1. Who we are
mindo is a service provided by MM Creative Ltd, a company registered in Malta (company number [C 00000]), with its registered office at [registered address]. In this policy, "mindo", "we" and "us" mean MM Creative Ltd. We are the controller of the personal data described here.
For anything related to your data, email [email protected].
2. What we collect
- Contact details: your name, email address, brand name, and website or Instagram link.
- Content you send us: product photos, brand kits, logos, reference images, Pinterest links, and any notes you add.
- Account and billing details: your plan, invoices and payment status. Card payments are handled by our payment provider; we never see or store your full card number.
- Messages: emails and feedback you send us, including revision requests.
- Basic technical data: information your browser shares when you visit, such as IP address and device type. Our website loads fonts from Google, which receives your IP address when the page loads.
3. How we use it
- To create your free visual and reply to your request. Legal basis: steps taken at your request before entering into a contract, and your consent.
- To deliver your plan: producing, reviewing and sending your visuals, designs and content. Legal basis: performance of our contract with you.
- To run our business: invoicing, accounting, customer support and improving our service. Legal basis: our legitimate interests and our legal obligations.
- To send you news about mindo, only if you have agreed. You can unsubscribe at any time.
4. How we use AI
mindo uses AI tools, directed and reviewed by our creative team, to produce visuals. To do this, your product photos and brand assets are processed by the AI and cloud providers we work with. They act on our instructions as data processors.
Your content is used only to create work for you. We do not sell it, publish it, or share it with other clients, and we do not show your work in our portfolio without your written permission.
5. Who we share it with
We share personal data only with service providers who help us run mindo, such as website hosting, email, form handling, file storage, payment processing and AI production tools. We may also share data with professional advisers, or with authorities where the law requires it. We never sell personal data.
6. International transfers
Some of our providers are based outside the European Economic Area. When data is transferred, we rely on safeguards recognised under the GDPR, such as adequacy decisions or the European Commission's Standard Contractual Clauses.
7. How long we keep it
- Free visual requests: if you do not go on to choose a plan, we delete your uploaded photos and request details within 15 days.
- Clients: we keep your brand assets and delivered work for as long as your plan is active and for 6 months afterwards, so you can come back without starting over. You can ask us to delete them sooner.
- Invoices and accounting records: kept for as long as Maltese law requires.
8. Your rights
Under the GDPR you can ask us to access, correct, delete or restrict your personal data, to send it to you in a portable format, or to stop using it. Where we rely on your consent, you can withdraw it at any time. Email [email protected] and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to Malta's Information and Data Protection Commissioner (idpc.org.mt) or to the data protection authority where you live.
9. Cookies
We do not use advertising or tracking cookies. The website stores one small setting in your browser to remember whether you chose light or dark mode. If we add analytics in the future, we will update this policy and ask for your consent where required.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If the changes are significant, we will let active clients know by email.