Legal

Privacy Policy

What we collect when you visit or write to us, who handles it, how long we keep it, and how to get it changed or deleted.

Salesforce consulting partner since 2010 · MVP Hall of Fame · 200+ agents in production · UAE, India and US desks

The policy

What we keep, and why.

Last updated: 9 October 2026.

This policy covers mindcat.ai and the forms on it. Signed engagements have their own data terms in the contract, and those win where they differ.

Who we are

"Mindcat" means Mindcat Technology Consultants FZE, F-15, 1st Floor, Warba Center, Al Muraqqabat, Deira, Dubai, UAE, and Mindcat Consulting Private Limited, Puthencruz, Kochi, Kerala 682305, India. The Dubai entity decides how website and lead data is used. The Kochi entity handles it for the Indian team and for clients in India. Questions go to privacy@mindcat.ai.

What we collect

  • What you type into a form. Your name, work email, the situation you pick, and anything you write. Some landing pages also ask for a company name, a phone number, team size, or a timeline. Only what you enter is sent.
  • Page context sent with a form. The page you sent it from, the pages you viewed before it on this site, campaign tags in the link you arrived by (UTM), the home page version you saw, and a Google Analytics client ID if you allowed analytics. This tells us what you read before you wrote.
  • Usage data, only if you accept analytics. Pages viewed, approximate location from your IP address, browser and device type, through Google Analytics (via Google Tag Manager) and Ahrefs Web Analytics.
  • Chat. If you use the chat window, Zoho SalesIQ receives what you type in it.
  • Server logs. Our host, Netlify, keeps standard request logs (IP address, time, page, browser) to run and protect the site.

We do not ask for payment details, government ID or health data on this site. Please don't send them in a form.

Why we use it

  • To reply to your brief and, if you go ahead, to scope and deliver the work. The basis is your request and the steps before a contract.
  • To learn which pages help people decide, so we can improve them. For analytics cookies the basis is your consent, which you can withdraw.
  • To keep the site secure and working, which is our legitimate interest.
  • To meet legal and tax duties.

We don't sell personal data, and we don't add you to a newsletter because you sent a brief.

Who processes it for us

  • Salesforce: every form creates a lead in our Salesforce org. Our team is notified in Slack, which Salesforce also runs.
  • Google (Analytics and Tag Manager) and Ahrefs: usage analytics, after consent.
  • Zoho (SalesIQ): the chat window.
  • Netlify: hosting.
  • YouTube: a video loads from youtube-nocookie.com only after you press play.
  • Professional advisers and authorities, only when the law requires it.

Mindcat staff see lead records only when they need them to reply or deliver the work.

Cookies and browser storage

Some storage is needed for the site to work: your cookie choice (kept in your browser), the home page version you were shown (the mc_hero cookie, kept 30 days), and campaign tags from the link you arrived by (UTM cookies, kept 30 days). Analytics and chat cookies are set only after you choose "Accept". If you choose "Necessary only", analytics stays off. To change your choice, clear this site's data in your browser and the banner comes back.

Where it is stored

Our providers store data in their own data centres, which may be outside your country, including the United States and the European Union. Our team works from the UAE and India. Where the law requires it, transfers rely on the provider's standard contractual clauses or an equivalent safeguard.

How long we keep it

Lead records stay in Salesforce while we are talking with you or working together. We delete or anonymise a record when you ask, or once we no longer need it. Client project records are kept as long as the contract and tax law require. Detailed Google Analytics data expires within 14 months.

Your rights

You can ask for a copy of your data, or ask us to correct it, delete it, or stop using it. You can also object to how we use it, take it to another provider, or withdraw consent. These rights come from the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for visitors in the EU or UK, the GDPR. We take the same requests from India now, before the rights sections of India's Digital Personal Data Protection Act, 2023 come into force. Email privacy@mindcat.ai and we will reply within 30 days. For India, the same address reaches the person who handles grievances. If you are not satisfied, you can complain to your data protection authority.

Children

This site is for businesses. We don't knowingly collect data from anyone under 18.

Security

Forms post over HTTPS straight to Salesforce. Only the staff who need lead records can open them. No system is perfect, so please don't send passwords or credentials in a brief. If a breach affects your data, we will tell you and the regulator as the law requires.

Changes

We will change the date at the top when this policy changes. If a change is material, we will say so on this page.

Contact

privacy@mindcat.ai · +971 4 266 2348 · Mindcat Technology Consultants FZE, F-15, 1st Floor, Warba Center, Al Muraqqabat, Deira, Dubai, UAE. Website terms: Terms of use.