Privacy & cookies
Last updated: 23 July 2026
Natasha Chatur Ltd respects your privacy. This notice explains what information we collect through natashachatur.com, why we use it, who we share it with, how long we keep it, and the choices and rights available to you.
Who we are
Natasha Chatur Ltd is the controller of the personal information described in this notice.
- Company name: Natasha Chatur Ltd
- Company number: 12370800
- Registered office: Hare House, 732 Whittingham Lane, Preston, United Kingdom, PR3 2JJ
- Email: hello@natashachatur.com
In this notice, “we”, “us” and “our” mean Natasha Chatur Ltd.
The information we collect and why
When you visit the website
Our hosting provider processes technical information needed to deliver and protect the website. This may include your IP address, request and security logs, browser and device information, the requested page, and the date and time of the request.
We also use Vercel Web Analytics to understand which pages are useful. It provides aggregated information such as page paths, referring sites, approximate location, device and browser type. We do not put names, email addresses or other contact details into analytics events.
We use this information to operate, secure and improve the website. Our lawful basis is our legitimate interest in providing a reliable, secure and useful website.
When you email us or book a conversation
If you contact us or arrange a call, we may receive your name, email address, time zone, appointment details, your messages, and any information you choose to include in a booking form or email.
We use this information to respond, arrange the conversation, understand what you are looking for, and take steps at your request before a possible coaching or consulting engagement. Our lawful bases are taking steps at your request before entering a contract and our legitimate interest in responding to genuine enquiries and managing our work.
Calendly provides the embedded booking calendar. When the calendar loads and when you interact with it, Calendly receives technical information and any booking details you submit. Calendly processes that information as explained in Calendly’s Privacy Notice.
Calendly currently handles scheduling only and does not take payment on this website. If payment is added to the booking flow in future, we will update this notice before that change is enabled.
Please do not include health information or other highly sensitive personal information in a booking form or ordinary email. If that kind of information becomes relevant to a coaching engagement, we will explain an appropriate way to handle it.
When you register interest in a workshop
If you register interest in The Transitions Workshop, we collect your name, email address and whether you prefer an online event, an in-person event in Lisbon, or either format.
We use this information only to manage workshop interest and send relevant workshop updates. Our lawful basis is your consent, given when you submit the form after reading its short privacy explanation. Selecting “Register your interest” completes the registration; there is no separate email-confirmation step. This does not subscribe you to unrelated general marketing.
You can withdraw your consent at any time by using the unsubscribe link in an email or by emailing hello@natashachatur.com. Withdrawing consent does not affect anything already done lawfully before withdrawal.
If you become a client or organisational contact
We may process contact details, proposals, contracts, appointment and service-administration records, correspondence, invoices and payment status to provide services, manage the relationship, keep appropriate business records and meet legal obligations.
Our lawful bases are performance of a contract, taking steps before entering a contract, compliance with legal obligations, and our legitimate interests in running and protecting the business. If a coaching engagement requires additional privacy information, we will provide it at the appropriate time.
We do not use the information described in this notice to make solely automated decisions that have legal or similarly significant effects on you.
Information received from someone else
Sometimes an employer, sponsoring organisation, colleague or referral partner may give us your business contact details or ask us to contact you. We use that information only to make the relevant introduction, discuss a possible engagement, or administer an agreed service. Our lawful basis is normally our legitimate interest in responding to genuine referrals and administering services. Where you asked for the introduction or the processing is needed for an agreed service, taking steps before a contract or performing a contract may also apply. We will normally tell you where the information came from when we first contact you, unless the law provides an exception.
If you do not provide information
You can browse the main website without giving us your name or contact details. You do not have to make an enquiry, book a call or register for a workshop. If you choose not to provide information marked as required in a booking or registration form, however, we may not be able to arrange the call, respond to the request or provide the relevant update or service.
Who receives your information
We use a limited number of service providers to run the website and the business. Depending on how you interact with us, these may include:
- Vercel, for website hosting, security, aggregated web analytics and website-performance information;
- Calendly, for appointment availability, scheduling and booking administration;
- Neon, for the private database that stores workshop-interest and consent records;
- Resend, for delivering workshop registration and update emails. Resend is not used as the workshop subscriber list;
- Vercel private storage and Backblaze B2, for separately stored, encrypted database backups;
- Google, for business email and calendar services;
- QuickBooks, for invoicing and accounting;
- professional advisers, contractors, regulators, courts or public authorities where reasonably necessary or required by law.
