Privacy Policy

The short version

I collect the minimum needed to sell you something and then deliver it. I do not sell your data and I do not add you to a mailing list because you bought something. The site uses Google Analytics to see which pages are useful — you are asked first, and declining costs you nothing.

What is collected

• Contact form — your name, email, chosen topic and message. Stored by Netlify Forms and emailed to me.
• Newsletter — your email address, only if you submit it deliberately.
• Purchases — your name, email and order details, held by Stripe. Card numbers are handled entirely by Stripe and never reach this site.
• Ebook delivery — a record of which product you bought and how many times the download link has been used, so links can be limited and reissued.

CVs sent for a Story Audit

If you send your CV through the Story Audit form, it is treated differently from everything else on this site, because it is the only thing here that you did not choose field by field. A CV carries your address, your dates, sometimes a photograph, and sometimes an employer's confidential project names.

• Who reads it — me, and nobody else. It is not published, shared, sold, or used to train any AI model.
• Where it lives — encrypted storage at Netlify, my hosting provider. It is never attached to an email and never posted anywhere.
• How long — deleted automatically 90 days after you send it, whether or not you ask. A scheduled job does this; it is not a promise that depends on me remembering.
• Your delete button — the confirmation email contains a one-click link that erases your CV and everything submitted with it, immediately. No reply needed and no reason required. Keep that email; the link does not expire.
• What I record alongside it — your name, email, the role and company you are targeting, any notes you wrote, and the fact and wording of the consent you gave, with its timestamp. Nothing else.

Please do not send material your employer treats as confidential. If you already have, email info@askgurpreet.com and I will delete it so you can send a redacted version.

Analytics and cookies

This site uses Google Analytics 4 to understand which pages people find useful and where visitors arrive from. It records things like the pages you view, roughly where in the world you are, your device and browser, and which site or advert referred you. It does not record your name, and I never attempt to identify individual visitors from this data.

Google Analytics sets cookies. You are asked before that happens, and you can decline — the banner has a Reject button with exactly the same weight as Accept, and declining changes nothing about how the site works. Visitors in the EEA, the UK and Switzerland have analytics and advertising storage switched off by default until they actively accept, using Google Consent Mode.

To change your mind later, clear this site's data in your browser and the banner will reappear. You can also install Google's opt-out add-on, which blocks Google Analytics everywhere.

If I run Google Ads in future, the same tag reports conversions — that a purchase happened, its value, and which advert led to it. That is measurement of the advert, not profiling of you.

Instagram

If you interact with @askgurpreet on Instagram, a small amount of that interaction is processed so I can reply to you. This covers only my own account — never your wider Instagram activity.

• What is processed — your Instagram username, the text of a comment or message you send me, and a record that a reply has already been sent, so the automation cannot message you twice.
• An email you send me — if you reply with your email address to receive a resource, it is used to send you that resource and to tell you about the masterclass or the internship. Every email has a working unsubscribe link.
• What is never accessed — your password, your follower or following lists, your private activity, your other conversations, or anything on accounts other than mine.
• Who else sees it — Meta, because the messages travel over Instagram. Nobody else. It is not sold and not used for advertising.
• How long — the reply record is kept while the automation needs it and deleted on request.
• Deleting it — see deleting your data, or DM me the words delete my data.

What is not collected

No session recording, no heatmaps, no keystroke logging, no fingerprinting, and no attempt to identify anonymous visitors by name or employer. Your data is never sold or shared with data brokers. Stripe sets its own cookies on its hosted checkout pages, governed by Stripe's privacy policy.

Who your data is shared with

• Stripe — payment processing.
• Netlify — website hosting, form submissions and encrypted storage of ebook files.
• Resend — sending your receipts, download links and calendar invites.
• Google Analytics — anonymous usage statistics, only if you accept cookies.
• Nobody else. Your data is never sold, rented or traded.

How long it is kept

Order records are kept for as long as tax and accounting rules require. Contact-form submissions are kept while they are useful and deleted on request. Newsletter subscriptions last until you unsubscribe.

Your rights

Email info@askgurpreet.com to see what is held about you, correct it, or have it deleted. If you are in the EU, UK or California, this covers your rights under GDPR and the CCPA — no special form required, just ask.

Session confidentiality

Anything discussed in a coaching session is confidential. Sessions are not recorded unless you ask for a recording and I agree in advance.

Contact

Questions about privacy go to info@askgurpreet.com.