LEGAL

Privacy Policy

Last updated: 10 October 2026

This policy explains what personal data is collected when you visit purvisankhla.com or get in touch with me, why it is collected, and what your rights are under the EU General Data Protection Regulation (GDPR).

Who is responsible

Purvi Sankhla, independent finance and business consultant in the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 91270464 ("I", "me"). You can contact me about anything in this policy at info@purvisankhla.com, through the contact form or on LinkedIn.

What I collect and why

• Messages you send through the "Ask Purvi" form: the details you choose to share, such as your name, email address and question. I use these only to reply to you.
• Call bookings through Cal.com: your name, email address, chosen time and any notes you add. I use these to schedule and prepare for the call.
• Client information: if you become a client, the information needed to do the work and to invoice you.
• Technical data: like most websites, the server that hosts this site records basic technical data (IP address, browser type, page requested and time) in log files, used only to keep the site secure and working.

The legal bases are: taking steps at your request before entering into a contract, performing a contract, meeting legal obligations (such as tax record-keeping), and my legitimate interest in answering enquiries and keeping this website secure.

I do not sell your data, use it for advertising, or make automated decisions about you.

Cookies and tracking

This website does not use analytics or advertising cookies and does not track your behaviour. When you open the contact form, Tally may use strictly necessary cookies to make the form work.

Services I use

A small number of providers help me run this website and process data on my behalf:

• Tally — contact form
• Cal.com — call booking
• Amazon Web Services — website hosting (EU region)
• Google Fonts — typography; your browser loads fonts from Google's servers, which shares your IP address with Google

Some of these providers may process data outside the European Economic Area. Where they do, they rely on legal safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. Links to LinkedIn and other websites are covered by those websites' own privacy policies.

How long I keep it

• Enquiries that don't lead to work: deleted within 12 months.
• Client records: 7 years, as required by Dutch tax law.
• Server logs: only as long as needed for security and troubleshooting.

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on your consent, you can withdraw it at any time. To use any of these rights, email me at info@purvisankhla.com. I will respond within one month.

If you believe your data is not handled correctly, you can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes to this policy

I may update this policy from time to time. The date at the top shows when it last changed.