These organisations receive only the information reasonably needed for their role. Some act as our processors and some may act as separate controllers for parts of their services. We do not sell your personal information.
If an organisation sponsors a coaching engagement, the engagement documents provided for that engagement explain what information is shared with the organisation and the confidentiality boundaries that apply.
International transfers
Some service providers may process information outside the United Kingdom, including in the United States. Where UK personal- information rules require safeguards for a transfer, we use the applicable provider arrangements, such as UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework where available, or approved contractual safeguards.
You may contact us if you would like more information about the safeguards relevant to your information.
How long we keep information
We keep personal information only for as long as reasonably needed for the purpose for which it was collected, including legal, accounting and dispute-resolution requirements. Our intended operating schedule is:
- any remaining registrations created under our previous email- confirmation process: links expire after 48 hours and unconfirmed records are deleted after 30 days;
- confirmed workshop-interest details: while workshop updates remain active and useful, with a review at least annually;
- unsubscribed, bounced or complained-about records: sending stops immediately. We remove profile details when no longer needed and may retain only a keyed, non-address suppression marker after an erasure request so an old import cannot accidentally re-contact the person;
- workshop issue and delivery evidence: reviewed for deletion after 24 months;
- email-provider webhook replay records: normally 90 days, and daily anti-abuse keys: two days;
- encrypted backups: the latest 14 daily snapshots at each of two private destinations, so deleted live information normally ages out of backups within about 14 days unless a legal hold applies;
- enquiries and bookings that do not become a client relationship: normally 12 months after the last meaningful contact;
- contracts, invoices and core business records: normally six years after the end of the relevant financial year or relationship, where needed for UK tax, accounting or legal purposes;
- website security and hosting logs: for the provider’s configured period and only for as long as needed for operation, security and troubleshooting; and
- aggregated Vercel Analytics information: for the reporting period available under our Vercel account. Vercel says its Web Analytics visitor hash is discarded after 24 hours and the reported data is not associated with an identifiable visitor.
We may retain information for longer if reasonably necessary for a legal claim, safeguarding matter, regulatory requirement or other legal obligation. We may delete or anonymise it sooner where it is no longer needed.
Your rights
Depending on the circumstances, UK data-protection law may give you the right to:
- ask for a copy of your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to delete information;
- ask us to restrict how information is used;
- object to processing based on legitimate interests;
- receive certain information in a portable format; and
- withdraw consent where we rely on consent.
Some rights are subject to legal conditions and exceptions. To exercise a right, email hello@natashachatur.com. We may need to confirm your identity before completing a request.
If you have a concern, please contact us first so we can try to resolve it. You also have the right to complain to the UK’s data-protection regulator, the Information Commissioner’s Office, through ico.org.uk/make-a-complaint.
Cookies and similar technologies
A cookie is a small piece of information stored on a device. Similar technologies can also store or access information in a browser.
This website
This website does not use Google Analytics, advertising cookies or cross-site tracking. Vercel Web Analytics is used to produce aggregated website-use information without setting analytics cookies on this site or identifying an individual visitor.
We do not show a site-wide cookie banner. The automatically loaded Calendly calendar and its separate cookie behaviour are explained below.
Calendly booking calendar
The Calendly booking calendar loads automatically as part of the booking page. Calendly uses cookies and similar technologies for security, booking functionality, preferences, performance and, depending on its configuration and your location, other purposes.
The embedded calendar does not show a separate cookie prompt. You can block or delete cookies through your browser settings, although this may affect the booking experience. If you prefer not to use the embedded calendar, you can contact us by email instead.
For more information about Calendly’s processing and cookies, see Calendly’s Privacy Notice. If you follow a Calendly-hosted cancellation or rescheduling link, Calendly’s own privacy and cookie information will also apply there.
If we introduce a new analytics or advertising service in future, we will update this notice and add any choice or control required before that service is used.
Security
We use reasonable technical and organisational measures designed to protect personal information. No website, email service or internet transmission can be guaranteed to be completely secure, so please take care with what you send through ordinary email or booking fields.
Children
This website and these services are intended for adults. We do not knowingly collect personal information from children through the website. If you believe a child has provided information, please contact us.
Changes to this notice
We may update this notice when the website, our services, our providers or the law changes. The date at the top shows when it was last updated. Material changes will be explained prominently where appropriate.