Privacy policy

Privacy Policy - Keshavchopra.com
Version 2.0 — March 2026

 

PRIVACY POLICY

KeshavChopra.com

EU GDPR Regulation 2016/679 Compliant | Version 2.0 | March 2026
 

IMPORTANT: Please add your email address in all sections marked [email protected] before publishing this policy.
 

1. WHO WE ARE

 

Data Controller
Keshav Chopra — Life and Business Coach
Address
Rybna 716/24 — 110 00 Praha 1 — Czech Republic
Email
[email protected]
Website
keshavchopra.com
Last Updated
March 2026
Regulation
EU General Data Protection Regulation 2016/679
 

2. WHAT DATA WE COLLECT AND WHY

 

We collect only the minimum data necessary to deliver our coaching services.

 

Data
Purpose
Legal Basis
GDPR Article
Name
Identify client — deliver coaching
Contract
Article 6(1)(b)
Email address
Communication — session reminders
Contract
Article 6(1)(b)
Phone number
Session scheduling
Contract
Article 6(1)(b)
Payment information
Process coaching fees
Contract
Article 6(1)(b)
Session notes
Deliver coaching services
Consent
Article 6(1)(a)
Date of birth
Numerology and energy analysis
Explicit consent
Article 9(2)(a)
Website behaviour
Improve website experience
Legitimate interest
Article 6(1)(f)
Marketing consent
Newsletter and updates
Consent
Article 6(1)(a)
 

NOTE: Date of birth used for numerology and energy analysis is special category data under Article 9 GDPR. Your explicit separate consent is required before we process this data.
 

3. AI TOOLS AND AUTOMATED SYSTEMS WE USE

 

In compliance with EU AI Act Regulation 2024/1689 — fully applicable from 2 August 2026 — we disclose all AI tools and automated systems used in our operations:

 

Tool
Provider
Purpose
Data Processed
EU AI Act Classification
CMS Platform
CMS Provider
Website content management
Visitor data — browsing behaviour
Minimal risk
Cloudflare
Cloudflare Inc — USA
CDN — security — performance
IP address — traffic data
Minimal risk
Tidio
Tidio LLC
AI customer support assistant
Name — email — conversation content
Limited — transparency required
Energy Prediction
AI system
Personalised energy analysis
Client provided information
Limited — transparency required
Numerology Analysis
AI system
Personalised numerology reading
Date of birth — name
Limited — transparency required
Stripe
Stripe Inc — USA
Payment processing
Payment card data — billing details
Minimal risk
 

No solely automated decisions are made about you that produce legal or similarly significant effects without human review.

 

4. WHO WE SHARE YOUR DATA WITH

 

We do not sell your personal data. Ever. To anyone.

 

Recipient
Purpose
Location
Legal Safeguard
Agreement
Stripe Inc
Payment processing
USA
Standard Contractual Clauses
Data Processing Agreement
Tidio LLC
AI chat support
USA — EU
Standard Contractual Clauses
Data Processing Agreement
CMS Provider
Website content management
USA
Standard Contractual Clauses
Data Processing Agreement
Cloudflare Inc
CDN — security — performance
USA
Standard Contractual Clauses
Data Processing Agreement
Email provider
Communication delivery
EU — USA
Standard Contractual Clauses
Data Processing Agreement
 

5. HOW LONG WE KEEP YOUR DATA

 

Data Type
Retention Period
Reason
Client coaching records
3 years after last session
Legitimate interest — service continuity
Payment records
10 years
Czech accounting law — Act 563/1991
Email marketing
Until consent withdrawn
Consent basis — Article 6(1)(a)
Session notes
3 years
Service delivery
Website analytics
13 months
Industry standard — Google Analytics
AI chat conversations
6 months
Service improvement — Tidio
Energy and numerology data
Duration of coaching relationship
Consent basis — withdrawn on request
 

6. COOKIES WE USE

 

Our website uses cookies to enhance your experience. You can manage your cookie preferences using our cookie preference centre.

 

Cookie
Category
Purpose
Duration
Provider
Essential
Necessary
Website function — cannot be disabled
Session
Durable.co
Analytics
Statistical
Understand visitor behaviour
13 months
Google Analytics
Chat
Functional
Remember chat preferences
6 months
Tidio
Marketing
Marketing
Personalised advertising
24 months
Various
 

7. YOUR RIGHTS UNDER GDPR

 

Under EU GDPR Regulation 2016/679 you have the following rights regarding your personal data:

 

Right
What It Means
How To Exercise
Right to Access
Request a copy of all data we hold about you
[email protected]
Right to Rectification
Correct any inaccurate or incomplete data
[email protected]]
Right to Erasure
Request deletion of your personal data
[email protected]
Right to Restriction
Limit how we process your data
[email protected]
Right to Portability
Receive your data in a portable format
[email protected]
Right to Object
Object to processing based on legitimate interest
[email protected]
Withdraw Consent
Withdraw any consent given at any time
[email protected]
 

We will respond to all rights requests within 30 days of receipt.

 

8. SPECIAL CATEGORY DATA

 

Our Energy Prediction and Numerology Analysis services may process special category data including date of birth and personal life details you voluntarily provide.

 

This processing is based on your EXPLICIT CONSENT under GDPR Article 9(2)(a).

 

You may withdraw this consent at any time by contacting us at [EMAIL ADDRESS TO BE ADDED]. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

 

9. DATA SECURITY

 

Security Measure
Detail
Encrypted transmission
All data transmitted via HTTPS — SSL encryption
Secure payments
Stripe is PCI DSS Level 1 compliant — highest standard
Access controls
Only authorised persons can access your data
Regular reviews
Security measures reviewed and updated regularly
Data minimisation
We collect only the minimum data necessary
 

10. CHILDREN

 

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child please contact us immediately at [email protected]].

 

11. CHANGES TO THIS POLICY

 

We will update this policy when our practices change or when regulations are updated. We will notify active clients of significant changes by email. The current version and date are always shown at the top of this policy.

 

Current version: 2.0 — March 2026

 

12. COMPLAINTS

 

If you are unhappy with how we handle your personal data you have the right to complain to the Czech supervisory authority:

 

Authority
Urad pro ochranu osobnich udaju — UOOU
Address
Pplk. Sochora 27 — 170 00 Praha 7
Website
uoou.cz
Phone
+420 234 665 111
Email
[email protected]
 

13. CONTACT US

 

For all privacy matters and rights requests please contact:

 

Data Controller
Keshav Chopra
Address
Rybna 716/24 — 110 00 Praha 1 — Czech Republic
Email
[email protected]
Website
keshavchopra.com
Response time
Within 30 days of receipt
 

DISCLAIMER: This privacy policy was prepared with independent advisory assistance and is based on EU GDPR Regulation 2016/679 and EU AI Act Regulation 2024/1689. It does not constitute legal advice. The data controller — Keshav Chopra — is solely responsible for implementation and ongoing compliance. We recommend this policy be reviewed by a qualified legal advisor before publication.