Privacy notice
Last updated: June 2026
Im Minded Ltd, trading as Get On By, is committed to protecting and respecting your privacy. Please read this notice carefully so you understand how we collect and use your personal data and what your rights are. Part 1 applies to everyone. Parts 2–4 give more detail depending on how you interact with us — as a website visitor or enquirer, a registered user, or someone connected to a user.
Part 1 — Information for everyone
This part applies to all visitors and users.
Who we are
Get On By is the trading name of Im Minded Ltd, a company registered in England and Wales (Company No. 13373334), with its registered office at 6 Clifton Road, London, E16 4PS. For the purposes of the UK General Data Protection Regulation ("UK GDPR"), Im Minded Ltd is the data controller for personal data collected through the Get On By service.
Where we say "you" or "your", we mean you or anyone authorised to act on your behalf. Where we say "we", "us" or "our", we mean Im Minded Ltd (Get On By).
We have appointed a Data Protection Officer (DPO). You can contact our DPO about this notice or anything relating to your personal data at info@imminded.com.
What Get On By is
Get On By is a digital task-support tool that helps people manage day-to-day activities alongside their mental health. It combines task-breakdown software, a traffic light check-in system, a red light responder service staffed by our internal job coaches, a library of coping strategies, and optional coping strategy training and job coaching. Get On By is not a medical device, a clinical service, or a crisis intervention tool.
Who this notice applies to
The data we collect and how we use it depends on your relationship with us:
- you are visiting our website or making an enquiry (Part 2);
- you are a registered or registering Get On By user (Part 3); or
- you are connected to a user — for example as their emergency contact, or as a professional referrer or signposter (Part 4).
Your rights under UK GDPR
UK GDPR gives you a number of rights over your personal data:
- To be informed about how your data is collected and used;
- To access a copy of the personal data we hold about you;
- To rectification — to have inaccurate or incomplete data corrected;
- To erasure — to ask us to delete your data;
- To restrict processing in certain circumstances;
- To data portability — to ask us to transfer your data;
- To object to processing, including for marketing;
- To withdraw consent at any time where we rely on consent; and
- Rights relating to automated decision-making — we do not make decisions about you using solely automated processing.
You can exercise these rights free of charge, unless a request is manifestly unfounded or excessive, and in some cases a right may not apply. To exercise a right, contact info@imminded.com; we will respond within one month.
How we share your data
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes. We may share your personal data only where:
- it is necessary to deliver the Services to you (for example with carefully selected service providers who host our systems or process payments on our behalf);
- we are required to do so by law, or to meet a safeguarding or legal obligation; or
- we have another legitimate interest in doing so, in line with data protection law.
Where your access is funded by an organisation (for example an employer, local authority, health body or other commissioner), that funder may ask us to share information about how the service is being used, usually to support funding or renewal. Wherever possible we share this in an anonymised or aggregated form. In some cases — for example to evidence a specific funded outcome or a coaching arrangement — limited information may be shared in a way that is attributable to you, in line with our contract with that funder. We will be clear with you about what is shared and with whom.
We require any third party that processes data on our behalf to keep it secure, to use it only on our instructions and for specified purposes, and not to use it for their own purposes.
Storing data and international transfers
We will not transfer your personal data outside the UK and EEA unless there is an adequacy decision in place, or appropriate safeguards (such as standard contractual clauses) are in place as required by UK GDPR. If you have any questions about where your data is stored, please contact info@imminded.com.
How we keep your data secure
We use appropriate technical and organisational measures to protect your data, including encryption of data in transit (TLS), access controls, and regular security reviews. If a personal data breach occurs that is likely to affect your rights and freedoms, we will notify the Information Commissioner's Office (ICO), and you where required, within the timescales set by law (within 72 hours of becoming aware, where the breach is reportable).
Cookies
Our website uses essential cookies only — for example to keep you signed in during registration. We do not use advertising or third-party tracking cookies. A full cookie notice is available from our cookie banner. >
How long we keep your data
We review the personal data we hold on a regular basis and keep it only for as long as necessary and on lawful grounds, as set out in our Data Protection Policy. In general: enquiry data is kept for 12 months from submission and then deleted unless you become a registered user; registration data is kept while your account is active and removed from live systems within 30 days of account deletion; and anonymised, non-identifiable data may be kept for service improvement. For more detail, contact info@imminded.com.
Complaints
If you are unhappy with how we have handled your personal data, please contact our DPO at info@imminded.com in the first instance and we will try to resolve it quickly. You also have the right to complain to the ICO at ico.org.uk or by calling 0303 123 1113.
Changes to this notice
We may update this notice from time to time to reflect changes to our business, product or service. Where changes are material, we will notify registered users by email. The date at the top of this page shows when it was last updated.
Part 2 — Website visitors and enquirers
Why we process your data
To respond to your enquiry and have an initial
conversation
about whether Get On By is right for you.
Lawful basis: Article 6(1)(b) (taking steps at your request
before entering a contract) and/or Article 6(1)(f) (our legitimate
interest in responding to your request).
To understand and improve how our website is used.
Lawful basis: Article 6(1)(f) (our legitimate interest in
maintaining and improving the site). We use essential cookies
only.
What we collect
Enquiry data — when you submit an interest form or contact us: your name, email address, phone number (optional), referral source, your preferred contact method, and any information you choose to share about your situation.
Limited technical data — basic information needed to operate the website securely and reliably (such as session information). We do not use advertising or tracking cookies.
If you do not provide certain information when asked, we may not be able to respond to your enquiry.
How long we keep it
Enquiry data is kept for 12 months from submission, then deleted unless you become a registered user.
