MND Projects

Privacy Policy

Last updated: 17 April 2026

This privacy policy describes what personal data is collected, how it's used, and how it's protected when you use mnd-projects.com. It applies to visitors to this website and to anyone who contacts MND Projects through it.

Data controller

The data controller is MND Projects — a freelance operations practice (autónoma) registered in Spain.

What data is collected

Only data you choose to provide is collected:

  • Contact form — your name, email address, which service you're interested in, and the message you send.
  • Booking form — your name, email address, time slot, and any notes you add when booking a Reality Check call.
  • Email — whatever you send directly to the MND Projects inbox.
  • Basic technical data — the hosting provider (Cloudflare Pages) logs standard request information (IP address, timestamp, user agent) for security and abuse prevention only. This is not used to identify or track visitors.

No analytics, advertising trackers, or cookies are used on this site.

How your data is used

Your data is used to:

  • Respond to inquiries or requests (legal basis: steps taken at your request before entering into a contract)
  • Deliver services you've engaged MND Projects for (legal basis: performance of a contract)
  • Meet legal obligations like Spanish tax and accounting requirements (legal basis: legal obligation)
  • Protect this website from abuse (legal basis: legitimate interest)

Your data is never sold or shared for marketing purposes.

Who your data is shared with

MND Projects relies on these vendors to run the business. All are GDPR-compliant, and your data is shared with them only as needed to deliver the service:

  • Formspree (USA) — processes the contact form.
  • Moxie (USA) — handles bookings and acts as the CRM where inquiries are tracked.
  • Google Workspace (Google Calendar, Google Docs) — schedules calls and stores working documents for active client engagements.
  • Proton Mail (Switzerland) — the email inbox, end-to-end encrypted.
  • Cloudflare Pages (USA, global CDN) — hosts the website.
  • The Green Web Foundation (Netherlands) — verifies that this site runs on renewable energy. A small badge image loads from their servers on each page.

How long your data is kept

Data is retained only as long as necessary — to respond to an inquiry, deliver services you've engaged MND Projects for, or meet legal obligations like tax and accounting records. Once it's no longer needed, it's deleted. You can request earlier deletion at any time (see Contact below).

Your rights

Under GDPR, you have the following rights over your personal data. Requests will be answered within one month.

  • Right to access — request a copy of the data held about you.
  • Right to rectification — request correction of data that's inaccurate or incomplete.
  • Right to erasure — request deletion of your data ("right to be forgotten").
  • Right to restrict processing — request that processing stop in certain ways.
  • Right to object to processing — object to processing of your data in certain circumstances.
  • Right to data portability — request your data in a portable format to transfer elsewhere.
  • Right to withdraw consent — where processing is based on consent, it can be withdrawn at any time.

MND Projects is regulated by the Spanish Data Protection Authority (AEPD). If a response isn't satisfactory, a complaint can be lodged there.

Cookies

This site does not set any cookies and does not use analytics.

The only element on the site that may set cookies is the booking iframe (Moxie). When you interact with it to book a call, Moxie may set cookies in its own domain (withmoxie.com). Those cookies are governed by Moxie's privacy policy. If you don't open the booking widget, no cookies are set.

Newsletter (NavigationLab)

The newsletter is hosted independently on Substack. MND Projects doesn't maintain a mailing list or send marketing emails. If you subscribe to NavigationLab, Substack handles all subscription data under their own privacy policy. See Substack's privacy policy.

Links to other websites

This site contains links to external sites like LinkedIn, Substack, and others. This privacy policy applies only to mnd-projects.com. Once you follow a link to another site, please read their privacy policy.

Changes to this policy

This policy may be updated from time to time. The "Last updated" date at the top will reflect the latest revision.

Contact

For anything related to your data or this policy, email the MND Projects inbox. Responses within one month, usually sooner.