Privacy Notice

Version 2.0 · Last updated: 21 October 2026

This Privacy Notice explains how The Mind Mentor (the practice of Latika Gulyani, Goa, India; “we”, “us”) collects and uses your personal data when you use this website or contact us. It is written to meet the requirements of India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. For this purpose, The Mind Mentor is the Data Fiduciary and you are the Data Principal.

1. Summary

• We collect only what we need to respond to your enquiry and provide sessions.
• We process it only with your consent, which you can withdraw at any time.
• We never sell your data, and this website uses no advertising or tracking cookies.
• You can access, correct or erase your data, or raise a grievance, by writing to latika@themindmentor.in.

2. Personal data we collect

Please do not share detailed medical or health information through the contact form. A short description of what you’d like help with is enough; we’ll discuss everything else confidentially in session.

3. Why we use it (purpose) and on what basis

• To respond to your enquiry and arrange sessions: based on your consent given on the contact form or when you contact us.
• To provide psychotherapy, hypnotherapy, coaching or training: based on your consent at the start of our work together.
• To keep the website secure and prevent misuse (for example, blocking spam and repeated failed logins): a legitimate use permitted under the Act.
• To comply with law, or where disclosure is needed to protect someone’s life or safety in an emergency, as permitted under Section 7 of the Act.

We do not use your data for marketing, profiling or automated decision-making, and we do not sell or rent it to anyone.

4. Who we share it with

We share personal data only with service providers (Data Processors) who help us run this website and communicate with you, under contracts that require them to protect it:

• Website hosting: Hostinger (web servers, backups and security logs).
• Email: our email service provider, which receives contact form messages and correspondence.
• Security: our hosting provider’s firewall and malware scanning, which process visitor IP addresses to block attacks.
• WhatsApp (Meta): only if you choose to message us on WhatsApp.

Some providers may process data outside India. We only use providers that apply appropriate safeguards, and we will follow any restrictions the Government of India notifies under Section 16 of the Act. We never share session content with anyone without your consent, except where required by law or to prevent serious harm.

5. How long we keep it

• Enquiries that don’t lead to sessions: erased within 12 months of our last contact.
• Client records: kept only as long as needed to provide care and meet professional and legal obligations, and then securely erased.
• Server and security logs: kept for at least one year, as required by the DPDP Rules, and then deleted.

Where we erase data because its purpose is complete, we will give you at least 48 hours’ notice where the Rules require it.

6. Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how it is processed (Section 11);
• Correct, complete, update or erase your personal data (Section 12);
• Withdraw consent at any time, as easily as you gave it (Section 6). Withdrawal does not affect processing already done;
• Nominate another person to exercise your rights in case of death or incapacity (Section 14);
• Grievance redressal (Section 13), and to complain to the Data Protection Board of India if you are not satisfied with our response.

To use any of these rights, email latika@themindmentor.in with the subject “Data rights request”. We may ask you to verify your identity. We will respond as soon as possible and in any case within 90 days.

7. Contact for data protection and grievances

Latika Gulyani, Founder, The Mind Mentor (person responsible for data protection)
Email: latika@themindmentor.in
Phone / WhatsApp: +91 98675 22255
Location: Goa, India

8. Children

This website and contact form are intended for adults (18+). We do not knowingly collect personal data from children through this website. If you are a parent or lawful guardian seeking support for a child, please contact us directly; we will obtain verifiable consent from you before processing any of the child’s data, as required by Section 9 of the Act. We do not track, profile or target advertising at children.

9. How we protect your data

• Encrypted connections (HTTPS) across the whole website.
• Contact form submissions are emailed to us and not stored in the website database.
• Restricted administrator access, login-attempt limits, security headers, spam protection and regular software updates.
• Confidential handling of all session information.

If a personal data breach occurs, we will inform affected individuals without delay and report it to the Data Protection Board of India, as required by the DPDP Rules.

10. Cookies

This website uses only strictly necessary cookies and local storage (for example, to remember that you closed the privacy banner, or to keep administrators logged in). We do not use analytics, advertising or third-party tracking cookies. Fonts are served from our own server, not from third parties.

11. Changes to this notice

We may update this notice from time to time. The version and date at the top show when it last changed. Significant changes will be highlighted on this page.

This notice is provided for transparency and does not replace professional legal advice.