Privacy Policy

Last updated 7 August 2026

This site is run by one person. This page describes exactly what it collects, why, who else sees it, and how to have it erased.

Who is responsible

Ivan (NISUDA), an independent practitioner based in Saitama, Japan. For anything on this page — including a request to delete your data — write to ivan@nisuda.com. I answer these myself.

What is collected, and when

Nothing is collected until you do something. There is no account, no login, and no advertising tracker on this site.

When you…	What is recorded
Request the free workbook	Your email address, the language you were sent, the date and time, your IP address, the country your request came from, and your browser's user-agent string.
Book a session	Handled by Cal.com, not by this site. Typically your name, email, timezone and anything you write in the booking form. Payment is taken by Stripe, which receives your card details directly.
Have a session	Brief written working notes under a first name. Sessions are never recorded. See Session records below — this is the sensitive part, and it has its own rules.
Just read the site	Aggregate, non-identifying traffic statistics via Cloudflare. No profile is built and no cross-site tracking takes place.

Why

Your email address — to send you the workbook, and occasionally to write to you about the work. Every email has an unsubscribe path; replying "stop" is enough.
Language and country — to send the correct edition and, where relevant, sensible session times.
IP address and user-agent — recorded with the signup as a basic abuse and spam-prevention measure.

If you are in the UK or EU, the legal basis is your consent, given when you submit the form. You may withdraw it at any time, and withdrawal does not affect anything already done. If you are in Japan, the purposes listed above are the notified purposes of use under the Act on the Protection of Personal Information, and your data is not used beyond them.

Session records

This is the most sensitive information involved, so it gets its own section and its own rules.

Sessions are never recorded. No audio, no video, no transcript, no screenshots, and no AI notetaker or transcription bot on the call. That rule binds you exactly as it binds me, and it is written out in the Terms.

What I do keep is brief written working notes, so that session four remembers session three. They hold a first name rather than your full legal identity, the pattern we are working on, where we got to, and the dates we met.

Those notes describe your psychological state. That makes them special category data under Article 9 of the UK and EU GDPR, and 要配慮個人情報 — special care-required personal information — under Japan's Act on the Protection of Personal Information. They are handled accordingly:

Only I have access. No assistant, no colleague, no supervisor, no transcription service.
They are never sold, shared, or disclosed to anyone — except in the narrow safety and legal situations set out in the Terms.
They are never put into any AI or machine-learning system, and never used to train one.
They are kept in an access-controlled place only I can reach, and never anywhere publicly accessible.
They are destroyed two years after our last session, or sooner if you ask.

The legal basis is your explicit consent, given when you start working with me. You can withdraw it at any time and I will destroy the notes. Withdrawing does not undo work already done, and it does not reach a financial record I am required by law to keep.

If I ever wanted to use something from your sessions in writing or teaching, I would ask you first, for that specific use — and a no costs you nothing.

Who else processes it

Cloudflare — hosting, storage of workbook signups, and aggregate analytics.
Resend — delivers the workbook email. Receives your email address.
Cal.com — runs session booking. Receives whatever you enter when booking.
Stripe — processes card payments. Receives your card details directly; they never reach me.

Nothing is sold, rented, or traded. Nothing is shared with anyone beyond the services above, except where the law requires it.

Where it goes

These providers operate internationally, so your data may be processed outside Japan, the UK, or the EEA — including in the United States. They are engaged under their standard data-processing terms.

How long it is kept

Session notes — destroyed two years after our last session, or sooner if you ask.
Workbook signups — kept while you are subscribed, and for two years after you unsubscribe, then deleted.
Booking and payment records — held by Cal.com under its own retention policy, and by me for as long as Japanese tax law requires me to keep a financial record.

Any of it goes sooner if you ask, except a financial record I am legally required to keep. One email is enough — see below.

Your rights

You can ask me to show you what I hold, correct it, delete it, or stop emailing you. One message to ivan@nisuda.com is enough — no form, no justification required. I aim to act within 30 days.

If you are in the UK or EEA and think I have handled your data badly, you may also complain to your national data-protection authority.

Cookies and similar technologies

This site sets no advertising or marketing cookies. Cloudflare may set a strictly necessary cookie for security and to compile aggregate statistics. Typefaces are served from this site itself, so no font provider ever sees you. The Cal.com booking widget loads from Cal.com when you open it, and may set its own cookies or receive your IP at that point. If you would rather it didn't, book by emailing me instead.

Children

This site and these services are intended for adults. I do not knowingly collect data from anyone under 18.

Changes

If this policy changes materially, the date at the top changes with it.

The short version. One person, one inbox. Your email is used to send you what you asked for. Sessions are never recorded, and session notes are destroyed after two years. Ask me to delete anything and it's gone.