Part 3 — Registered Get On By users
Why we process your data
To provide the Get On By service to you — including
personalising your task plans and coping strategies, operating the
traffic light check-in and red light responder, delivering coping
strategy training and job coaching where you take part, and
communicating with you about your support.
Lawful basis: Article 6(1)(b) (contract) and, for health and
other special category data, Article 9(2)(a) (your explicit
consent).
To keep you safe and meet our legal and safeguarding
obligations.
Lawful basis: Article 6(1)(c) (legal obligation) and/or Article
6(1)(d) (vital interests); Article 9(2)(c) (vital interests) or
Article 9(2)(g) (substantial public interest) for special category
data.
To quality-assure, evaluate and improve the service
— including staff training and analysis of usage, mostly using
anonymised or aggregated data.
Lawful basis: Article 6(1)(f) (legitimate interest) and Article
6(1)(a) (consent); Article 9(2)(a) (explicit consent) where
special category data is involved.
To manage the relationship with your funder where
your access is funded by an organisation, employer or scheme (see
"How we share your data" in Part 1).
Lawful basis: Article 6(1)(f) (legitimate interest); Article
9(2)(h) (health and social care) or Article 9(2)(g) (substantial
public interest) where applicable.
For research, evaluation and case studies — only
where you have specifically agreed.
Lawful basis: Article 6(1)(a)/(f); Article 9(2)(a) (explicit
consent) or 9(2)(j) (research).
For occasional marketing about our own products and
services, which you can opt out of at any time.
Lawful basis: Article 6(1)(a) (consent) and/or Article 6(1)(f)
(legitimate interest).
What we collect
1. Personal and demographic data — your name, date of birth, email address, phone number, home and postal address, communication preferences, and (where you choose to give them) emergency contact details and details of any supporters or referrer.
2. Special category (sensitive) data — health and mental health information you share with us (for example your needs, goals, symptoms or triggers), and information you choose to disclose during contact with the service. This is special category data under UK GDPR Article 9; we collect it only with your explicit consent, use it only where necessary, and you may withdraw consent at any time without detriment (withdrawal does not affect processing carried out before withdrawal).
3. Traffic light and red light responder records — your check-ins (green, amber, red), and records of contact with the red light responder, such as notes, and any text, email or call records made when a responding job coach supports you after a red check-in.
4. Coping strategy training and job coaching records — where you take part, records such as session notes and, where made and consented to, recordings or transcripts. These may contain personal or special category data depending on what is discussed.
5. Your Get On By content — the tasks, steps, reminders, mood or check-in tags, notes, problems and solutions you enter to make your account useful to you. This content remains yours.
6. Activity data — information about how and how often you use the Software and Human Support, including any phone number used to contact us and time spent with a coach, used to support and evaluate your progress.
7. Limited technical data — basic information needed to run the apps and website securely and reliably.
8. Customer support recordings — if you call our Customer Support team, or they call you, we may record the call for training and quality assurance. This is not an emergency or crisis service.
9. Feedback and case-study information — voluntary feedback you give us, and any information you specifically agree we can use in a case study or research.
Where we have a safeguarding concern, or in connection with a complaint, relevant information may be shared within Get On By, or with appropriate safeguarding partners, in a way that is attributable to you. For other purposes, we share data in an anonymised or aggregated form, except where a funder arrangement applies as described in Part 1.
Communicating with you
Essential contact. We will contact you by email, phone or text about things necessary to provide the Services — service messages, responding to support requests, and booking or managing coaching. You cannot opt out of these while you use the Services.
Marketing, evaluation and research contact. We may occasionally contact you with helpful information about our products, to ask for feedback, or to invite you to take part in research. You can opt out of these at any time by using the unsubscribe link, replying STOP to texts, or contacting info@imminded.com.
Use of artificial intelligence (AI)
We may use AI tools to support the delivery and improvement of our services — for example to help summarise coaching notes or to analyse anonymised usage data. We do not use AI to make automated decisions about you, and AI does not replace human judgement in the support we provide. AI is used to break down tasks in Get On By. Any personal data processed using AI tools is handled securely and in line with this notice.
Part 4 — People connected to a user
This part applies if we hold your details because you are connected to a Get On By user — for example as their emergency contact, or as a professional referrer or signposter. We encourage users to let their contacts know before naming them.
Why we process your data
To provide the service to the user you are connected with
— including contacting an emergency contact where we are seriously
concerned for a user's immediate safety, or managing a referral.
Lawful basis: Article 6(1)(f) (legitimate interest in providing
the service safely) and, where vital interests are engaged,
Article 6(1)(d) / Article 9(2)(c).
To produce anonymised insights and, with consent, case studies or
research, and occasional marketing.
Lawful basis: Article 6(1)(f) (legitimate interest) and/or
Article 6(1)(a) (consent).
What we collect
Personal data — your name, email address, phone number, and your relationship to the user who named you. For professional referrers or signposters, this may also include your organisation and role.
Feedback and case-study information — any voluntary feedback you give us, and any information you specifically agree we can use in a case study or research.
We collect only what we need for your role. For example, we do not collect website usage data for an emergency contact who has no account of their own.
Communicating with you
Essential contact. We will contact you by email, phone or text where necessary to provide the service to the user you are connected with, in the way that user has asked us to involve you. You cannot opt out of essential contact while you remain connected to the user, but you can ask to no longer be connected.
Other contact. Any marketing, feedback or research contact is optional and you can opt out at any time via the method in the message or by contacting info@imminded.com.
Contact
Questions about this notice or your personal data: info@imminded.com. General questions about the service: hello@getonby.co.uk.