Introduction
Mentor Link ("Mentor Link", "we", "us", or "our") is committed to protecting the privacy and personal data of every visitor, applicant, student, and mentor who interacts with our website (mentor-link.io) and related services (collectively, the "Service"). This Privacy Policy explains, in plain language, what data we collect, why we collect it, how we use and protect it, who we share it with, how long we keep it, and the rights you have over it. By using the Service, you acknowledge the practices described below. If you do not agree with any part of this policy, please do not use the Service.
Who we are (data controller)
For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and equivalent legislation, the data controller is Mentor Link, operating from the European Economic Area. You can reach us at any time through our contact page for any privacy-related question, request, or concern.
Scope of this policy
This policy applies to personal data we collect through the Service in the following capacities:
- Visitors browsing mentor-link.io.
- Prospective students who submit our matching form, contact form, or newsletter sign-up.
- Mentors who apply to join our network or who are listed on the platform.
- Anyone communicating with us via email, social media, or direct message.
This policy does not cover the processing carried out independently by mentors, third-party websites linked from our Service, or services you sign up for directly with a mentor (such as their mentorship program, Stripe checkout, course platform, or Discord server). Each of those parties operates under their own privacy policy, which we encourage you to review separately.
Categories of personal data we collect
We only collect data that is necessary, proportionate, and relevant to provide the Service. The categories below describe what we may collect and from whom.
From students and prospective students:
- Identification data: first name, last name, country, language preference.
- Contact data: email address, optional phone number, optional social handles.
- Application data: stated goals, experience level, focus area (e.g., trading, ecommerce), budget range, free-text comments.
- Communication data: messages you send us via forms, email, DM, or chat tools.
- Match-related data: which mentors we recommend to you and whether a connection was successful.
From mentors and applicants to our mentor network:
- Identification and contact data: legal name, date of birth, country of residence, photo, business name (if applicable).
- Verification data: trading track records (e.g., Myfxbook, FX Blue, broker statements), prop firm payout proofs, withdrawal screenshots, ecommerce dashboards (e.g., Shopify, Stripe), supplier invoices, identity documents where required, and any other proof we request to confirm a track record. This category may include information that constitutes personal data under GDPR and is treated as confidential — see "Mentor verification documents" below.
- Mentorship offer data: program description, pricing tiers, deliverables, capacity, scheduling.
- Financial onboarding data: information needed to onboard with our payment partners (e.g., Stripe Connect), which is collected and held by those partners and not by us directly.
- Performance data: number of matches received, conversion outcomes, student feedback.
From all visitors (automatically collected):
- Technical data: IP address (truncated where possible), device type, operating system, browser, language, time zone.
- Usage data: pages visited, time on page, referrer URL, clicks, scroll depth, session duration.
- Cookies and similar technologies: see "Cookies and tracking" below.
We do not knowingly collect special categories of personal data (for example, data revealing racial or ethnic origin, political opinions, religious beliefs, health, biometric or genetic data, or sexual orientation). Please do not share such information with us.
How we collect your data
We collect personal data in three ways:
- Directly from you, when you fill out a form, send us a message, apply as a mentor, or upload verification documents.
- Automatically, through cookies, server logs, and analytics tools when you visit the Service.
- From third parties, only where it is necessary to verify a mentor's track record (for example, a payout statement provided by a prop firm with the mentor's consent).
Legal bases for processing (GDPR / UK GDPR)
We rely on the following legal bases under Article 6 GDPR:
- Performance of a contract or to take steps prior to entering into a contract — for example, when we process your matching application, run our verification checks, or coordinate a discount on your behalf.
- Legitimate interests — for example, to operate, secure, debug, and improve the Service; to prevent fraud and abuse; and to communicate operational updates. We balance our legitimate interests against your rights and freedoms, and you may object at any time.
- Consent — for marketing communications, non-essential cookies, and any other processing that requires it. You can withdraw consent at any time without affecting prior lawful processing.
- Legal obligation — to comply with applicable laws, regulatory requests, or court orders.
Why we use your data
We process personal data for the following purposes only:
- To match prospective students with appropriate verified mentors.
- To verify mentor credentials, track records, and identity before listing.
- To communicate match results, follow-up questions, scheduling, and support.
- To negotiate and apply the exclusive discount we offer matched students.
- To maintain the integrity, safety, and security of the Service.
- To detect, prevent, and respond to fraud, abuse, or violations of our Terms.
- To analyze usage patterns and improve the product, content, and user experience.
- To send service emails (e.g., match confirmations, account updates) and, with consent, marketing communications such as our newsletter.
- To comply with legal, accounting, tax, and regulatory obligations.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.
Mentor verification documents
The verification documents that mentors provide to us during onboarding (such as broker statements, payout proofs, dashboard screenshots, supplier invoices, and identity documents) are treated as strictly confidential. We use them only to confirm the mentor's track record before listing and, on an ongoing basis, to maintain the integrity of the platform. These documents are:
- Reviewed internally by authorized personnel only.
- Stored securely with restricted access controls.
