Privacy Policy

Privacy Policy

Last updated: 4th of October 2026

This Privacy Policy explains what personal data Mind Decoded (our-mind-decoded.com) collects, why, how long it is kept, and what rights you have. It applies to this website, the newsletter and the shop.

1. Who is responsible for your data

The data controller is:

Gizella Nagyne Palinkas, sole trader (egyéni vállalkozó) Address: 1238 Budapest, Lang Endre utca 6. Hungary Tax number: HU909100056 Email:hello@our-mind-decoded.com

For any privacy question or request, email hello@our-mind-decoded.com. We reply within one month, as the GDPR requires.

2. What data is collected

Data you give us:

• Contact form: your name, email address and message.

• Newsletter sign-up: your email address.

• Purchases: your name, email address, billing address and country, the products you bought, the price paid and the order date. Billing country is needed to apply the correct tax rules.

• Social media keyword replies: if you comment a keyword on Instagram or Facebook to receive the newsletter link, your social handle and the email address you share in that message.

Payment data: card or wallet details are entered directly with [PAYMENT PROVIDER]. We never see or store your full card number. We receive only a payment confirmation, the amount, and limited details such as the card type and last four digits.

Data collected automatically:

• Technical data such as IP address, browser type, device type and pages visited, recorded by the hosting provider in server logs.

• Download records, such as when a product link was used, so we can resolve delivery problems.

• Cookies, described in section 5.

Personal and mental health information: Mind Decoded writes about psychology, but we don't ask for information about your mental health, and nothing on the site or in the shop needs it. If you choose to share it in a message, it is used only to reply to you and is deleted when the conversation ends.

3. Why data is used, and the legal basis

Purpose

Data used

Legal basis (GDPR Art. 6)

Processing and delivering your order

Name, email, order details

Performance of a contract

Issuing invoices and keeping accounting records

Name, billing address, country, order and payment details

Legal obligation (Hungarian tax and accounting law)

Recording your consent to immediate delivery

Order details, the consent you ticked, its time

Legal obligation and legitimate interest in proving the consent

Handling complaints, remedies and refunds

Order details, your messages

Performance of a contract and legal obligation

Answering your messages

Name, email, message

Legitimate interest in replying to you

Sending the newsletter

Email address

Your consent, which you can withdraw at any time

Keeping the site and shop secure and working

Technical data

Legitimate interest

Showing ads (once enabled)

Cookies and device identifiers

Your consent, given through the cookie banner

Buying a product does not sign you up to the newsletter. You will receive only order-related emails unless you opt in separately.

4. Who data is shared with

We don't sell your personal data. It is shared only with service providers who process it on our behalf:

• Website hosting and shop: Hostinger.

• Payments: Paypal, which processes your payment as an independent controller under its own privacy policy.

• Invoicing: Paypal, and the Hungarian tax authority (NAV), to which invoice data must be reported by law.

• Social media keyword replies: Blotato, which sends the requested link through Instagram or Facebook messages.

• Advertising: Google, as described in section 5.

• Authorities: only where the law requires it.

Some of these providers may process data outside the EEA. Where they do, transfers rely on safeguards recognised by the GDPR, such as the European Commission's Standard Contractual Clauses.

5. Cookies, advertising and affiliate links

The site uses cookies that are needed for it to work, including cookies that keep the contents of your shopping bag during checkout. These don't require consent.

This site uses Google AdSense to show ads. Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this website or to other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.

You can opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info.

Articles may occasionally contain affiliate links. If you click one and buy something, the retailer may use a cookie to record that the sale came from this site.

If you are in the EEA, UK or Switzerland, advertising cookies are only set after you agree through the cookie banner.

6. How long data is kept

• Orders, invoices and accounting records: for the period Hungarian accounting and tax law requires, [RETENTION PERIOD – confirm with your accountant], then deleted.

• Consent to immediate delivery: as long as the related order record.

• Messages and complaints: up to 2 years after the matter is closed; any personal health details you share are deleted when the conversation ends.

• Newsletter: until you unsubscribe. Every email has an unsubscribe link.

• Server logs: as set by the hosting provider, usually a few months.

7. Your rights

Under the GDPR you can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Where processing is based on consent, you can withdraw consent at any time without affecting earlier processing. We can't delete invoice and accounting records before the legal retention period ends.

To use any of these rights, email hello@our-mind-decoded.com.

You can also complain to the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), naih.hu. If you live in another EU country, you can contact your local authority instead.

If you live in California, you also have the right to know what personal information is collected and to ask for it to be deleted. We don't sell personal information.

8. Children

This website and shop are for adults. They are not directed at children under 16, and we don't knowingly collect data from them.

9. Security

Data is stored with reputable providers that use encryption and access controls. Payments are handled by Paypal over an encrypted connection. No online service is completely secure, so please don't send sensitive information by email.

10. Changes to this policy

If this policy changes, the new version will be posted here with a new "Last updated" date.