GDPR Privacy Notice

This GDPR Privacy Notice explains how SKILL MIND HUB LTD, trading as Skill Mind Hub, collects, uses, stores, shares and protects personal data when individuals visit our website, create an account, purchase digital courses, access online learning materials, contact us, subscribe to our newsletter or otherwise interact with our services.

Skill Mind Hub is an online learning platform offering psychology-led digital education content, including video courses, online course access, workbooks, PDF materials and related digital learning resources. The products and services provided through the website are digital in nature. We do not sell physical products, and we do not provide delivery by post, courier or any other physical shipping method.

This Privacy Notice is intended to provide clear and transparent information about our data processing activities in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and, where applicable, other relevant data protection laws. It should be read together with our Cookie Policy, Terms of Use, Membership Agreement, Distance Selling Agreement and Cancellation & Refund Policy.

1. Who We Are

For the purposes of the UK GDPR, the controller of your personal data is:

Company name: SKILL MIND HUB LTD
Trading name: Skill Mind Hub
Registration: Registered in England and Wales
Companies House No: 17048389
Registered Office: 17 Green Lanes, London, England, N16 9BS
Website: https://www.skillmindhub.co.uk/
Contact email: skillmindhub@gmail.com

We have not appointed a Data Protection Officer where such appointment is not legally required. If you have any questions about this Privacy Notice or how your personal data is handled, you may contact us at skillmindhub@gmail.com.

2. Scope of This Notice

This Privacy Notice applies to personal data processed in connection with the Skill Mind Hub website and online platform. It applies to website visitors, registered users, course purchasers, newsletter subscribers, individuals who contact us through the website or by email, and anyone whose personal data is processed in connection with our digital learning services.

This Notice does not cover third-party websites, platforms or services that may be linked from our website or used independently by you. Where you interact directly with third-party providers, such as Stripe or Google, their own privacy notices and terms may also apply.

3. Nature of Our Services and Important Health Disclaimer

Skill Mind Hub provides digital education content for learning, personal development, awareness and skills-building purposes. Our content may relate to psychology, wellbeing, relationships, communication, boundaries, emotional awareness and similar educational themes.

The courses, videos, workshops, workbooks, PDFs and digital materials available through Skill Mind Hub are not medical services, therapy, psychotherapy, clinical advice, diagnosis, treatment, emergency support, prescription services or one-to-one healthcare services. Purchasing or accessing a digital course through the website does not create a therapist-client, clinician-patient or healthcare professional relationship.

We do not guarantee any specific psychological outcome, permanent change, recovery, treatment effect or improvement. The benefit a user may obtain from the educational materials depends on the user’s own engagement, understanding, application of the skills taught and individual circumstances. If you are experiencing an emergency, serious mental health concern, medical condition or crisis, you should contact local emergency services, a hospital, a psychiatrist, your doctor or another appropriately qualified healthcare professional.

4. Personal Data We Collect

The personal data we collect depends on how you use our website and services. We may collect and process the following categories of personal data:

4.1 Identity and Contact Data

First name and last name;
Email address;
Telephone country code, telephone number, country ISO code and national number;
Information you provide when contacting us, submitting forms or sending support requests.

4.2 Account and Membership Data

User ID and account records;
Registration date and account status;
Login, logout, password reset and profile update records;
Password hash; we do not store your password in plain text;
Session and account security information.

4.3 Order, Payment and Course Access Data

Courses purchased by you;
Course price, currency, access duration and order date;
Order status and payment status;
Stripe Customer ID, Checkout Session ID, Payment Intent ID, Product ID, Price ID and similar payment references;
Billing address, tax ID and payment-related information collected through Stripe where applicable;
Course access records, access start and expiry information;
Video progress, checkpoints and course completion-related technical data;
Records of access to downloadable or viewable learning materials such as PDFs or workbooks.

We do not store full card numbers, CVC codes or other sensitive card authentication details on Skill Mind Hub servers. Card payments are processed through Stripe’s secure checkout and payment infrastructure.

4.4 Technical, Device and Security Data

IP address;
Browser type, device type and user agent;
Session data and security tokens;
CSRF/session records and form security information;
Operational logs relating to registration, login, password reset, checkout, profile update and other account actions;
Error logs, security logs and system integrity records;
Information used to detect fraud, abuse, spam, unauthorised access or suspicious activity.

