How SCW Resources Limited, trading as The Thriving Mindset, collects, uses, shares, protects and retains personal information.

 

VERSION 1.0 | EFFECTIVE 6 August 2026

 

Privacy in plain English

 

We collect only the personal information we reasonably need to operate the website, respond to you and provide our services. We do not sell your personal information. We do not use solely automated decision-making that produces legal or similarly significant effects. We ask for consent before using non-essential cookies or sending optional email marketing. You can ask questions, exercise your rights or make a data protection complaint using the contact details below.

 

1. Who we are:

The Thriving Mindset is a trading name used by SCW Resources Limited, a company registered in England and Wales under company number 14817952. SCW Resources Limited is the controller of the personal information described in this notice. This means we decide why and how that information is used.

 

Registered office: 22 Victoria Gardens, Cradley Heath, England, B64 5LX

Privacy contact email: thethrivingmindset@yahoo.com

Website: https://thethrivingmindset.co.uk

 

2. What this notice covers

This notice explains how we use personal information when you:

• visit or interact with our website;

• contact us, submit an enquiry or ask for information;

• subscribe to updates or choose to receive marketing;

• book, purchase or express interest in a product, event, workshop or coaching service;

• give feedback, a testimonial or participate in a survey;

• communicate with us through social media or another digital platform; or

• exercise a data protection right or make a complaint.

 

This public notice does not replace any more specific privacy information we may give to coaching clients, contributors, contractors, applicants, staff or event participants. Where a service requires more detailed or sensitive information, we will provide additional privacy information before collecting it.

 

3. Personal information we may collect

Depending on how you interact with us, we may collect:

• Identity and contact information: your name, email address, telephone number, postal address and preferred way to contact you.

• Enquiry and communication information: the content of messages, forms, correspondence, call notes and information needed to respond to you.

• Service and booking information: services you ask about or book, appointment details, attendance, preferences and related administration.

• Transaction and account information: payment status, order or booking references, invoices, refunds and accounting records. Payment card details are normally handled directly by the relevant payment provider rather than stored by us.

• Marketing information: your subscription status, consent records, communication preferences and engagement with our emails.

• Feedback and impact information: reviews, survey responses, testimonials and information about how our work helped you, where you choose to share this.

• Technical and usage information: IP address, device and browser information, security logs, cookie identifiers, pages visited, referral source and website interactions.

• Social media information: your public username, profile information and the content of messages or comments you send to us through a platform.

• Rights and complaints information: identity checks, correspondence, evidence and records needed to handle a data protection request or complaint.

 

Sensitive or special category information

 

Because some of our work discusses wellbeing, burnout and personal change, you may choose to tell us information about your physical or mental health. Health information is special category data and receives extra legal protection.

Please do not send detailed medical, clinical or financial information through a general website contact form. If we genuinely need sensitive information to provide a coaching or other services, we will explain what is needed, why it is needed, how it will be protected, and the additional legal conditions we rely on. Where appropriate, this may include your explicit consent. The Thriving Mindset does not provide medical diagnosis, clinical treatment or regulated financial advice.

 

4. How we collect personal information

We usually collect personal information directly from you when you complete a form, email us, book a service, subscribe, make a purchase, respond to a survey or communicate with us.

We may also receive limited information from:

• website, hosting, analytics, booking, payment and email service providers;

• social media platforms when you interact with our pages or send us a message;

• a person or organisation that refers you to us, where it is lawful and fair to do so;

• publicly available professional sources, where relevant to a genuine business enquiry; and

• law enforcement, regulators, professional advisers or other parties where required or permitted by law.

 

5. Why we use personal information and our lawful bases

​

We must have a lawful basis for each use of personal information. The lawful basis depends on the purpose and the circumstances.

Operate, secure and maintain the website

 

Information used: Technical, usage and security information

Lawful basis: Our legitimate interests in operating a secure, functional website; legal obligations where relevant. Strictly necessary cookies do not require consent under the applicable cookie rules.

Respond to an enquiry or provide pre-contract information

Information used: Identity, contact and enquiry information

Lawful basis: Taking steps at your request before entering into a contract, or our legitimate interest in responding to genuine enquiries.

Provide and administer a booked or purchased service

Information used: Identity, contact, service, booking and transaction information

Lawful basis: Performance of a contract with you and steps requested before entering into that contract.

