Privacy Policy


1. Introduction

This Privacy Policy describes how Mind and Soul Institute Corp, a Texas corporation with its address at 5900 Balcones Drive STE 100, Austin, TX 78731, USA ("Company", "we", "us"), collects, uses, shares, and protects personal data when you use https://mindandsoul.institute/ (the "Website") and our services, and explains your rights under applicable law, including the EU and UK General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA"), and other U.S. state privacy laws. For the purposes of the GDPR, the Company is the data controller of your personal data.


2. Data We Collect

Data you provide: name, email address, phone number, billing address, account credentials, payment information (collected and processed by Stripe — we do not store full card details), communications with us, and information you choose to share when ordering or participating in courses, sessions, or programs (for example, in intake forms, live sessions, comments, or homework).

Please share thoughtfully. Given the nature of our services, information you voluntarily share with us may reveal aspects of your emotional state or wellbeing. We treat such information as confidential, use it only to provide the services, and do not use it for advertising. We do not ask for, and ask that you do not submit, medical records or diagnoses.

Data collected automatically: IP address, device and browser type, pages visited, time and duration of visits, referral source, and similar usage data, collected via cookies and similar technologies (see our Cookies Policy).

Data from third parties: if you register or log in via a third-party service (e.g., Google or Facebook), we receive the profile data you authorize that service to share (such as name and email).


3. How and Why We Use Data (Purposes and Legal Bases)

  • To provide the services and operate your account — performance of a contract (GDPR Art. 6(1)(b));
  • To process payments and prevent fraud — performance of a contract and legitimate interests (Art. 6(1)(b), (f));
  • To send service communications (order confirmations, schedule changes, renewal reminders) — performance of a contract;
  • To send marketing emails — your consent (Art. 6(1)(a)); you may unsubscribe at any time via the link in each email;
  • To analyze and improve the Website and services — legitimate interests or consent, where required for cookies (Art. 6(1)(f), (a));
  • To advertise our services, including measuring campaigns and showing you relevant ads via advertising cookies/pixels — consent, where required (Art. 6(1)(a));
  • To comply with legal obligations (tax, accounting, consumer law) — Art. 6(1)(c);
  • To establish, exercise, or defend legal claims — legitimate interests (Art. 6(1)(f)).


4. Who We Share Data With

We share personal data only as described here. We use service providers (processors) acting on our instructions, including: GetCourse.io (learning platform and website hosting), Stripe (payment processing), email delivery providers, Google (analytics and advertising), and Meta (advertising pixel). We may disclose data where required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case this Policy continues to apply to your data). We do not sell personal data for money. We do not share the contents of your sessions, intake forms, or course participation with advertising platforms.


5. Cookies, Analytics, and Advertising

We use cookies and similar technologies as described in our Cookies Policy. Where consent is required (including for visitors from the EU/UK), non-essential cookies are set only after you accept them in the cookie banner. The use of advertising cookies and pixels may constitute "sharing" of personal data for cross-context behavioral advertising under the CCPA/CPRA; you can opt out as described in Section 9.


6. Data Retention

We keep personal data only as long as needed for the purposes described above: account and purchase data — for the duration of your account and thereafter as required for legal, tax, and accounting purposes (generally up to [7] years for transaction records); marketing data — until you withdraw consent or unsubscribe; analytics data — for the periods stated in the Cookies Policy; correspondence — as long as needed to handle the matter and any related claims. When data is no longer needed, we delete or anonymize it.


7. International Data Transfers

We are based in the United States, and your data is processed in the United States and in other countries where our service providers operate. Where we transfer personal data of EU, UK, or Swiss residents to countries without an adequacy decision, we rely on appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses (and the UK Addendum/IDTA) with our processors. You may request a copy of the relevant safeguards via the contact details below.


8. Your Rights (GDPR / UK GDPR)

If you are in the EU or UK, you have the right to: access your personal data; rectify inaccurate data; erase data; restrict or object to processing (including direct marketing, to which you may object at any time); data portability; and withdraw consent at any time without affecting prior processing. To exercise these rights, contact us at info@mindandsoul.institute; we will respond within one month. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the ICO).


9. Your Rights (U.S. State Privacy Laws)

Depending on your state of residence (including California, Colorado, Connecticut, Texas, Virginia, and others), you may have the right to: know/access the personal data we hold about you; correct it; delete it; receive it in a portable format; and opt out of the "sale" or "sharing" of personal data and of targeted advertising. We do not sell personal data for money; we may "share" identifiers and internet activity data with advertising providers via cookies/pixels as described above.

How to opt out: use the link on the Website to disable advertising cookies, or email us at info@mindandsoul.institute with the subject "Privacy Rights Request". We honor the Global Privacy Control (GPC) signal as a valid opt-out of sharing for the browser in which it is enabled. We will not discriminate against you for exercising your rights. We may need to verify your identity before fulfilling a request; you may use an authorized agent where the law allows. If we decline a request, you may appeal by replying to our decision email. Categories of data collected and purposes are described in Sections 2–4; we have collected the following categories in the preceding 12 months: identifiers; commercial information (purchases); internet activity; geolocation (approximate, from IP); and information you voluntarily provide in the course of the services.


10. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and reliance on established providers (GetCourse.io, Stripe). No method of transmission or storage is completely secure; if a breach affecting your data occurs, we will notify you and the competent authorities as required by law.


11. Age Limit

The Website and services are intended for adults and are directed to persons aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us personal data, contact us and we will delete it.


12. Changes to This Policy

We may update this Policy from time to time. We will post the updated version on this page with a new effective date and, for material changes, notify you by email or a prominent notice on the Website before the changes take effect.


13. Contact

Mind and Soul Institute Corp 5900 Balcones Drive STE 100, Austin, TX 78731, USA 

Email: info@mindandsoul.institute

Contact Page