4.5 Communication and Support Data

Messages submitted through the contact form;
Support requests relating to access, payments, refunds, accounts or technical issues;
Email correspondence with us;
Information required to assess, respond to and keep records of your request.

4.6 Newsletter and Marketing Preference Data

Email address used for newsletter subscription;
Subscription status and subscription date;
Marketing communication preferences;
Unsubscribe or opt-out records.

4.7 Cookie, Analytics and Online Usage Data

Strictly necessary cookies and local storage data required for the website to function;
Cookie consent preference, including the value stored as smhCookieConsent;
Google Analytics data where you have consented to analytics cookies;
Page views, approximate device/browser information, traffic source and similar website usage data;
Google reCAPTCHA-related technical information used for spam prevention and form security.

5. Special Category Data

We do not intentionally request or require special category personal data, such as health data, medical history, mental health diagnosis, therapy records, treatment information, biometric data, religious beliefs or similar sensitive information, as part of our standard registration, purchase or course access process.

Because Skill Mind Hub offers educational content in the field of psychology and personal development, users may choose to disclose personal circumstances when contacting us. We ask that you do not submit medical, diagnostic, therapeutic, psychiatric or other sensitive information through contact forms, emails or free-text fields unless it is strictly necessary for your request.

If you voluntarily provide information that may constitute special category data, we will handle it only to the extent necessary to understand and respond to your communication, protect our legal rights, comply with legal obligations or take appropriate action where the law permits or requires it. We may delete, restrict or avoid further processing of such information where it is not necessary for the relevant purpose.

6. How We Collect Personal Data

We may collect personal data directly from you when you:

Visit the website;
Create a user account;
Log in to your account;
Purchase a course;
Use Stripe Checkout;
Access a purchased course;
Watch video lessons or interact with course materials;
Update your profile or password;
Submit a contact form;
Subscribe to our newsletter;
Change your cookie preferences;
Send us an email or support request.

We may also receive personal data from service providers involved in providing our services, such as Stripe for payment confirmation, Google for analytics or reCAPTCHA-related security information, and hosting or email infrastructure providers for technical delivery.

7. Purposes and Lawful Bases for Processing

We only process personal data where we have a lawful basis under the UK GDPR. The table below explains the main purposes for which we process personal data, the categories of data involved and the lawful bases we rely on.

Purpose	Types of Data	Lawful Basis
Creating and managing user accounts	Identity, contact, account, login and security data	Performance of a contract; legitimate interests in operating a secure user platform
Providing access to purchased digital courses	Account data, course access data, order records and progress data	Performance of a contract
Processing course purchases and payments	Order, payment reference, billing and Stripe-related transaction data	Performance of a contract; legal obligation; legitimate interests in payment administration and fraud prevention
Managing course progress and learning continuity	Course progress, video checkpoint and access records	Performance of a contract; legitimate interests in providing a functional learning experience
Responding to contact forms and support requests	Identity, contact, communication and support data	Legitimate interests in responding to enquiries; performance of a contract where the request relates to a purchase or account
Sending system emails, password resets and service notices	Email address, account and operational data	Performance of a contract; legitimate interests in maintaining account access and service security
Sending newsletters and promotional communications	Email address, subscription status and marketing preferences	Consent, where required; legitimate interests where permitted by applicable electronic communications rules
Operating cookies required for the website to function	Session, security and cookie preference data	Legitimate interests in operating the website securely and effectively
Using Google Analytics	Analytics and website usage data	Consent
Using Google reCAPTCHA for form security	Technical, device, IP and interaction data	Legitimate interests in preventing spam, abuse and automated misuse of forms
Maintaining website security and preventing fraud	IP address, user agent, logs, session data and security records	Legitimate interests; legal obligation where applicable
Keeping accounting, tax and legal records	Order, payment, invoice, billing and transaction records	Legal obligation; legitimate interests in maintaining business records
Establishing, exercising or defending legal claims	Account, order, payment, communication, support and security records	Legitimate interests; legal obligation where applicable

8. Legitimate Interests

Where we rely on legitimate interests, we do so only where we consider that our interests are not overridden by your fundamental rights and freedoms. Our legitimate interests may include:

Operating and improving the Skill Mind Hub website and learning platform;
Keeping the website and user accounts secure;
Preventing fraud, spam, misuse, unauthorised access and abusive behaviour;
Responding to user enquiries and support requests;
Maintaining accurate business, order and technical records;
Protecting our legal rights and resolving disputes;
Understanding service performance and improving the user experience, where this does not require consent.

