Privacy Policy

This website, toomassarev.com, is operated by Kardiostar Ltd ("we", "us", "our"), a company registered in England and Wales under company number 06999312, trading as the professional practice of Dr Toomas Särev.

For the purposes of UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, Kardiostar Ltd is the data controller for the personal information described in this Privacy Policy.

Kardiostar Ltd is registered with the Information Commissioner's Office (ICO) under registration number ZA140701. You can contact us about privacy by email at doctor@kardiostar.com

This Privacy Policy explains how we collect, use, store and protect personal information when you visit this website, contact us through it, subscribe to our writing, enquire about our services, or engage with our professional content. It also explains your rights under UK data protection law.

We may collect and use the following types of personal information.

Information you give us

When you complete an enquiry form, contact us by email, book a conversation, or otherwise communicate with us, we may collect your name, email address, role, organisation, contact details, and any information you choose to share about your enquiry, professional interests, leadership context, coaching needs, or organisational situation.

If you email us, we will hold the contents of that correspondence, including your email address and any information included in the message.

Newsletter and writing subscriptions

If you subscribe to our writing or newsletter, your subscription may be handled by a third-party provider such as Substack. That provider may collect and process your email address and related subscription information under its own privacy terms.

Technical and website information

Like most websites, this site may collect limited technical information automatically, such as your device type, browser type, approximate location, pages visited, referral source, and usage information. This is collected in aggregate through our cookieless analytics service and through website hosting and security services. Further information is provided in the "Cookies and third parties" section below.

We only use your personal information where we have a lawful basis to do so.

Responding to enquiries

We use your information to respond to your enquiry, communicate with you, and discuss whether and how we might work together. Lawful basis: our legitimate interest in responding to people who contact us, and taking steps to enter into a contract at your request.

Providing professional services

If we go on to work together, we may use your information to provide coaching, consulting, speaking, facilitation, teaching, assessment, or related professional services. Lawful basis: performance of a contract, or taking steps before entering into a contract.

Newsletter and writing

If you subscribe to our writing, we use your email address to send you the content you requested. Lawful basis: consent. You can withdraw your consent at any time by unsubscribing.

Website operation and security

We use limited technical information to operate, secure, maintain and improve this website. Lawful basis: our legitimate interest in running a safe, functional and effective website.

Legal, regulatory and record-keeping purposes

We may retain and use relevant information where necessary for business administration, accounting, legal obligations, dispute resolution, professional records, or the protection of our rights. Lawful basis: legal obligation, legitimate interests, or performance of a contract, depending on the context.

This website is built and hosted on the Butternut platform and uses only the cookies necessary for the site to work, such as those needed for security, page delivery and form submission. We do not use advertising or marketing cookies, and we do not track you across other websites.

Depending on the services active on the website, third-party providers may include: Butternut, for website hosting and platform services; Plausible, for privacy-friendly website statistics; Google, for services such as maps or fonts; Substack, for newsletter or writing subscriptions; ScoreApp, for assessments or questionnaires; LinkedIn, where the site links to or embeds LinkedIn content. This list should be read as a summary of likely providers and may be updated as the website develops.

For visitor statistics we use Plausible Analytics, a privacy-focused service that sets no cookies, collects no personal information, and does not follow individuals across websites or over time. It records aggregate information only, such as page views, referring sites, country and device type. Because no cookies are set and no personal data is collected, no consent is required and no cookie banner is shown.

Third-party providers process personal information in accordance with their own privacy policies and contractual arrangements. We encourage you to review their privacy information when you use those services or leave this website.

Some of our service providers may process personal information outside the United Kingdom, including in the United States or the European Economic Area. Where personal information is transferred internationally, we rely on appropriate safeguards where required by law, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or equivalent lawful transfer mechanisms.

We keep personal information only for as long as necessary for the purposes for which it was collected.

Enquiry and correspondence data is kept for as long as needed to respond to you and, where relevant, for the duration of any working relationship and a reasonable period afterwards for legitimate business, legal, accounting and record-keeping purposes.

Newsletter subscription data is kept until you unsubscribe or the relevant newsletter service is discontinued.

Information required for legal, tax, accounting, contractual or professional record-keeping purposes may be retained for longer where necessary.

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. No transmission of information over the internet can be guaranteed to be completely secure. However, we work with reputable providers and take reasonable steps to protect the information we hold.

We do not sell your personal information. We may share limited personal information with trusted service providers who help us operate the website, manage email, deliver newsletters, provide assessments, host content, manage bookings, maintain records, or deliver professional services.

We may also share information where required by law, regulation, court order, professional obligation, or where necessary to protect our legal rights.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

Under UK data protection law, you have rights in relation to your personal information. These may include the right to:

• access the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase your information in certain circumstances;
• ask us to restrict how we use your information;
• object to our use of your information in certain circumstances;
• request portability of information you have provided to us;
• withdraw consent where we rely on consent.

To exercise any of these rights, please email doctor@kardiostar.com.

You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concern first, where appropriate.

This website may include links to external websites, platforms or resources. We are not responsible for the privacy practices, security or content of those external sites. When you leave this website, you should read the privacy policy of the website or service you visit.

We may update this Privacy Policy from time to time to reflect changes in our website, services, providers, legal obligations or professional arrangements. The current version will always be available on this page, with the "Last updated" date shown above.