Mindset Resource Consulting (MRC) (“we”, “our”, “us”) is committed to protecting your privacy. This policy is intended to give you an understanding of how and why we use your personal information.

This privacy policy gives you detailed information about the personal information that we collect from you when you use our website (https://mindsetrc.co.uk/) or otherwise engage with us, how we use your personal information, your rights regarding the personal information that we hold about you and how to contact us or make a complaint.

1. Who we are

Mindset Resource Consulting Limited is a private limited company (company number 370774) that provides research & insights, economic advisory and policy consulting services.

If you have any questions about this privacy policy, or to exercise your rights regarding your personal information, please contact info@mindsetrc.co.uk

2. What personal information we may hold about you

Personal information is any information that relates to an individual.

We collect the following personal information about you:

• Identification information such as your name;
• Information about your work including, job titles and employer names;
• Work contact details such as your email address and telephone number;
• Marketing and communications information including your preferences in terms of receiving marketing from us and your communications preferences;
• Recruitment information, for example, the personal information contained in  the CV you submit to us which may include your date of birth, details of your qualifications, skills, experience and employment history, nationality and entitlement to work in the UK; and
• Information relating to the browser or device you use to access our website, such as your IP address, browser type and version, time zone setting and location, browser plug-in types an versions, operating system and platform and other technology on the devices you use to access our websites. We typically collect this information through the use of cookies and similar technologies. For more information, please see our cookies notice.

Sensitive Personal information:

Under data protection legislation, certain personal information is considered more ‘sensitive’ (e.g., information relating to race, religion, political affiliation and health). This is also known as ‘special category data’ and includes information that can be inferred about someone. As part of our recruitment processes, we collect equality and diversity information including information about candidates’ gender, ethnicity, sexual orientation and health. This information is provided to us by candidates on an optional basis.

3. Where we obtain your personal information

We collect and retain this personal information about you that you have given us by a number of means, for example, when you:

• Use our services;
• Engage with our recruitment process, in which case we collect personal information directly from you either through online forms or email;
• Register for or attend an event;
• Subscribe to our newsletter;
• Contact us via email, phone, in person or by post or engage with us via social media platforms; or
• Use our website.

We may also collect personal information about you from third parties, including:

• From desk-based research into stakeholders with an interest in topics relevant to Mindset Resource Consulting’s aims using public sources such as websites;
• Recommendations from other stakeholders, including our clients; or
• Referees as part of our recruitment processes.

4. How we use your personal information

We process your personal information to communicate with you for purposes including, but not limited to:

• Enabling you or your organisation to make use of our services and/or to register for or attend an event;
• To support us in our efforts to find business, conduct research related to commissioned projects, and disseminate our work;
• As part of our recruitment processes;
• Communicating with stakeholders via our newsletters;
• Organising events, such as policy roundtables;
• Updating stakeholders on relevant policy events and reports;
• Monitoring the diversity of our recruitment candidates to ensure equality of opportunity; or
• Keep our database accurate, relevant and up to date.

5. Our lawful bases

We will only use personal information when the law allows us to (i.e., where we have a ‘lawful basis’). Most commonly, we will use your personal information in the following circumstances:

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. For example, we have a legitimate interest in processing personal information to process personal information to deliver our services to clients, during the recruitment processes and responding to and defending against legal claims.
• Where it is necessary for the performance of a contract with you. For example, during our recruitment processes as necessary prior to entering into a contract of employment with you.
• Where it is necessary to comply with a legal obligation on us (for example, reporting to HM Revenue and Customs, Companies House or as required to ensure our applicants have the right to work in the UK).

In some circumstances, we may ask for your consent to use your personal information for a specific purpose. In particular, we may obtain your consent before we send you our newsletter or other communications about topics and events which we think might interest you.

You may unsubscribe from our email communications by following the instructions in any email that we send you, or you can withdraw your consent and request us to remove your personal information at any time by emailing us at info@mindsetrc.co.uk.

We do not carry out any automated decision-making using personal information which produces legal effects or otherwise significantly affects individuals.

