USERMINDFUL
Privacy Policy
Last updated: 13 September 2026.
This policy explains how UserMindful handles personal information when you visit usermindful.design, contact us through the website, or take part in its comment features.
1. Who is responsible for your information
UserMindful is operated by Bankai.studio sp. z o.o., ul. Sienna 9, 70-542 Szczecin, Poland, KRS 0000902578. We are the data controller, meaning the company responsible for deciding why and how your personal information is used.
For questions or requests about your information, email contact@usermindful.design or write to our address above.
2. Information we collect and why
Website visits. Our website host, Webflow, and the services that deliver our pages receive technical information such as your IP address, browser and device information, the page requested, and the time of the request. This allows the website to load, operate reliably, and protect against abuse. We rely on our legitimate interest in providing a functioning and secure website under Article 6(1)(f) of the General Data Protection Regulation (GDPR), the European Union's data protection law.
Enquiries and service requests. When you email us or complete an enquiry form linked from this website, we receive the contact details, message, answers, and any attachments you choose to provide. We use these to respond, discuss your project, and arrange the services you request. Where you ask us to take steps towards a contract with you, Article 6(1)(b) applies. For other business correspondence, we rely on our legitimate interest in answering enquiries and managing business relationships under Article 6(1)(f).
Providing enquiry information is voluntary, but we need a way to reply and enough information to understand your request. Please do not include unnecessary sensitive information in your message.
Website analytics. Google Analytics helps us understand which pages people visit and how they find and use the website. It processes information about visits, interactions, devices, browsers, and approximate location, using cookies or similar identifiers. Its purpose is to help us understand and improve the website. Optional analytics requires your consent under Article 6(1)(a).
Understanding website use. Hotjar helps us understand interactions such as clicks, taps, scrolling, and movement between pages. Its heatmaps and session replays show patterns of interaction so we can identify confusing or difficult parts of the website. It can process online identifiers, device and browser details, screen size, country, and interaction data. This optional measurement also requires your consent under Article 6(1)(a). Further information is available in Hotjar's privacy information.
Comments and reactions. Where comments or reactions are available, we use Hyvor Talk to operate them. Hyvor processes the profile or guest information you provide, your comments and reactions, their dates and times, and technical information needed for the service and abuse prevention. IP address collection depends on the commenting settings. Your display name and posted content can be publicly visible. We rely on our legitimate interest in operating and moderating discussions under Article 6(1)(f). Hyvor also manages its own accounts under its privacy policy. Avoid posting information you do not want others to see.
Legal responsibilities. We may retain relevant correspondence and transaction records to comply with legal duties under Article 6(1)(c), or to establish, exercise, or defend legal claims under Article 6(1)(f).
3. Cookies and your choices
Cookies and similar browser storage can remember preferences, support requested features, and measure website use. Necessary storage supports functions such as remembering your cookie choice and keeping a requested comment sign-in working. Optional analytics storage supports Google Analytics and Hotjar.
Google Analytics and Hotjar load only after you accept optional cookies. You can accept or reject them in the banner and reopen it at any time using Cookie settings in the footer. Your choice is stored for 120 days. If you withdraw an earlier acceptance, the page reloads to stop the analytics tools and remove their accessible cookies and browser storage. You can also block or delete cookies in your browser. Blocking necessary storage may affect features such as remembering your preferences or staying signed in to comments. Withdrawing consent does not affect processing that was lawful before withdrawal.
Google explains its processing and available controls in How Google uses information from sites or apps that use its services.
4. Who receives information
We use service providers to deliver the website and handle the activities described above. These include Webflow for hosting, Google Analytics for measurement, Hotjar for interaction analysis, Hyvor for comments, Typeform for linked enquiry forms, and the email provider that delivers correspondence. External content-delivery services, including jsDelivr and unpkg, receive technical request information when your browser downloads website resources.
Information may also be shared with professional advisers or public authorities where necessary for legal obligations or claims. Public comments are visible to other visitors. An external website you choose to visit through a link has its own privacy practices.
5. Processing outside Europe
Some providers and their supporting services process information outside the European Economic Area, including in the United States. Where European data protection law applies, transfers require an appropriate legal safeguard, such as an applicable adequacy decision or the European Commission's standard contractual clauses. You can contact us for information about the safeguard applicable to your data and how to obtain a copy.
Webflow describes its arrangements in its Data Processing Addendum and provider list.
6. How long information is kept
Enquiry information is kept for the period needed to answer your request and manage any resulting relationship. Records needed for legal obligations or claims may be kept longer, according to the applicable obligation or limitation period.
Technical logs are kept for operational and security needs. Analytics and interaction records are governed by the retention settings of the relevant service. Comments may remain available while the discussion remains published, subject to moderation, deletion requests, and legal requirements. You can ask us about the retention period applicable to your information or request deletion using the contact details above.
7. Your rights
Depending on the circumstances, you can ask to access, correct, erase, or restrict the use of your personal information. You may have the right to receive information in a portable format. You can object to processing based on legitimate interests and withdraw consent where processing depends on it.
Contact us to exercise your rights. We may need proportionate information to verify your identity. We normally respond within one month; if a lawful extension is necessary, we will explain why.
You may complain to your local data protection authority. In Poland, this is the President of the Personal Data Protection Office, UODO.
8. Changes to this policy
We may update this policy when the website or its data practices change. The published page will show the date of the latest update. Where a change requires new consent or a separate notice, we will provide it.