What we collect, and what we don't.
Short, because there is not much to say. This site runs no analytics and no third-party scripts, and the only personal data it handles is what you type into the contact form.
Last updated August 2026. Written to describe what this site actually does, and checked against the code rather than adapted from a template.
What this covers
This site collects personal data in exactly one place: the contact form. There is no account system, no newsletter, no advertising and no profiling. If you do not use the contact form, we hold nothing about you.
What the contact form collects
Your name, your email address, an optional organisation name, the enquiry type you select, and your message. Those are the fields on the form; there are no hidden ones beyond a spam trap that is discarded immediately.
We also record the IP address the submission came from, briefly, so the form can rate-limit abuse. It is held in memory for sixty seconds and is never written to disk or attached to your enquiry.
Why we are allowed to hold it
For your enquiry and our reply, the lawful basis is Article 6(1)(b) of the UK and EU GDPR — steps taken at your request before entering into a contract. We are not relying on consent, which is why there is no tick-box: consent would be the wrong basis for a message you chose to send us, and it would give you a weaker position rather than a stronger one.
For the short-lived IP rate limit, the basis is Article 6(1)(f), legitimate interests: keeping a public form usable without automated abuse.
Where it goes
Your enquiry is delivered to us by email through Resend, our email provider, who process it on our instructions. It reaches a mailbox we control. We also send you an automatic copy of your own message so you have a record of what you sent and can tell immediately if you mistyped your address.
That is the whole chain. Your message is not passed to a CRM, an advertising platform, or any other third party.
How long we keep it
Enquiries that lead to work are kept for as long as we have a business relationship, and then for six years afterwards, which is the period UK limitation and tax rules require.
Enquiries that do not lead to work are deleted within twelve months.
Analytics, cookies and tracking
There are none. This site runs no analytics, no tag manager, no advertising pixels and no third-party scripts of any kind.
The web fonts are downloaded when the site is built and served from this domain, so your browser never makes a request to Google or any other font host while you read this page.
The only thing stored in your browser is a single value recording whether you chose the light or dark theme, and it is written only if you actively use the theme toggle. Nothing is stored if you leave the theme alone.
This is why there is no cookie banner. Not because we have decided you do not need one, but because there is nothing to ask you about.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to the address below and we will act on it. There is no charge and no form to fill in.
If you are in the UK you may also complain to the Information Commissioner's Office at ico.org.uk. If you are elsewhere in the EEA, your national supervisory authority handles the same role.
Who is responsible
The legal entity behind Peak Minds is not yet published here. Until it is, write to hello@peakminds.co.in and we will confirm it, along with anything else in this notice, in writing.