Privacy Policy

What we collect, and why

When you request a conversation or another enquiry

We collect the information you enter in the form: your name, work email address, company, job title, the category you work in, and whatever you tell us about your situation. We use it to reply to you, to prepare for the conversation, and to keep a record of the exchange.

The lawful basis is our legitimate interest in responding to business enquiries and in running a business-to-business practice (GDPR Article 6(1)(f)). You asked us to get in touch; replying is what you expect.

When you subscribe to The Brief

We collect your email address and use it to send the publication. The lawful basis is your consent (Article 6(1)(a)). You can withdraw it at any time using the unsubscribe link in any issue, or by emailing us. Withdrawing consent does not affect anything sent before you withdrew it.

When you download a briefing or category read

We collect the same details as an enquiry, and we record which document you asked for. If you separately tick the box to receive The Brief, that is treated as consent and handled as described above. If you do not tick it, we do not subscribe you.

When you visit the site

We use Vercel Web Analytics, which counts page views and visits without cookies and without building a profile of you. It does not identify you, and it does not follow you to other sites. Our servers also keep short-lived technical logs — IP address, browser, the page requested — which exist to keep the site working and secure.

We do not use cookies for advertising or tracking. There are no advertising pixels, no third-party trackers, and no data sold or shared with advertisers.

Who else sees it

We use a small number of service providers who process data on our instructions and are bound by contract to protect it. We do not sell personal data, and we do not share it with anyone for their own purposes.

Where a provider processes data outside the European Economic Area, the transfer is made under the European Commission's Standard Contractual Clauses, or under an adequacy decision where one applies. The United Kingdom is covered by an adequacy decision.

How long we keep it

We keep enquiry records for 24 months from our last contact with you, then delete or anonymise them. If you become a client, the records associated with that engagement are kept for as long as the contract requires and for the periods Finnish accounting law obliges us to keep them.

Subscription records are kept until you unsubscribe, and for a short period afterwards so that we can honour the unsubscribe.

Technical logs are kept for a matter of days.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you
• correct anything that is wrong
• delete it
• restrict what we do with it, or object to our processing on legitimate-interest grounds
• provide it in a portable form
• stop sending you The Brief, at any time

Email hello@originalminds.co and we will respond within one month. We will not ask you to justify the request.

If you think we have handled your data badly and we have not resolved it, you can complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi.

Security

Enquiry records are held in an access-controlled database in Ireland. Access is limited to the people who need it, which at present is a very short list. We are a small firm and we do not pretend to run a large security organisation; we do run a careful one.

Children

This site is for business audiences. It is not directed at children, and we do not knowingly collect data from anyone under 16.

Changes

If we change this policy we will change the date at the top. If a change materially affects how we use data you have already given us, we will tell you directly.

Contact

Questions about this policy, or a request about your data: hello@originalminds.co