Who answers for your data
Northfield Park Associates LLC, 10705 Northfield Road, Northfield, OH 44067, decides how personal data on mindshiftlab.org is handled and is its controller. Privacy mail: privacy@mindshiftlab.org.
Data points recorded
- Connection data: IP address; an approximate location (town or region, never finer) worked out from that IP; the user agent string; requested pages and timestamps.
- Write-in data: name, reply address, subject area and note, once you send the drafted email.
- Cookie decision: kept in your own browser's local storage.
Why, and on what footing
- Keeping pages online and safe from abuse: legitimate interest.
- Analytics, i.e. pooled reading statistics: your consent.
- Marketing, i.e. crediting a reservation to an affiliate button: your consent.
- Replying to mail: legitimate interest, or steps taken because you asked.
Who else receives it
Our host and our analytics vendor handle connection data for us. When advertising cookies are switched on, affiliate and partner networks get identifiers linking a reservation to a click here. Once you are on a hotel's own site, its privacy terms govern. Write-in messages are never sold.
Certain vendors operate abroad, the United States included. Where legally needed, such transfers lean on recognised safeguards, standard contractual clauses for instance.
Retention
Server logs: 90 days at most. Pooled analytics: 26 months at most. Correspondence: while the conversation lasts, then two more years at most. Cookie decision: twelve months, after which we ask once more.
GDPR and UK GDPR rights
Anyone covered may ask us for a copy of their data, or for its correction or erasure, restrict it, take it elsewhere, or object to processing grounded in legitimate interest. Withdrawing consent works at any moment and does not undo earlier lawful processing. Complaints can be lodged with a supervisory authority in your country.
CCPA and CPRA rights
Californians may learn which personal information we keep, have it deleted or corrected, restrict use of anything sensitive, and decline any sale of it, or its sharing for advertising aimed across contexts (cross-context behavioural advertising). We honour Global Privacy Control as that refusal, and advertising cookies switch off without further action. Exercising any right brings no penalty.
Minors
Adults are the intended readers. Under-18s should keep their personal details to themselves; anything of that kind reaching us gets erased once noticed.
Making a request
Mail privacy@mindshiftlab.org naming the right involved. Expect a brief identity check, then an answer inside the statutory window.