Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Mehrvash Zehi
E-Mail: mehrvashzehi@gmail.com
Website: www.mehrvashzehi.com

2. Data we collect

We only collect personal data that you voluntarily provide to us, for example when you:

• Send us a message via the contact form
• Book a session via Calendly
• Make a payment via Stripe
• Create an account (sign up)
• Sign up for any newsletter or programme

The data typically includes your name, email address, and any information you choose to share in your message.

3. Purpose and legal basis

We process your data to respond to your enquiries, provide our coaching services, and fulfil contractual obligations. The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interests).

4. Third-party services

This website uses the following third-party services, each of which has its own privacy policy:

• Stripe: payment processing. Stripe's privacy policy: stripe.com/privacy
• Calendly: appointment scheduling. Calendly's privacy policy: calendly.com/privacy
• Vercel: website hosting. Standard access logs (IP, browser, timestamp) are processed by Vercel in accordance with their privacy policy.
• Clerk: account creation and login. If you create an account, Clerk stores your email address, a hashed password (if used), and sign-in activity. Clerk's privacy policy: clerk.com/legal/privacy. If you sign in with Google, we receive your name, email address, and profile picture from Google via Clerk. This information is used solely to create and manage your account, and is never sold or shared for advertising.

5. Cookies

This website does not use tracking or advertising cookies. Only technically necessary cookies may be set (e.g. for session management). You can configure your browser to block or delete cookies at any time.

6. Retention

We retain your personal data only as long as necessary for the purpose it was collected, or as required by law. Enquiries are typically kept for up to 3 years unless you ask us to delete them earlier.

7. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing or request restriction
• Data portability
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at mehrvashzehi@gmail.com.

8. Changes

We may update this policy from time to time. The latest version is always available at this URL. Significant changes will be communicated by email if you are an existing client.