collected prior to participating in acoustic, visual, or breathwork immersions (FEEL / OPTIMIZE)—such as notification of pregnancy, epilepsy, photosensitivity, cardiovascular history, or recent surgery.
  • Program Access Data: User portal credentials, enrolment dates, and access validity tracking for the 6-month digital access window for the RESET program.
  • Financial & Transaction Data: Payment card details (processed securely via third-party payment gateways; we do not store full credit card numbers on our servers), details about payments to and from you, and services purchased.
  • Technical Data: IP address, browser type and version, time zone setting, location, operating system, and platform.
  • Usage Data: Information about how you navigate and interact with our website, digital portal, video/visual tools, audio entrainment tracks, YouTube channels, and digital programs.
  • Marketing & Communications Data: Your preferences in receiving marketing emails from us.
  1. HOW WE COLLECT YOUR DATA

We collect data through different methods:

  1. Direct Interactions: You give us your Identity, Contact, Financial, and Health/Wellbeing Data when you fill in website forms, take the Neural Profile Quiz, enrol in a digital program, book a corporate session, or subscribe to our updates.
  2. Automated Technologies: As you interact with our website and learning portal, we automatically collect Technical and Usage Data using cookies, server logs, and analytics tools.
  3. Third Parties / Public Sources: We may receive personal data about you from analytics providers (such as Google Analytics), payment processors (such as Stripe or PayPal), and corporate employers (providing employee participant lists for B2B OPTIMIZE sessions).
  1. LAWFUL BASIS FOR PROCESSING YOUR DATA

Under the UK GDPR, we must have a legal basis to process your personal data. We rely on the following bases:

Purpose / Activity

Type of Data

Lawful Basis for Processing

To register you as a new client or portal user

Identity, Contact

Performance of a Contract with you

To administer the Neural Profile Quiz and deliver your results

Identity, Contact, Quiz Data

Consent / Performance of a Contract

To process payments, manage B2B bookings, and administer 6-month portal access (RESET)

Identity, Contact, Financial, Transaction, Program Access Data

Performance of a Contract and Legitimate Interests

To ensure participant safety during acoustic, visual (light/flicker), or breathwork sessions

Special Category (Health/Wellbeing Data)

Explicit Consent (collected prior to the session)

To send marketing communications, free audio/video tools, and scientific updates

Identity, Contact, Marketing

Consent (for individual consumers) / Legitimate Interests (for corporate B2B contacts)

To manage our business, platform security, and website infrastructure

Technical, Usage, Identity

Legitimate Interests (running our business, network security)

  1. HOW WE USE YOUR DATA

We will only use your personal data for the purpose for which it was collected:

  • To deliver personalized meditation profiles and manage your 6-month digital program access.
  • To host live inward immersions (FEEL) and corporate team sessions (OPTIMIZE) safely and effectively.
  • To provide corporate strategic team reporting and service delivery.
  • To process payments, manage corporate invoices, and handle customer support.
  • To send relevant news, scientific insights, and audio/video releases (you can opt out at any time).

Direct Marketing & Opting Out

You can ask us to stop sending you marketing emails at any time by clicking the “Unsubscribe” link at the bottom of any email or by contacting us directly.

  1. DISCLOSURES OF YOUR PERSONAL DATA

We do not sell, rent, or trade your personal data. However, we may share your data with trusted third-party service providers to run our business:

  • Service Providers: IT, hosting, and learning portal platforms; email delivery services; CRM systems; corporate booking engines.
  • Payment Processors: Secure merchant platforms (e.g., Stripe, PayPal) for transaction processing.
  • Professional Advisers: Lawyers, accountants, insurers, and auditors who provide professional advice in the UK.
  • Corporate Clients (B2B): For OPTIMIZE corporate bookings, aggregated attendance or participation metrics may be shared with the commissioning employer, but individual private reflection responses remain strictly confidential.

All third parties are contractually required to respect the security of your data and treat it in accordance with the law.

  1. INTERNATIONAL DATA TRANSFERS

Some of our third-party software providers (e.g., US-based email or cloud hosting platforms) are located outside the United Kingdom.

Whenever we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded by ensuring at least one of the following safeguards is implemented:

  • The country has been deemed to provide an adequate level of protection for personal data by the UK Government.
  • We use UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs) approved for UK use.
  1. DATA SECURITY

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed:

  • All website, quiz, and portal data transmission are encrypted via SSL/TLS technology.
  • Access to personal data is limited strictly to employees, contractors, and facilitators who have a business need-to-know.
  • Special category health disclosures (photosensitivity, epilepsy, cardiovascular notes) are stored in password-protected, encrypted systems and destroyed after session completion where appropriate.
  1. DATA RETENTION

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

  • Client & Transaction Records: Retained for 6 years following the end of the financial year in which the transaction occurred (UK tax law compliance).
  • Program Portal Account Data (RESET): Retained for the duration of your 6-month active access window, plus a reasonable post-expiry buffer (up to 12 months) should you choose to renew, after which account details are anonymized or deleted.
  • Quiz & Marketing Data: Retained until you withdraw your consent or request account deletion.
  • Special Category (Health) Disclosures: Retained only for the duration of the specific live or corporate session for safety records and deleted within 12 months unless a legal dispute requires longer retention.
  1. YOUR LEGAL RIGHTS

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of Access (“Subject Access Request”): Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): Request that we delete your personal data where there is no good reason for us continuing to process it.
  • Right to Restrict Processing: Request a pause on processing your data under certain scenarios.
  • Right to Data Portability: Request the transfer of your personal data to you or a third party in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us at support@beyondneuroscience.com. We respond to all legitimate requests within one calendar month.

  1. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies to distinguish you from other users and analyse site traffic.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. For full details on how we use cookies, please review our Cookie Policy.

  1. CHANGES TO THIS PRIVACY POLICY

We keep our Privacy Policy under regular review. Any updates will be posted on this page with an updated “Last Updated” date. We encourage you to check back periodically.

  1. CONTACT US

If you have questions, comments, or requests regarding this Privacy Policy, please contact:

Beyond Mind Ltd (Trading as Beyond Neuroscience).

support@beyondneuroscience.com

www.beyondneuroscience.com