GDPR Compliance

Last updated: February 2, 2026

This page explains how Calling All Minds complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to protecting your personal data and respecting your privacy rights.

Data Controller Information

Calling All Minds Ltd is the data controller responsible for your personal data. We determine the purposes and means of processing personal data collected through our website, the AXS Toolbar, and AXS Passport.

Company: Calling All Minds Ltd

Address: 86-90 Paul Street, London, EC2A 4NE

Email: Hello@CallingAllMinds.com

Phone: 01233 221144

Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:

Contract (Article 6(1)(b))

Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This applies when you use AXS Passport, engage our consulting services, or purchase our products.

Legitimate Interests (Article 6(1)(f))

Processing is necessary for our legitimate interests, provided those interests are not overridden by your rights. This includes improving our services, website analytics, fraud prevention, and business administration.

Consent (Article 6(1)(a))

Where you have given clear consent for us to process your personal data for a specific purpose. This applies to marketing communications and optional analytics cookies. You may withdraw consent at any time.

Legal Obligation (Article 6(1)(c))

Processing is necessary for compliance with a legal obligation to which we are subject, such as tax reporting, regulatory requirements, or responding to lawful requests from authorities.

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

Right of Access (Article 15)

You have the right to request a copy of the personal data we hold about you. We will provide this within one month of your request.

Right to Rectification (Article 16)

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure (Article 17)

Also known as the "right to be forgotten", you can request that we delete your personal data in certain circumstances.

Right to Restrict Processing (Article 18)

You can request that we limit how we use your personal data while a complaint is being investigated.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at Hello@CallingAllMinds.com. We will respond within one month.

Third-Party Data Processors

We use trusted third-party service providers to help us operate our business. These processors act on our instructions and are contractually bound to protect your data.

PostHog

Purpose: Product analytics and user behavior analysis

Data Processed: Website usage data, feature interactions, device information

Lawful Basis: Legitimate interests (improving our services)

AI and Data Processing

The AXS Toolbar includes AI-powered accessibility features. Here is how we process data for these features:

Summarise Page & Simplify Content

Data Processed: Text content from the current page

Retention: Not stored after processing

Lawful Basis: Legitimate interests (providing accessibility features)

Describe Images

Data Processed: Image data from the current page

Retention: Not stored after processing

Lawful Basis: Legitimate interests (providing accessibility features)

Voice Navigation

Data Processed: Voice commands (with user permission)

Retention: Not recorded or stored

Lawful Basis: Consent (microphone access)

Accessibility Preferences

Data Processed: User preference settings

Retention: Stored locally in browser (not on our servers)

Lawful Basis: Legitimate interests (remembering user preferences)

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Customer data: Retained for the duration of our business relationship plus 6 years for legal and accounting purposes
  • Marketing contacts: Until you unsubscribe or request deletion
  • Analytics data: Aggregated and anonymised after 26 months
  • AI processing data: Not retained after real-time processing
  • AXS Passport data: Retained until you delete your account or request erasure

International Data Transfers

Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) approved by the UK ICO
  • Adequacy decisions where the UK has determined a country provides adequate protection
  • Binding Corporate Rules where applicable

Complaints and Contact

If you have any concerns about how we handle your personal data, please contact us first:

Email: Hello@CallingAllMinds.com

Address: 86-90 Paul Street, London, EC2A 4NE

Phone: 01233 221144

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk (opens in new tab)

Phone: 0303 123 1113

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF