Privacy Policy

Last updated: 29 April 2026

Who we are

This website (www.slashmental.com) is operated by SLASHMENTAL LTD, a company registered in England and Wales under company number 16954505, with registered office at 4 Castle Quay, Castle Boulevard, Nottingham, NG7 1FW, United Kingdom.

For the purposes of UK GDPR and the Data Protection Act 2018, SLASHMENTAL LTD is the data controller for personal data collected through this website and through our client engagements.

You can contact us about this policy or any data protection matter at privacy@slashmental.com.

What we collect and why

Data	Source	Lawful basis	Purpose
Name, email, message content	Contact form	Legitimate interest	Respond to enquiries
Email address, optional name	Newsletter signup (Beehiiv)	Consent	Send newsletter content
Email address (and any optional fields)	Lead magnet / gated content forms	Consent	Deliver the requested content
Website usage data, including page views, referrer, device/browser information, and approximate location	Google Analytics 4 / Google Tag Manager	Consent where cookies or similar technologies are used; legitimate interest for limited, non-identifying technical measurement	Understand site traffic and improve the website
Client contact details, business information, engagement deliverables	Direct from client	Contract / legitimate interest	Deliver consultancy services
Billing data (name, business name, billing address, transaction records)	Direct from client	Legal obligation / contract	Invoicing and accounting

We do not sell personal data. We do not use personal data for automated decision-making or profiling.

If you provide your email to access gated content, that consent covers delivery of the requested content only. Any subscription to ongoing communications (e.g. our newsletter) requires a separate, explicit opt-in.

Who we share data with

We share data only with the processors required to operate the business:

Webflow (website hosting) — United States
Beehiiv (newsletter delivery) — United States
Google Analytics 4 and Google Tag Manager (analytics and tag management) — United States
Google Workspace (email, document storage) — United States
Stripe and QuickBooks (payment processing and invoicing) — United States / United Kingdom
Professional advisors (accountants, legal counsel) where engaged and bound by confidentiality

Where data is transferred outside the UK, we rely on the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement, or other transfer mechanisms approved by the UK Information Commissioner's Office.

How long we keep data

Contact form enquiries: up to 24 months from last contact, unless a client engagement begins
Newsletter subscribers: until you unsubscribe
Lead magnet contacts (no separate marketing opt-in): up to 24 months
Analytics data: retained by Google for the period set in our GA4 configuration (currently 14 months)
Client engagement records: for the duration of the engagement plus 7 years
Personally identifiable information accessed via the Amazon Selling Partner API: deleted within 30 days of order delivery, in line with our Security & Incident Response Policy

Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request erasure of your data (where applicable)
Object to or restrict processing
Data portability (where applicable)
Withdraw consent at any time, where consent is the lawful basis
Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, email privacy@slashmental.com. We will respond within one calendar month.

Cookies

We use a minimal set of cookies and similar technologies.

Strictly necessary cookies are used to make the website and consent banner work. These do not require consent.
Analytics technologies, including Google Analytics 4 via Google Tag Manager, are used to understand how visitors use the website and improve it. Where consent is not given, Google tags may receive limited consent-state signals, but analytics cookies should not be used for full visitor measurement.

We do not currently use advertising or remarketing cookies. If we introduce them in future, for example through Google Ads, Meta, or the LinkedIn Insight Tag, our cookie banner and this policy will be updated.

You can change or withdraw your consent at any time using the cookie preferences button on the site.

Changes to this policy

We will update this policy when our practices change. The "last updated" date at the top of this policy reflects the current version. Material changes will be notified via the site or by email where we hold your contact details.