- Never published, posted, sold, or shared with the public, the press, or any other mentor.
- Shared with third parties only where strictly necessary (for example, with a regulator or law-enforcement authority pursuant to a lawful request).
- Retained only for as long as the mentor is listed plus a reasonable period afterwards for audit, dispute, and compliance purposes, after which they are securely deleted or anonymized.
This is the same principle as any independent auditing or verification firm: the review happens internally, the raw documentation does not go public.
How we share your data
We do not sell your personal data. We never have, and we never will. We share data only in the following limited cases:
- With verified mentors — once you choose to be introduced, we share the relevant parts of your application (name, contact details, goals, experience) with the mentor you selected so they can follow up.
- With service providers (processors) who help us operate the Service under written data-processing agreements that require them to handle your data securely and only on our instructions. Categories include: hosting and content delivery (Vercel), form intake and email delivery (e.g., Formspree), email marketing tools (where applicable), analytics (Vercel Analytics, and only with consent any optional third-party analytics), payment infrastructure for mentors (Stripe and Stripe Connect), customer support tooling, and document storage providers.
- With professional advisors such as auditors, lawyers, accountants, and insurers, where this is necessary and proportionate.
- With public authorities when required by applicable law, court order, or to protect the rights, property, or safety of Mentor Link, our users, or the public.
- In a corporate transaction such as a merger, acquisition, financing, reorganization, or sale of assets — in which case we will require the receiving party to honor the commitments in this policy or notify you of any material change.
International transfers
Our service providers may operate outside the European Economic Area or the United Kingdom. Where we transfer personal data to a country that has not been recognized as providing an adequate level of data protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement / Addendum, or equivalent mechanisms. You can request a copy of the relevant safeguard via our contact page.
Data retention
We keep personal data only for as long as is necessary for the purposes described in this policy and to comply with our legal, tax, and accounting obligations. Indicative retention periods are:
- Matching applications: up to 24 months from the last meaningful interaction, then deleted or anonymized.
- Mentor verification documents: for the duration of the listing plus a reasonable archive window for audit and dispute purposes, then securely deleted.
- Email correspondence and support tickets: typically 24 months after closure of the conversation.
- Server logs and analytics: aggregated or rotated within 26 months in line with industry standards.
- Marketing list data: until you unsubscribe, or longer if required by anti-spam law.
- Records required to comply with tax, accounting, or other legal obligations: for the period prescribed by applicable law.
You can request earlier deletion at any time, subject to lawful retention obligations.
Your rights
Subject to applicable law (including the GDPR and UK GDPR), you have the following rights in respect of your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your personal data ("right to be forgotten") where applicable.
- Restriction — ask us to limit the processing of your data in certain circumstances.
- Objection — object to processing based on legitimate interests, including direct marketing.
- Portability — receive your personal data in a structured, commonly used, machine-readable format.
- Withdraw consent — at any time where processing is based on consent, without affecting prior lawful processing.
- Lodge a complaint — with your local supervisory authority. In the Netherlands, that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
To exercise any of these rights, contact us through our contact page. We respond to verified requests within the legally required timeframe (typically one month for GDPR requests). We may need to verify your identity before acting on a request.
Cookies and tracking
We use a minimal set of cookies and similar technologies. The categories we may use are:
- Strictly necessary — required for the Service to function (e.g., session, security, basic preferences).
- Analytics — to understand aggregate usage patterns. Where required, we ask for your consent before loading these.
- Functional — to remember preferences such as language.
We do not currently use advertising or cross-site tracking cookies. You can manage cookies through your browser settings; disabling certain cookies may affect parts of the Service.
Marketing communications
We send promotional emails only where you have opted in or where permitted under applicable law. You can unsubscribe at any time using the link in any marketing email or by contacting us. Service-related emails (e.g., match confirmations, security notices) are not promotional and may continue regardless of marketing preferences.
Security
We take the security of personal data seriously and apply technical and organizational measures appropriate to the risk, including transport-layer encryption (TLS), encrypted storage where applicable, access controls, principle of least privilege, monitoring, and routine review of our processors. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent authority and, where required, you, in line with applicable law.
Children
The Service is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us so we can remove it.
Third-party links and content
The Service contains links to third-party websites and may display third-party content (for example, mentor profile videos, social media embeds, mentor websites). These third parties operate independently and have their own privacy practices. We are not responsible for their content or privacy practices and recommend you review their policies before interacting with them.
Do Not Track and Global Privacy Control
Some browsers transmit a "Do Not Track" or Global Privacy Control signal. Where required by law (for example, under certain US state privacy laws), we honor recognized opt-out preference signals as a request to limit non-essential tracking.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our practices, products, services, or applicable laws. The "Last updated" date at the top of this page indicates when the policy was last revised. If we make material changes, we will provide a more prominent notice (for example, by email or a banner on the Service). Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
Contact
If you have any questions, requests, or concerns regarding this Privacy Policy or how we handle your personal data, please reach out to us through our contact page. We aim to respond to all privacy-related inquiries within a reasonable timeframe.