Mango Mindsmango
minds
Contact Us
Privacy noticeUpdated 12 August 2026

How we look after your information.

This explains what we collect, why, how long we keep it and what you can ask us to do about it. Written to be read, not to protect us.

Who we are

Mango Minds is a trading name of S&Z Education, based in Newcastle upon Tyne, United Kingdom. We are the data controller for the information described here.

Any question about your data, or to exercise any right below, email admin@mangominds.co.uk or call 07577 589 882. We aim to reply within one working day and must respond within one month.

What we collect and why

Enquiries

Name, email, phone (optional), the type of support you are asking about, and your message.

WhyTo reply to you and work out what support might suit.
Lawful basisConsent — you tick a box before sending. You can withdraw it at any time.
How longUp to 2 years from your last contact, then deleted.
Bookings and payments

Name, email, phone (optional), the session booked, and anything you tell us in the notes field.

WhyTo provide the session you have paid for and keep proper business records.
Lawful basisPerformance of a contract, and legal obligation for the financial records.
How longBooking details 2 years. Payment records 7 years, as HMRC requires.
The Mango Minute

Your email address, and whether you have confirmed it.

WhyTo send you the newsletter you asked for.
Lawful basisConsent — confirmed by clicking the link in our confirmation email.
How longUntil you unsubscribe, then a record that you unsubscribed so we do not email you again.
Support sessions

Notes about the support provided, and anything you choose to share during sessions.

WhyTo deliver support well, and to report to funders where DSA funding applies.
Lawful basisPerformance of a contract. Where notes touch on health or disability, our condition is provision of health or social care under Schedule 1 of the Data Protection Act 2018.
How longUp to 6 years after support ends.

Card payments

Payments are handled by Stripe. We never see or store your card details— they are entered on Stripe’s own secure checkout, not on our website. We receive only confirmation that a payment succeeded, the amount, and the last four digits for reconciliation.

Who else handles your data

We use a small number of service providers to run the website. They act on our instructions and cannot use your data for their own purposes.

VercelWebsite hosting and server logsUSA / EU — Standard Contractual Clauses
ConvexDatabase for enquiries, bookings and mailing listEU (Ireland)
ResendSending emails to youEU / USA — Standard Contractual Clauses
StripeCard payments for bookingsEU / USA — Standard Contractual Clauses
GoogleCalendar for booking availability, and Workspace emailEU / USA — Standard Contractual Clauses
HostingerDomain and email hostingEU

Where a provider processes data outside the UK, that transfer is covered by Standard Contractual Clauses or the UK Extension to the EU–US Data Privacy Framework.

Sensitive information

Because of what we do, you may tell us about a disability, health condition or specific learning difficulty. UK GDPR treats this as special category dataand it gets extra protection. We only record what we need to support you properly, we never share it without your knowledge, and where DSA funding applies we report only what the funding body requires — attendance and the type of support delivered, not the content of your sessions.

Your rights

You can ask us to do any of the following, free of charge:

AccessAsk for a copy of the personal data we hold about you.
RectificationAsk us to correct anything that is wrong or incomplete.
ErasureAsk us to delete your data, where we are not required to keep it.
RestrictionAsk us to pause using your data while a concern is resolved.
PortabilityAsk for your data in a portable format, where it was provided by consent or under a contract.
ObjectionObject to our use of your data where we rely on legitimate interests.
Withdraw consentWithdraw consent at any time, including unsubscribing from any email in one click.

Complaints

If you think we have handled your data badly, please tell us first — we would rather fix it. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Children

Our services are aimed at university students and adults. We do not knowingly collect data from under-16s without a parent or guardian’s involvement. If you believe we have, contact us and we will delete it.

Changes

If we change how we use your data we will update this page and change the date at the top. Where the change is significant, we will tell you directly.

See also our cookie policy.

Mango MindsPrivacy · Cookies · Contact