Privacy Policy

Effective date:

This Policy is provided for general informational purposes and reflects our good-faith understanding of privacy requirements. It is not legal advice. Privacy laws change and apply differently depending on your circumstances. If you have specific questions, consult a qualified attorney.

1. Controller

Mine Consulting, Hamburg, Germany (“we”, “us”). Contact: Milli_mine@yahoo.co.uk.

2. Scope

This Policy explains how we collect, use, share, and protect personal data when you visit our website, submit the contact form, or purchase sessions via PayPal.

3. Categories of Data

• Contact Data: name, email address, message content submitted via forms or email.
• Payment Data: processed by PayPal (we do not receive card numbers). We may receive transaction confirmations and payer contact details from PayPal.
• Technical Data: IP address, browser type, device data, and basic usage information (via hosting provider and minimal cookies).
• Scheduling Data: if you share availability by email, we process times and preferences to arrange a session.

4. Lawful Bases (GDPR Art. 6)

• Contract/Pre‑contractual steps: to provide sessions you request.
• Legitimate interests: to operate our website, communicate with you, and prevent abuse.
• Consent: where required (e.g., optional marketing communications).
• Legal obligations: to comply with accounting and applicable laws.

5. Purposes

• Respond to inquiries and deliver sessions.
• Process payments and manage bookings.
• Improve site reliability and security.
• Maintain records and comply with legal duties.

6. Sharing & Processors

We share data with trusted vendors only as needed to operate our services:

• Hosting: Vercel, Inc. (static hosting and serverless functions).
• Payments: PayPal (payment processing and receipts).
• Email: our email provider to send/receive communications.
• Other tools: only if necessary (e.g., scheduling tools). We will update this Policy if we add new processors.

7. International Transfers

Vendors may process data outside the EU/EEA (e.g., US). Where applicable, we rely on appropriate safeguards such as the EU‑US Data Privacy Framework, Standard Contractual Clauses, or other lawful mechanisms.

8. Retention

• Contact inquiries: up to 12 months after resolution.
• Transaction records: up to 10 years (German tax laws).
• Security logs: up to 12 months, unless needed longer to investigate incidents.

9. Cookies & Similar Tech

We use minimal cookies and local storage for basic site functionality (e.g., cookie consent banner) and services (e.g., Vercel hosting). We do not use invasive tracking. You can block cookies in your browser; parts of the site may still function.

10. Security

We use reasonable technical and organizational measures to protect personal data (e.g., HTTPS, least‑privilege access). No method is 100% secure.

11. Your Rights (GDPR)

• Access, rectification, erasure, restriction, portability, and objection.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with a supervisory authority.

In Hamburg: Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit).

12. Children

Our services are for adults (18+) and not directed to children. We do not knowingly collect children’s data.

13. Third‑Party Links

We may link to external sites. Their privacy practices are their own; please review their policies.

14. Changes

We may update this Policy. Updates will be posted here with a new effective date.

15. Contact

For privacy requests, email Milli_mine@yahoo.co.uk. We will respond within 30 days.