Privacy Policy
1. Purpose and application
This notice explains what personal information Forlais Group Ltd, trading as Atlas Mind, collects, why it does so and what rights you have. It covers the Atlas Mind website at atlasmind.co.uk as it works today, and the release updates you can ask for there.
Atlas Mind accounts, paid plans and the Atlas Mind apps are not yet available. Before any of them opens, we will update this notice to describe the information they use, the lawful basis for each use and how long it is kept, and the date of this notice will change.
2. Substantive provisions
2.1. Who we are
Forlais Group Ltd is a company registered in England and Wales (company number 16835488) with its registered office at 3rd Floor, 45 Albemarle Street, London W1S 4JL. It trades as Atlas Mind and is the controller of the personal information described in this notice. You can contact us about privacy at [email protected].
2.2. What we collect
The website has no sign-in, does not set cookies and does not store anything in your browser. It asks for personal information only if you choose to receive release updates. When your browser requests a page, two kinds of information are created.
Server logs. Our web server records each request: your IP address, the date and time, the page requested, the response, the page you came from and your browser's user agent.
Visit statistics. Cloudflare Web Analytics measures page views and page performance for us. It does not use cookies or similar storage on your device and does not fingerprint visitors. We see totals only, such as the number of views of a page, never a record of an individual visitor.
Release updates. If you ask for them, we receive your email address and, if you give it, your first name. As a record of your consent we keep the words you agreed to, the date and time, the website you used and your IP address. When you confirm your address we note the time and give you a single-use launch code. The list is kept by Forlais ID, our identity service at id.forlais.com, which also records each request to join, confirm or leave the list and each email it sends you, with your email address, IP address and browser.
If you email us, we receive your email address, your name if you include it, and what you write.
2.3. Why we use it, our lawful basis and how long we keep it
Data protection law requires a lawful basis for each use of personal information. The table sets out each use, its basis and how long the information is kept.
| Use | Information | Lawful basis | How long we keep it |
|---|---|---|---|
| Delivering the website and keeping it secure | Server logs | Legitimate interests: sending you the pages you ask for, and finding and stopping misuse of the site | Up to 11 days, then deleted automatically |
| Understanding how the website is used | Visit statistics | Legitimate interests: knowing which pages are read so that we can improve them | We keep totals only, which do not identify you |
| Sending you news of Atlas Mind's release and products, and your launch code | Your email address, first name if given, consent record and launch code | Consent. You can withdraw it at any time with the unsubscribe link in every email, or by writing to [email protected] | Until you unsubscribe. If you do not confirm your address, we delete it once the confirmation link has expired, seven days after you asked. When you unsubscribe we keep your address marked as unsubscribed, with your consent record, so that we do not email you again and can show what you agreed to; you can ask us to delete it. Resend, which sends these emails, keeps each one and its delivery record for 30 days, and its backups for a further 7 days |
| Protecting the release updates from misuse | Records of each request to join, confirm or leave, and of each email sent, with your email address, IP address and browser | Legitimate interests: stopping false sign-ups and abuse of the list | Up to 12 months |
| Answering your messages | Your email address, name and message | Legitimate interests: replying to you. Legal obligation, where you ask to exercise a data protection right | As long as we need to deal with your message, and any longer period the law requires |
We have weighed these interests against your rights. The information involved is limited, is not used to profile you, and is kept for a short time.
The database that holds the release updates is backed up on the same server so that it can be restored after a failure. An address that has been deleted can remain in a backup copy until that copy is deleted; nightly copies are deleted after 14 days.
2.4. What we do not do
We do not sell personal information, share it for advertising or build profiles of visitors. We send marketing emails only to people who have asked for them and confirmed their address, and every one has a link to unsubscribe. We do not make decisions about you by automated means that have legal or similarly significant effects.
2.5. Who receives it
Hetzner Online GmbH runs our servers, which host the website and Forlais ID; Cloudflare, Inc. delivers the website and Forlais ID, provides the visit statistics and routes email sent to atlasmind.co.uk addresses; Resend, Inc. sends the release updates from [email protected]; and Google holds the email we receive in our Google Workspace mailbox and sends our replies, keeping a copy of each. They act on our instructions. The Subprocessor Disclosure lists every supplier that processes personal information for us, with what it does and where. We may also disclose information where the law requires it, for example to a court or a regulator.
2.6. Transfers outside the UK
Hetzner keeps our server logs and the release updates in Finland, in the European Economic Area, which UK law recognises as protecting personal information adequately. Cloudflare runs a global network and may handle a request in the country nearest to you or in the United States. Transfers to Cloudflare in the United States are made under the UK Extension to the EU-US Data Privacy Framework and otherwise under the standard contractual clauses with the UK International Data Transfer Addendum, as set out in Cloudflare's data processing addendum. Google may store and process email in any country where it has facilities, including the United States, under the UK Extension to the EU-US Data Privacy Framework and otherwise the standard contractual clauses in Google's Cloud Data Processing Addendum. Resend stores the release updates it sends, and their delivery records, in the United States, under the standard contractual clauses with the UK International Data Transfer Addendum in Resend's data processing addendum, and also under the UK Extension to the EU-US Data Privacy Framework.
2.7. Your rights
You have the right to ask for a copy of your personal information, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable form, where the law gives that right. You can stop release updates at any time with the link in any of them. Because the website does not otherwise identify visitors, we may need the date and time of your visit and your IP address to find server-log entries before they are deleted. Write to [email protected]. We will reply within one month, or within that month tell you why we need longer, as the law allows.
2.8. Complaints
If you are unhappy with how we have handled your information, please tell us at [email protected]. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) or, if you live in the European Union, to the data protection authority where you live.
2.9. Children
The website gives general information about Atlas Mind and is not directed at children.
3. Customer rights, administration and changes
Nothing in this document is intended to restrict rights that cannot lawfully be excluded, including applicable statutory consumer and data protection rights. Where this document conflicts with mandatory law, the mandatory rule prevails. Complaints, concerns and requests can be sent to [email protected].
Forlais may revise this policy to reflect changes in the service, third-party requirements or applicable law. Any revision that materially affects customer rights will be communicated in the manner and timeframe required by the applicable agreement and law. The date of the latest revision is shown with this document.