9. When Providing Personal Data Is Required

Certain personal data is necessary for us to provide the services you request. For example, we need your name, email address and account details to create an account; order and payment information to process a course purchase; and technical/security information to protect the platform.

If you do not provide the information required for account creation, payment processing, course access or security, we may be unable to provide the relevant service, complete your purchase, give you access to a digital course, respond to your request or maintain your account.

Marketing newsletter subscription and non-essential analytics cookies are optional. You may choose not to subscribe to the newsletter or not to accept analytics cookies without affecting your ability to purchase and access courses.

10. Payment Processing and Stripe

Payments for Skill Mind Hub courses are processed through Stripe Checkout. Stripe may collect and process information necessary to complete the payment, including card payment details, billing address, tax ID where applicable, payment method details and fraud prevention information.

Skill Mind Hub receives payment confirmation and transaction references from Stripe, such as Checkout Session ID, Payment Intent ID, Stripe Customer ID, Product ID and Price ID. These records are used to confirm payment, create or update course access, maintain order records, resolve payment issues, assess refund requests and meet legal or accounting obligations.

Full card numbers, CVC codes and sensitive card authentication information are not stored on Skill Mind Hub servers. Such data is handled by Stripe under its own security and compliance controls.

11. Cookies, Analytics and reCAPTCHA

We use cookies and similar technologies to operate the website, maintain sessions, protect forms, remember cookie choices and improve the user experience. Strictly necessary cookies are required for the website to work and cannot be switched off through our cookie banner.

Google Analytics is used only where you have consented to analytics cookies. If you select “Accept All”, Google Analytics may be loaded and used to help us understand how visitors use the website. If you select “Necessary Only”, Google Analytics will not be loaded for your visit. We use Google Analytics with IP anonymisation settings where configured.

Google reCAPTCHA v3 may be used on registration, login, contact, newsletter, password reset, profile and checkout-related forms to help prevent spam, automated abuse and fraudulent use. reCAPTCHA may process technical data such as IP address, device/browser information and interaction data.

More information about cookies and your choices is provided in our Cookie Policy.

12. Who We Share Personal Data With

We may share personal data with the following categories of recipients where necessary for the purposes described in this Notice:

Stripe: for payment processing, checkout, fraud prevention, billing, tax ID collection where applicable, transaction confirmation and payment-related support.
Hostinger and hosting infrastructure providers: for hosting, server infrastructure, database storage, SMTP/system email delivery and technical platform operation.
Google: for Google Analytics, where consent is given, and Google reCAPTCHA for form security and spam prevention.
Email and communication service providers: for service emails, password reset messages, account communications, newsletter delivery and support replies.
Technical service providers: for website maintenance, security, debugging, system monitoring, error handling and infrastructure support.
Professional advisers: including legal, accounting, compliance, tax or business advisers where necessary for legal obligations, accounting records, dispute handling or protection of legal rights.
Public authorities, courts, regulators and law enforcement: where required by law, legal process, regulatory request or to protect legal rights.

We do not sell your personal data. We do not provide personal data to third parties for their own independent marketing purposes without a lawful basis and, where required, your consent.

13. International Transfers

SKILL MIND HUB LTD is registered in England and Wales. Our website, service providers, payment infrastructure, analytics tools, email systems and technical partners may process personal data in the United Kingdom and, where necessary, in other countries.

Personal data may be transferred to or accessed from outside the United Kingdom where we use international service providers such as Stripe, Google, hosting providers or technical infrastructure providers. Such transfers may include transfers to countries that do not provide the same level of protection as UK data protection law.

Where a restricted transfer of personal data takes place, we seek to rely on appropriate transfer mechanisms under the UK GDPR, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, contractual safeguards, or another lawful transfer mechanism available under applicable data protection law. The applicable mechanism may depend on the recipient, the country, the nature of the processing and the services used.

14. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including for the purposes of providing services, maintaining accounts, fulfilling orders, complying with legal obligations, resolving disputes, preventing fraud and protecting legal rights.

Account data: retained while your account remains active and for a reasonable period afterwards where required for legal, security, dispute or record-keeping purposes.
Order and payment records: retained for as long as required for accounting, tax, financial reporting, dispute resolution and legal compliance purposes.
Course access and progress records: retained for the period necessary to provide course access, manage your learning experience and support course-related queries.
Contact and support records: retained for the period necessary to respond to the request and for a reasonable period afterwards for record-keeping and dispute management.
Newsletter data: retained while you remain subscribed. If you unsubscribe, we may retain a suppression record to ensure we respect your opt-out.
Security logs and technical records: retained for a reasonable period to protect the website, prevent fraud, investigate security incidents and maintain system integrity.
Cookie consent records: retained for as long as necessary to remember your cookie preference or until you change or clear your preference.

When personal data is no longer required, we will delete it, anonymise it or otherwise handle it in accordance with applicable law and our technical retention processes.

15. Your Data Protection Rights

Depending on the circumstances and the lawful basis for processing, you may have the following rights under UK data protection law:

Right of access: to request confirmation of whether we process your personal data and to receive a copy of that data.
Right to rectification: to request correction of inaccurate or incomplete personal data.
Right to erasure: to request deletion of personal data where applicable.
Right to restriction: to request that we restrict processing of your personal data in certain circumstances.
Right to data portability: to receive certain personal data in a structured, commonly used and machine-readable format where applicable.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right not to be subject to solely automated decisions: where such decisions produce legal or similarly significant effects.

Some rights may not apply in all circumstances. For example, where we must retain certain information for legal, accounting, fraud prevention or dispute resolution reasons, we may not be able to delete that information immediately.

16. How to Exercise Your Rights

You may exercise your data protection rights by contacting us at: skillmindhub@gmail.com.

To protect your privacy and security, we may ask you to provide information reasonably necessary to verify your identity before responding to a request. We will respond to valid requests within the time limits required by applicable data protection law.

If a request is complex, repetitive, excessive or requires additional information, we may take steps permitted by law, including requesting clarification, extending the response period or refusing the request where legally justified.

17. Right to Complain

If you are located in the United Kingdom and you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection matters.

You may contact the ICO through its official website at https://ico.org.uk/. We would, however, appreciate the opportunity to address your concerns first, and you may contact us at skillmindhub@gmail.com.

If you are located in the European Economic Area or another jurisdiction with applicable data protection rights, you may also have the right to contact your local data protection authority.

18. Children and Minors

Skill Mind Hub is intended for users who are legally able to create an account and purchase digital content. The website and courses are not directed at children. Individuals under the age of 18 should not create an account, purchase courses or submit personal data without the involvement and consent of a parent or legal guardian where required by law.

We do not knowingly seek to collect personal data from children for marketing purposes. If we become aware that a child has provided personal data without appropriate consent or legal basis, we may delete or restrict the relevant account or information where appropriate.

19. Automated Decision-Making and Profiling

We do not use personal data to make solely automated decisions that produce legal effects or similarly significant effects concerning you.

Some service providers, such as Stripe or Google, may use automated systems for fraud prevention, payment security, spam prevention or analytics. These processes are used to protect the website, payments and forms from abuse and to maintain service integrity.

20. Security of Personal Data

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, misuse, alteration or disclosure. These measures may include password hashing, secure session handling, form protection, CSRF protection, spam prevention, access controls, payment processing through Stripe, system logs and technical monitoring.

No online service can guarantee absolute security. You are responsible for keeping your account login details confidential, using a strong password, not sharing your account with others and notifying us if you suspect unauthorised use of your account.

21. Third-Party Links and Services

Our website may contain links to third-party websites, tools or services. We are not responsible for the privacy practices, security measures or content of third-party websites. When you use third-party services, including payment, analytics or security providers, their own privacy notices and terms may apply.

22. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in law, regulatory guidance, our services, our technology, our service providers or our data processing practices. The updated version will be published on our website and will apply from the date of publication.

Last updated: May 2026