Privacy Policy

Last updated: 16 August 2026

This Privacy Policy explains how Sudha Khandelwal collects, uses, discloses and protects personal information when you visit this website or engage us for Agile coaching, training, keynote speaking or career coaching services.

We work with individuals and organisations across several regions, so this policy reflects the expectations of the major privacy regimes that may apply to you, including the EU and UK General Data Protection Regulation, the Australian Privacy Act 1988 and its Australian Privacy Principles, and India's Digital Personal Data Protection Act.

1. Who we are

This website is operated by Sudha Khandelwal, an Agile coach, trainer and keynote speaker. For any question about this policy, contact innersprintteam@gmail.com.

[To confirm before launch: registered or trading entity name, country of establishment, and a postal address for privacy correspondence.]

2. Information we collect

Information you give us

When you complete the enquiry form, we collect the details you enter: your name, email address, telephone number, the service you are interested in, and the content of your message. If you contact us by email, telephone or social media, we collect the information in that correspondence.

If you go on to engage us, we may collect further information needed to deliver the work, such as your role and organisation, the goals of the engagement, session notes, and billing details.

Information collected automatically

Our hosting environment records technical information in server logs, including your IP address, browser and device type, the pages you request, and the date and time of each request. This is used to operate the site securely and to diagnose faults.

3. Third-party services used on this website

These are the external services this site actually uses:

  • ipinfo.io — when the enquiry form loads, your IP address is sent to ipinfo.io, operated from the United States, so the telephone field can preselect the correct country dialling code. This is a convenience feature only. The result is not stored by us and is not used to profile you.
  • Google Fonts — typefaces are served from fonts.googleapis.com and fonts.gstatic.com. Your IP address is transmitted to Google in order to deliver those files.
  • YouTube — some pages embed YouTube videos. Google may set cookies and collect viewing data when you play a video, governed by Google's own terms.
  • Website hosting — our hosting provider processes server log data on our behalf.
  • Email — enquiries are delivered to and stored in our email provider's systems.

We do not currently run analytics software, advertising tags, remarketing pixels or social media tracking pixels on this website. If that changes, this policy will be updated before those tools are introduced.

4. Cookies

This website does not set advertising or tracking cookies. Our caching and security software may set strictly functional cookies necessary for the site to load correctly. If you play an embedded video, Google may set its own cookies at that point. You can block or delete cookies in your browser settings, though parts of the site may then behave unexpectedly.

5. How we use your information, and our lawful bases

  • To respond to your enquiry — on the basis of your request and our legitimate interest in replying to prospective clients.
  • To prepare proposals and deliver coaching, training or speaking engagements — for the performance of a contract.
  • To issue invoices and keep accounting records — to comply with legal obligations.
  • To operate, secure and improve this website — on the basis of our legitimate interests.
  • To send occasional updates where you have asked to receive them — on the basis of your consent, which you may withdraw at any time.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

6. Disclosure

We disclose personal information only to the service providers described above, to professional advisers such as accountants where necessary, and where required by law. Where you are engaged through your employer, we may share progress or attendance information with that organisation on the terms agreed at the outset.

7. International transfers

Because we work across regions and use the services listed above, your personal information may be transferred to, stored in, or accessed from countries other than your own, including the United States. Those countries may not provide the same level of legal protection as your home jurisdiction. Where required we rely on appropriate safeguards such as standard contractual clauses, and we take reasonable steps to ensure recipients handle your information consistently with this policy.

8. How long we keep it

Enquiries that do not lead to an engagement are kept for up to two years, then deleted. Records relating to a paid engagement, including invoices, are kept for as long as required by applicable tax and limitation laws, typically seven years. Coaching notes are kept only as long as needed for the engagement and are deleted on request.

9. Security

We take reasonable technical and organisational measures to protect personal information, including encrypted connections, access controls and current software. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have the right to request access to the personal information we hold about you; to have inaccurate information corrected; to have information erased; to restrict or object to certain processing; to receive your information in a portable format; and to withdraw consent at any time.

To exercise any of these rights, email innersprintteam@gmail.com. We will respond within the period required by the law that applies to you. If you are not satisfied, you may complain to your local data protection authority, such as the Office of the Australian Information Commissioner, the UK Information Commissioner's Office, or your supervisory authority in the EU.

11. Children

Our services are directed at working professionals and organisations. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Links to other websites

This website links to third-party sites, including social media profiles. We are not responsible for their content or privacy practices, and we encourage you to read their policies.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be made clear on this page.

14. Contact

Questions, requests or complaints about privacy can be sent to innersprintteam@gmail.com.