Privacy policy

Who is responsible for your data

The data controller is Marjan Kayedi Sheppard, trading as Marjan Kayedi, established in Spain (NIE Y0518524A). You can contact the controller at marjan@marjankayedi.com.

Information we may receive

• Your name, email address, and the content of an enquiry you choose to send by email or through a website contact form when one is enabled.
• Booking details you submit directly to Calendly, such as your name, email address, time zone, and selected appointment.
• Aggregated website usage information through Google Analytics, but only after you consent.
• Technical information needed to deliver and secure the website, such as request logs processed by the hosting provider.

Please do not send sensitive health information through this website, its contact form, or ordinary email.

Why information is used

Information is used to respond to enquiries, arrange discovery calls, provide requested services, operate and secure the website, and understand aggregated website performance where consent has been given. Depending on the context, the legal basis may be consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation, or a legitimate interest in operating a secure website.

Service providers

The live website uses Vercel for hosting, Calendly for booking, Google Analytics for consented analytics, and GitHub for controlled website publishing. A website contact form may also process the information entered into it when that feature is enabled. If YouTube or Vimeo media is added, it will remain blocked until the visitor consents and chooses to load it. Each provider processes information under its own terms and privacy policy and may process data outside the European Economic Area using an appropriate transfer mechanism.

Retention

Personal information is retained only for as long as necessary to respond to enquiries, maintain a working relationship, and meet professional and legal obligations, normally no longer than seven years after the last contact. A person may request earlier deletion, subject to any overriding legal or professional obligation.

Provider-specific booking, analytics, security-log, and backup retention settings are controlled in the relevant provider accounts and should be reviewed regularly.

Your rights

Depending on applicable law, you may ask to access, correct, erase, restrict, or receive a copy of your personal information, or object to certain processing. You may withdraw consent at any time through Cookie preferences. You may also complain to the Spanish Data Protection Agency (AEPD) or the supervisory authority where you live.

Contact

For a privacy request, email marjan@marjankayedi.com. Identity may need to be verified before a request is completed.