Privacy notice

This notice covers the website at https://ishanyash.com and the coaching service traded as Upstream. The data controller is Ishan Yash, sole trader, contactable through the contact form. ICO registration: (ICO registration number to be added).

What is collected

Visiting the site. Nothing personal. The site sets no cookies. Page views are counted with Cloudflare Web Analytics, which does not use cookies, local storage or IP-address fingerprinting; it reports page counts, referrers, and country-level location. You can object to even this by using a content blocker; nothing on the site breaks.

Contacting me. The contact form sends your name, email address, the topic and your message to a form service (Formspree) which forwards it to my email. The form also contains a hidden field that only automated software fills in; if it is filled, the message is discarded. Messages are kept for as long as our conversation is live and deleted within 12 months.

Booking a call. Bookings are handled by Cal.com. When you book you give Cal.com your name, email address and the answers to the booking questions, and Cal.com adds the call to my Google Calendar. If you later pay for a session by card link, your card details go directly to Stripe; I never see or store card numbers. Cal.com's and Stripe's own privacy notices apply to the data they hold.

Working with me. During coaching I hold your CV, LinkedIn text, notes from sessions, and recordings of mock interviews if you have agreed to recording. These are stored in my business Google Drive, shared with nobody, and deleted 90 days after our last session unless you ask for them to be deleted sooner. When I use an AI tool on your CV, I remove your name and contact details first and use a paid tier with model training switched off.

Newsletter. If you sign up to Neurobuttr, my weekly newsletter, Buttondown holds your email address, when and from which page you signed up, and whether you confirmed. After you confirm, it also records which issues you open and which links you click, so I can see which parts are useful. I use this only to send you the newsletter, on the basis of your consent, which you give by clicking the link in the confirmation email. Every issue has an unsubscribe link, and you can also reply to any issue to leave. When you unsubscribe, Buttondown keeps your address on a do-not-email list so you are not sent anything again; ask me and I will delete it completely.

Why (the legal bases)

Replying to a message and delivering a session you have booked are performance of a contract or steps towards one. Page counts are my legitimate interest in knowing whether anything is read. Everything else is consent, which you can withdraw by sending a message through the contact form.

Where it goes

Formspree, Cal.com, Stripe, Google and Buttondown may process data outside the UK. Each operates under the UK's international data transfer rules. I do not sell data, share it with advertisers, or use it for anything beyond what is described here.

Your rights

You can ask to see what I hold about you, have it corrected or deleted, or object to how it is used. Send a message through the contact form and I will answer within a month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

This notice changes when the site or the service does. The date at the top is the last change.