6. Retaining your personal information

We will not keep personal information for longer than necessary, and the appropriate retention period will vary according to the intended purpose for which we collected the personal information.

If we learn that the personal information we hold is no longer relevant for our purposes – for example, if we receive a bounce from an email, or learn someone has moved organisation – we delete or amend it as appropriate.

In the case of recruitment information:

• If your application for employment is unsuccessful, we will hold your data on file for one year after the end of the relevant recruitment process. At the end of that period your data is deleted or destroyed.
• If your application for employment is successful, personal information gathered during the recruitment process will be transferred to your personnel file and retained during your employment. The periods for which your information will be held will be provided to you in a new privacy notice.
• Equality and diversity information will be combined (aggregated) with other applicants’ data and analysed only on an anonymous basis. Non-anonymised data will be deleted once the data has been aggregated.

7. How we share your personal information

We may share your personal information with third parties, including the following:

• with contractors, suppliers, or other third parties that provide services on our behalf (such as website host providers);
• as part of a sale, merger or acquisition, or other transfer of all or part of our assets including as part of a bankruptcy proceeding;
• pursuant to a court order, or other legal process or as otherwise required or requested by law, regulation, or government authority programs, or to protect our rights or the rights or safety of third parties;
• with our professional advisors, lawyers, accountants and auditors; or
• with your consent or as otherwise disclosed at the time of data collection or sharing.

8. International transfer of data and personal information

Our cloud-based server is hosted and securely backed up in the UK.

Where we need to share your personal information with people or entities outside the UK or EEA, such recipients might be subject to data protection laws which offer less protection than European data protection law. Where this is the case, we take steps to ensure your personal information is protected by entering into contracts that have been approved by the relevant authorities (such as “standard contractual clauses” or similar prepared by the UK Information Commissioner’s Office and/or the European Commission, as applicable).

9. Your rights

Under certain privacy laws, you have rights regarding personal information we hold that is about you, including:

• to request access to your personal information and to certain other supplementary information this privacy policy is designed to address;
• to request that we rectify any mistakes in your information which we hold;
• to request that we  erase personal information concerning you in certain situations;
• under certain circumstances, request to receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit that information to a third party in certain situations;
• object to processing of personal information concerning you in certain circumstances,
• request that we restrict our processing of your personal information in certain circumstances; and
• where we previously obtained your consent, to withdraw consent to processing your personal information.

For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the UK General Data Protection Regulation. Please be aware that we may be unable to provide these rights to you under certain circumstances, for example if we are legally prevented from doing so or can rely on exemptions.

If you would like to unsubscribe from any marketing material you receive from us you can do so by writing to us at info@mindsetrc.co.uk.

If you wish to raise a complaint on how we have handled your personal information, you can contact us to have the matter investigated. Please contact us at info@mindsetrc.co.uk.

If you are not satisfied with our response or believe we are not processing your personal information in accordance with the law you can complain to the Information Commissioner’s Office (https://ico.org.uk/) or seek to remedy through local courts if you believe your rights have been breached.

10. Other websites

Our website contains links to other websites. Please note that when you click on one of these links, you are entering another website for which we have no responsibility (even if you access the website via a link to our websites). We encourage you to read the privacy policies or notices on all such websites.

11. Cookies

Our websites use cookies to enhance your experience while using those sites. Cookies are pieces of information that some websites transfer to the computer or device that is browsing that website and are used for record-keeping purposes at many websites.

12. Updates

This privacy policy may change from time to time – for example, to take into account changes at Mindset Resource Consulting or to reflect changes in regulation or legislation. It was last updated 20th January 2026. Updates to this policy will be posted on this page – please check back from time to time. We will also use reasonable efforts to inform you of any significant changes by email where appropriate.

13. Contact us

If you have any questions or concerns about this privacy policy or the way in which we handle your personal information, please email info@mindsetrc.co.uk.

You can also contact us at the following address: Clyde Offices, 48 West George Street, G2 1BP