Privacy Policy
Last updated: 16/11/2025
This Privacy Policy explains how we handle personal information in connection with The Grind Collective.
1. Who we are
The Grind Collective LTD is a UK limited company based in London, United Kingdom. We operate thegrindcollective.org and associated community activities.
We are the “data controller” for the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018).
Contact email: jonny@thegrindcollective.org
2. What this policy covers
This policy applies when you visit our website, contact us by email or other channels, request to join our WhatsApp community, or communicate with us 1:1 (for example, for informal coaching or advice).
We do not run an email newsletter, do not use analytics tools (such as Google Analytics), and do not intentionally set cookies or similar tracking technologies on our website.
3. Personal data we may process
Website technical data
When you visit our site, our hosting provider automatically generates basic server logs (such as IP address, date/time of access, pages requested, and browser type). This data is used to keep the site secure and running reliably.
Contact details and correspondence
If you email us or contact us through other channels, we process the information you choose to share (for example, your email address, name, and the contents of your message).
WhatsApp community participation
If you request to join and participate in our WhatsApp group, we will see your WhatsApp profile name, phone number, and any content you share in the group or in direct messages with us. We may keep simple notes for our own reference (for example, to remember that you are interested in certain topics or in 1:1 conversations).
We do not ask you to submit health or medical information via the website. However, you may choose to share information about your wellbeing, lifestyle, or goals with us in messages or conversations. Please only share what you are comfortable sharing.
4. How and why we use your data
To operate and protect our website
We use basic server logs to maintain security, prevent abuse, and understand technical performance. Our legal basis is our legitimate interests in running a secure and reliable website.
To respond to your enquiries
When you contact us, we use the information you provide to respond. Our legal basis is our legitimate interests in running our community and responding to messages, and in some cases your consent where you clearly choose to contact us.
To manage our WhatsApp community
We review join requests, add members where appropriate, and moderate the group. We also use the group to communicate about community activities and themes. Our legal basis is our legitimate interests in running and moderating a community focused on motivation and positive growth.
To explore or provide 1:1 conversations
If you show interest in 1:1 conversations or informal coaching, we may contact you and, if you agree, have those conversations. Our legal basis is our legitimate interests in developing and delivering our services, and consent where you choose to engage with us in that way.
5. WhatsApp and other third parties
Our main community space is a WhatsApp group. WhatsApp is provided by WhatsApp LLC / Meta Platforms, who process your data under their own terms and privacy policy. Please review WhatsApp's own documentation for details.
We may also use other third-party services such as email and website hosting providers. We only share personal data with third parties where necessary for them to provide their services to us, and we seek to ensure they handle data appropriately. We do not sell your data.
6. International transfers
Some of our service providers (for example, hosting, email, or WhatsApp) may be located outside the UK/EEA. Where this is the case, we aim to ensure that suitable safeguards are in place, such as standard contractual clauses or equivalent legal mechanisms.
7. Data retention
We keep personal data only for as long as we reasonably need it for the purposes described in this policy, including to meet any legal, accounting, or reporting requirements. For example, server logs are retained only for a limited period necessary for security and troubleshooting, and correspondence is kept for as long as it remains relevant to our relationship or community activities.
8. Your rights
Under UK data protection law, you have rights which may include access, rectification, erasure, restriction, objection, and data portability in certain circumstances. To exercise any of these rights, please email jonny@thegrindcollective.org. We may need to verify your identity before acting on your request.
If you are not happy with how we handle your data, you can contact us first at jonny@thegrindcollective.org and we will do our best to resolve it. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).
9. Children
Our content and community are primarily aimed at adults. We do not knowingly target or actively recruit children under 18 into our community. If you believe that a child has provided us with personal information without appropriate consent, please contact us and we will review and take appropriate action.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where appropriate, highlight significant changes on the website.