Manage payments, invoices, refunds and financial records

Information used: Identity, contact and transaction information

Lawful basis: Performance of a contract and compliance with legal obligations, including tax and accounting requirements.

Send optional news, updates or promotional messages

Information used: Identity, contact, marketing preferences and engagement information

Lawful basis: Your consent, together with the electronic marketing rules. You may withdraw consent or unsubscribe at any time.

Measure and improve website performance using non-essential analytics

Information used: Technical, usage and cookie information

Lawful basis: Your consent where required. We will not place non-essential analytics or similar technologies before the relevant consent is obtained.

​

Request, publish or reuse a named testimonial or identifiable story

Information used: Identity, feedback, image, audio or impact information

Lawful basis: Your consent. We will agree to the intended use, and you may withdraw consent for future use.

Develop services and understand impact

Information used: Feedback, survey and aggregated service information

Lawful basis: Our legitimate interest in improving useful and responsible services; consent where information is sensitive or identifiable requires it.

Handle rights requests, privacy complaints and regulatory correspondence

Information used: Identity, contact, request, complaint and evidence information

Lawful basis: Compliance with legal obligations and our legitimate interests in investigating, documenting and resolving concerns.

Prevent fraud, misuse and defend legal claims

Information used: Relevant contact, transaction, technical and communication information

Lawful basis: Our legitimate interests in protecting the organisation and others, and compliance with legal obligations.

 

Where we rely on legitimate interests, we consider the purpose, necessity and potential impact on your rights before processing the information. You may have a right to object, depending on the circumstances.

If you do not provide information

You are not required to provide personal information merely to browse public pages. However, if you do not provide information that is necessary to answer an enquiry, arrange a booking, enter into a contract or meet a legal requirement, we may not be able to respond fully or provide the requested service.

 

6. Who we share personal information with

We do not sell personal information. We may share it only where reasonably necessary with:

• website hosting, content management and security providers, including Wix where used for the website;

• email, cloud storage, documents, customer communication and IT support providers;

• booking, payment and accounting providers where those functions are used;

• carefully selected coaches, facilitators, contributors or contractors who need information to deliver an agreed service and are subject to appropriate confidentiality and data protection terms;

• professional advisers such as accountants, insurers and legal advisers;

• regulators, courts, law enforcement, public authorities or other parties where disclosure is required or permitted by law; and

• a purchaser, investor or successor if the business or relevant assets are reorganised, transferred or sold, subject to appropriate safeguards.

 

Some links on our website take you to independent organisations, such as book retailers, payment services or social media platforms. When you leave our website or deal directly with those organisations, they may act as separate controllers and their own privacy notices apply.

 

7. International transfers

Some of our technology and service providers may store or access personal information outside the United Kingdom. Where a transfer is restricted under UK data protection law, we will use an approved transfer mechanism or another lawful safeguard. Depending on the destination and provider, this may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU standard contractual clauses, or another legally recognised safeguard. We will also consider whether additional protections are required.

 

8. How long we keep personal information

​

We keep personal information only for as long as reasonably necessary for the purpose collected, including legal, accounting, safeguarding, complaint and dispute requirements. Our proposed public retention periods are:

General enquiries that do not become a service relationship

Typical retention period: Up to 12 months after the enquiry is closed.

Booking, contract and service administration records

Typical retention period: Normally up to 6 years after the end of the relevant relationship or financial year, where needed for contract, tax, accounting or legal claims.

Marketing subscription and consent records

Typical retention period: Until you unsubscribe or withdraw consent, plus a minimal suppression record so we can respect your preference. Inactive lists should be reviewed periodically.

Testimonials and identifiable impact stories

Typical retention period: For the agreed publication period, reviewed at least every 2 years, or until consent is withdrawn for future use.

Website security and technical logs

Typical retention period: Normally no longer than 12 months, unless required to investigate a security event, misuse or legal claim.

Data protection requests and complaints

Typical retention period: Normally up to 6 years after closure, depending on the nature of the matter and any continuing legal or regulatory need.

Cookie and consent records

Typical retention period: For the lifetime of the preference or as needed to demonstrate and respect the choice, subject to periodic review.

