Legal
Privacy Policy
This Privacy Policy explains how Ganesa Kumar ("I", "me", "my") collects, uses and protects personal data when you visit ganesakumar.com (the "Website") or contact me about consultancy services. I aim to collect as little personal data as possible.
1. Who is responsible for your data
I am the controller of personal data processed through this Website. You can contact me about anything in this policy at hello@ganesakumar.com.
2. What data I collect
- Information you send me. If you email me, I receive your name, email address, any organisation or role details you include, and the content of your message and attachments.
- Technical data. When you visit the Website, my hosting provider automatically processes basic technical information needed to deliver the pages securely. This includes your IP address, browser type, the pages requested and the date and time of the request. It is kept in server logs.
- Engagement data. If we go on to work together, I will hold the contact and business details needed to scope, deliver and invoice the engagement.
The Website does not use advertising or analytics cookies, tracking pixels or third-party analytics tools, and it has no user accounts or contact forms. I do not knowingly collect special category data. Please do not send it to me.
3. How and why I use your data
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Responding to your enquiry and discussing potential work | Legitimate interests (responding to people who contact me), or steps taken at your request before entering into a contract |
| Delivering, managing and invoicing consultancy engagements | Performance of a contract |
| Operating and securing the Website (server logs, preventing abuse) | Legitimate interests (keeping the Website available and secure) |
| Keeping business and tax records, and meeting other legal obligations | Legal obligation |
I do not sell your personal data, use it for automated decision-making or profiling, or add you to marketing lists without your consent.
4. Who I share data with
I share personal data only where it is necessary:
- Service providers that host the Website and provide email services. They act on my behalf, under contractual confidentiality and data protection terms.
- Professional advisers, such as accountants or lawyers, where reasonably required.
- Authorities where required by law or to establish, exercise or defend legal claims.
5. International transfers
My service providers may process data outside the United Kingdom, including in the United States and the European Economic Area. I also work across the Gulf region. Where data is transferred outside the UK, I rely on an adequacy decision or on appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as provided by my service providers.
6. How long I keep data
- Enquiries that do not lead to an engagement: up to 24 months after our last contact, then deleted.
- Engagement and invoicing records: for as long as required by applicable tax and accounting law, usually up to 7 years.
- Server logs: for the hosting provider's standard retention period, which is typically short.
7. Your rights
Subject to certain conditions, you have the right to:
- access the personal data I hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing, including processing based on legitimate interests;
- receive your data in a portable format; and
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email hello@ganesakumar.com. I will respond within one month. If you are unhappy with how I have handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live. I would appreciate the chance to resolve your concern first.
8. Security
The Website is served over encrypted HTTPS connections. I use reputable service providers and take reasonable steps to protect personal data. No method of transmission over the internet is completely secure, so please avoid sending highly confidential information by ordinary email unless we have agreed a secure method.
9. Links to other websites
The Website may link to third-party sites, such as LinkedIn. I am not responsible for their privacy practices. Please read their policies.
10. Children
The Website and my services are intended for businesses and professionals. They are not directed at children, and I do not knowingly collect data from anyone under 18.
11. Changes to this policy
I may update this policy from time to time. The latest version will always be posted on this page, with the "Last updated" date revised.