Your privacy

Privacy policy.

Last updated 27 October 2026. This explains what we collect, why, and the choices you have.

Who we are

This website is run by Uma Mansharamani (“Uma”, “we”). To contact us about your data, use the contact page and mention “privacy”.

What we collect

  • When you hold or book a private session: your name, email, time zone, the session you chose and, if you give it, your WhatsApp number. We also record payment confirmation details (amount, currency, date).
  • When you send a speaking enquiry: your name, organisation, email, event date, city, audience size and message.
  • When you reserve a place on the course or join the waiting list: your name, email and, optionally, phone number.
  • How you found us: which page or campaign brought you here, so we know what is working.
  • Analytics, only if you accept: anonymous usage statistics. Nothing is switched on unless you accept the cookie choice.

Why we use it

To arrange and deliver your session or course, reply to you, keep records, and improve the website. If you are in the European Economic Area or the UK, we rely on performing a contract, our legitimate interest in running the business, and your consent for analytics. If you are in India, we process your data with your consent or for the purpose for which you gave it, in line with the Digital Personal Data Protection Act, 2023.

Coaching confidentiality

Intake notes are kept to a minimum, stored privately and seen only by Uma and people she authorises. We never publish anything about a client without separate written permission. Coaching is not therapy or medical care.

Who can see your information

We use trusted providers to run the website: hosting (Vercel), a private database (Neon), and Google for calendar and video meetings. Messages you choose to send through WhatsApp are handled by WhatsApp under its own policy. We do not sell your data.

Google user data

Only Uma and her team sign in to the back office with Google. When Uma connects her Google Calendar, the website can check when she is free or busy and create session events with a video link on that calendar. It does not read the contents of her other events or her email. The connection token is stored encrypted, is used only for these purposes, and is never shared or sold. The website’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Where it is stored and for how long

Our providers’ servers may be outside your country. We keep client and enrolment records for as long as needed to provide our services and meet legal and accounting duties, then delete or anonymise them. Waiting-list emails are kept until you ask to be removed. You can ask for earlier deletion at any time.

Your rights

You can ask to see, correct, export or delete your information, withdraw your consent, or complain to your data protection authority. Please use the contact page.

Children

Our services are for adults.

Changes

If we change this policy we will post the new version here with a new date.

BookSpeak