More specific retention periods may apply to coaching, safeguarding, contributor, employment or legal records and will be explained in the relevant additional notice. We may retain information for longer where required by law, a regulator, insurance conditions, a dispute or a legal hold. When information is no longer required, we will delete it securely or anonymise it, so it no longer identifies an individual.

 

9. How we protect personal information

We use proportionate technical and organisational measures designed to protect personal information from accidental loss, unauthorised access, misuse, alteration or disclosure. Measures may include access controls, strong authentication, secure service providers, device and account security, data minimisation, backups, confidentiality commitments and incident procedures.

No internet or storage system is completely risk-free. If a personal data breach occurs, we will assess it, contain it, keep appropriate records and notify affected people or the Information Commissioner where the law requires this.

 

10. Marketing, cookies and similar technologies

Email and other direct marketing

We will send optional promotional email or similar electronic marketing only where permitted by law. Where we rely on consent, you can withdraw it at any time by using the unsubscribe link in the message or contacting us. Withdrawing consent does not affect processing that was lawful before withdrawal.

We may keep a limited suppression record after you opt out so that we do not accidentally contact you again for marketing.

Cookies and similar technologies

Our website may use cookies and similar storage or access technologies. Strictly necessary technologies support functions such as security, network management, consent settings and core website operation. Non-essential technologies, such as certain analytics or embedded media tools, are not activated until you have made the relevant choice through the website’s cookie controls.

Cookie notice and settings: Read our Cookie Policy or use the Cookie Settings link in the website footer to review or change your choices.

 

11. Children and young people

Some of our public content may be relevant to young adults. However, until a separate under-18 service, safeguarding and privacy framework is approved, we do not knowingly invite children under 16 to submit personal information through general website forms, subscribe to marketing or enter a coaching relationship directly with us.

If you are under 16 and wish to contact us, please ask a parent, carer or responsible adult to help you. If we learn that personal information has been collected from a child inappropriately, we will take reasonable steps to delete it or put suitable protection in place. If the website introduces features likely to be accessed by children, we will assess the Children’s code and design the service with children’s best interests and high privacy by default.

 

12. Automated decision-making and profiling

We do not currently use personal information to make solely automated decisions about you that produce legal or similarly significant effects. We do not use behavioural advertising profiles. If this changes, we will update this notice and explain the logic, significance, consequences and safeguards before beginning that processing.

13. Your data protection rights

Depending on the circumstances and the lawful basis, you may have the right to:

• ask for access to your personal information and receive a copy;

• ask us to correct inaccurate or incomplete information;

• ask us to delete information in certain circumstances;

• ask us to restrict how information is used in certain circumstances;

• object to processing based on legitimate interests and object to direct marketing at any time;

• receive certain information in a portable format or ask us to transfer it where the legal conditions apply;

• withdraw consent at any time where processing is based on consent; and

• ask for safeguards in relation to significant automated decisions, if we ever introduce them.

 

These rights are not absolute and exemptions may apply. We may ask for enough information to verify your identity and locate the relevant records. We will respond within the legal time limit and will explain if we cannot fully meet a request.

To exercise a right, contact: thethrivingmindset@yahoo.com

 

14. How to make a data protection complaint

You have the right to complain if you believe we have not handled personal information properly. Please contact us first so we have the opportunity to investigate and put things right.

You can make a complaint by email or post using the contact details in section 1. Please clearly state that it is a data protection complaint and explain what you think has happened.

We will:

• provide a clear route for you to complain;

• acknowledge a data protection complaint within 30 days;

• investigate it appropriately and without undue delay;

• keep you informed where more time or information is reasonably needed; and

• tell you the outcome and any action we have taken.

If you remain dissatisfied, you can complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. You do not have to pay a fee to complain.

Information Commissioner’s Office: make a complaint | Telephone: 0303 123 1113

 

15. Changes to this notice

We will review this notice regularly and update it when our services, technology, suppliers or legal obligations change. The latest version will be published on the website with the “last updated” date. If a change materially affects how we use information already collected, we will take reasonable steps to bring it to your attention before the new use begins.

 

16. Contact us

Questions about this notice or the way we use personal information are welcome.

SCW Resources Limited trading as The Thriving Mindset

22 Victoria Gardens Cradley Heath England B64 5LX

Email: thethrivingmindset@yahoo.com

Website: https://thethrivingmindset.co.uk