Privacy Policy

CipherMynd is a digital technology company based in Barbados, providing website design and development, brand identity, social media management, marketing strategy, AI and business automation, and website hosting and care to businesses across Barbados and the Caribbean.

For the purposes of applicable data protection law, CipherMynd is the data controller for the personal data described in this policy, meaning we decide what data is collected and why.

Contact for privacy questions: contact@ciphermynd.com

We collect the minimum information needed to run the site, respond to enquiries, and understand how the site is used.

Information you give us directly

When you fill out the audit-booking form or contact us by email or WhatsApp, we collect what you choose to share: your name, business name, email address, phone number (if provided), and the details of your enquiry. If you book a call through our scheduling tool, Cal.com, it collects the date, time, and contact details needed to confirm the booking.

Information collected automatically

When you browse the site, certain technical information is collected automatically through the analytics tools described in Section 4: pages visited, referring site, general location (country or city level, not precise location), device and browser type, and how long you spend on a page. This is used in aggregate, to understand how the site is performing, not to build a profile of you individually.

Information we do not collect

We do not knowingly collect payment card details, government identification numbers, or other sensitive personal data through this website. If a project requires that kind of information later (for example, as part of a signed engagement), it's collected separately and covered by the relevant agreement, not this policy.

We only process personal data where we have a valid reason to do so. Depending on the activity, that basis is one of the following:

To respond to your enquiry or booking (contract or pre-contract steps): so we can reply to your message, schedule a call, or prepare a proposal. Legal basis: taking steps at your request before entering into an agreement.

To understand and improve the site (legitimate interest, or consent where required): aggregate analytics on how the site is used, so we can improve it. Where a tool requires consent under applicable law (see Section 4), we only run it after you've given that consent.

To communicate with you about your enquiry (legitimate interest): a small number of relevant follow-up messages related to something you asked about. We don't add contact-form or audit-booking submissions to a marketing list without a separate, clear opt-in.

Where an automation or AI tool assists with your enquiry (legitimate interest, with human review): if CipherMynd uses an automated assistant or workflow to help triage, route, or draft a response to an enquiry, a person reviews that before anything is finalized or sent. Automation does not make final decisions about your enquiry.

To meet a legal obligation (legal obligation): where we're required to keep or disclose certain records, for example for tax or accounting purposes.

We try to use the least invasive tools that still give us useful information, and we're transparent about which of them require your consent.

• Your cookie choices
  When you first visit the site, you'll see a cookie notice. Plausible and Vercel Web Analytics run automatically, since neither uses cookies or collects personal data, and neither requires consent under applicable law. Google Analytics only activates after you actively accept analytics cookies. You can change your choice at any time through the cookie preferences link in the footer, or by clearing cookies in your browser, which resets your preference.
• Other cookies
  Our booking tool, Cal.com, is embedded on the site to let you schedule a call directly, and it may set its own cookies to manage that booking session. This is covered by Cal.com's own privacy policy, linked where the booking tool appears.

We keep personal information only for as long as necessary for the purposes set out in this policy, including to fulfil legal, accounting or reporting requirements.

We do not sell personal information. We may share information with trusted third-party service providers who help us operate our website, run analytics, send communications or provide services to you. These providers only have access to the information they need and are contractually required to keep it secure.

Our website and data are hosted on secure, reputable platforms such as Vercel and other trusted providers. Your information may be stored and processed in countries outside your own, including the United States, the European Union or other regions, where our service providers operate. We take appropriate measures to ensure your information remains protected.

Depending on your location, you may have the following rights regarding your personal information:

• Access - request a copy of the personal information we hold about you.
• Correction - request that we correct inaccurate or incomplete information.
• Deletion - request that we delete your personal information.
• Restriction - request that we limit how we process your information.
• Withdrawal of consent - withdraw your consent at any time (where applicable).
• Portable format - request a copy of your information in a structured, machine readable format.
  

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal information from children.

We implement appropriate technical and organizational measures to protect information against unauthorized access, loss, misuse or alteration.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.

If you have any questions about this Privacy Policy or how we handle your information, please contact us at contact@ciphermynd.com