Legal
Privacy Policy
Last updated 8 September 2026
This policy explains how personal data is handled on www.sandeepjuneja.com, in line with the UK GDPR and the Data Protection Act 2018.
1. Who is responsible
Sandeep Juneja, Nottingham, United Kingdom, is the data controller for personal data collected through this website. Contact: sandeepkjuneja@gmail.com.
2. What is collected
- Booking details: name, email address, company (optional), the business challenge you describe, your preferred session time and timezone.
- Payment details: processed by our payment provider. Card numbers are never received or stored by this website; only a payment reference and status are kept.
- Technical data: basic, aggregated usage information if you accept optional analytics cookies.
3. Why it is used and the lawful basis
- To arrange, deliver and confirm your consultation — performance of a contract.
- To send booking confirmations, receipts, reschedule and cancellation notices — performance of a contract.
- To keep financial records — legal obligation.
- To understand site usage through optional analytics — consent, which you can withdraw at any time.
Your information is never sold, and marketing email is not sent without your explicit consent.
4. Who else processes it
Data is shared only with the service providers needed to run this site: our hosting and database provider, our payment provider for taking payment, and our email provider for sending confirmations. Each acts under contract and only on instruction.
5. How long it is kept
Booking and enquiry records are kept for up to 24 months after the last contact. Records needed for tax and accounting are kept for six years, as UK law requires. Cookie preferences are stored in your browser until you clear them.
6. Cookies
Essential cookies and local storage keep the site working and remember your cookie choice. Optional analytics cookies are only set if you select "Accept all" in the cookie banner. You can change your mind by clearing your browser storage for this site, and the banner will appear again.
7. Your rights
Under the UK GDPR you may request access to your data, correction, erasure, restriction or portability, and you may object to processing or withdraw consent. Requests are answered within one month at sandeepkjuneja@gmail.com. If you are not satisfied, you may complain to the Information Commissioner's Office at ico.org.uk.
8. Security and international transfers
Data is stored on access-controlled, encrypted services. Where a provider processes data outside the UK, appropriate safeguards such as the International Data Transfer Agreement or Standard Contractual Clauses are in place.