Last updated 4 October 2026
Privacy notice
This notice explains what personal data Data Mindsets collects through datamindsets.com, why we collect it, how long we keep it, who can see it and how you can ask us to delete it. We process personal data in line with Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016, “PDPPL”).
Who we are
Data Mindsets is an AI deployment company based in Doha, Qatar. We are responsible for the personal data described in this notice. You can reach us about privacy at info@datamindsets.com.
What we collect
When you contact us as a company, we collect:
- your name, organization, work email and phone number;
- the service you are interested in and the message you write to us.
When you apply to the FDE Network, we collect:
- your full name, email, LinkedIn or GitHub link, location, main strength, years of experience and availability;
- your CV (PDF or Word) and anything it contains, and your description of a system you shipped.
When you visit the site, we collect limited technical data:
- a one-way hash of your IP address, kept for up to one day, to limit repeated form submissions;
- a spam check by Cloudflare Turnstile when you use a form;
- anonymous, aggregated page statistics through Vercel Web Analytics, which does not use cookies.
Please do not include sensitive personal data (such as health, religious or family information) in your messages or CV.
Why we use it
- To reply to your enquiry and discuss a possible project with you.
- To assess your application, contact you about the assessment process and match you to suitable projects.
- To keep the site secure and protect the forms from spam and abuse.
We rely on the consent you give when you tick the box on each form. We do not sell your data, use it for advertising or make decisions about you by automated means alone.
How long we keep it
- FDE Network applications and CVs: 12 months from the date you apply, or longer if you join the network and agree to it.
- Company enquiries: 24 months from your last contact with us, unless a contract with your organization requires longer.
- Rate-limit records: up to one day.
When a period ends, we delete the data or anonymize it.
Who can see it
Only authorized Data Mindsets staff who handle enquiries or recruitment can access your data. We use trusted service providers who process it on our behalf and under our instructions:
- Supabase: database and private file storage for form submissions and CVs;
- Resend: email notifications to our team about new submissions;
- Vercel: website hosting and anonymous analytics;
- Cloudflare: Turnstile spam protection.
Some of these providers may store or process data outside Qatar. Where that happens, we take steps to make sure your data receives an adequate level of protection, as the PDPPL requires. We may also disclose data where the law requires it.
How we protect it
CVs are stored in a private bucket that is not publicly accessible. Submissions are encrypted in transit and at rest, and access is limited to the people who need it.
Your rights and how to ask for deletion
Under the PDPPL you can ask us to:
- confirm whether we hold personal data about you and give you a copy;
- correct data that is inaccurate or incomplete;
- delete your data, or withdraw your consent at any time;
- stop processing your data where there is no longer a valid reason to keep it.
To make a request, email info@datamindsets.com from the address you used on the form, or tell us which form you used. We will reply within 30 days. Withdrawing consent does not affect processing that took place before you withdrew it.
If you are not satisfied with our response, you can complain to the authority responsible for personal data protection in Qatar.
Changes to this notice
We will update this page if our practices change, and show the date of the latest version at the top.