Work with me

Privacy

Last updated: 29 September 2026

This notice explains how I look after personal information on the Mumtaz Wellbeing website. It is written in plain English for the UK General Data Protection Regulation, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Who I am

I am Mumtaz Haque, trading as Mumtaz Wellbeing. I am the controller of personal information collected through this website, which means I decide why it is used and how.

You can contact me via WhatsApp or the mailing list reply address.

What this site collects

The mailing list. On the home page, the Daily Reset page, the book page and the app page there is a sign-up form provided by EmailOctopus. If you join, it asks for your email address and your first name. On the home page you can also tick interests: the book Reclaimed Wisdom, the Mumtaz Wellbeing App, or the free Daily Reset. On the book page the interest is set to the book. On the app page the interest is set to the app. On the Daily Reset page the interest is set to the free Daily Reset. Your email address is required. Your first name is optional. On the home page, interests are optional. You only join if you choose to.

Enquiries. This website has no enquiry form, and it does not collect or store your message. You can message me on WhatsApp. That opens WhatsApp, which has its own privacy notice. I do not receive the message through this website.

This website does not collect health data. Nothing on the site asks you about your health.

Technical details. The host may briefly log an IP address and basic details of a request, so the pages can be delivered and the site kept secure. I do not use that log to build a profile of you.

Fonts, players and the yoga session. Every page loads typefaces from Google Fonts, and Google may receive your IP address when a font file is requested. The Spotify player and the YouTube preview image load only if you accept optional cookies. Pressing play on the yoga session loads it from youtube-nocookie.com, even if you have rejected other cookies.

If you follow a link to Instagram, YouTube, Spotify, Google, WhatsApp or another site, that site has its own privacy notice. I do not control it.

Why I use it

Mailing list. I email people who have asked to hear about my book, the app and the free Daily Reset. The lawful basis is your consent, under the UK GDPR and under PECR. You can withdraw that consent at any time.

Enquiries. If you message me on WhatsApp, I read what you have sent and reply there. The lawful basis is my legitimate interest in answering people who have chosen to get in touch. You can object to that, as set out under Your rights. WhatsApp processes that conversation under its own notice.

Running the site. Hosting logs, fonts and the players are there so the website works. The lawful basis is my legitimate interest in providing the site. The YouTube player loads only if you press play.

I do not sell your information, and I do not use it to build advertising profiles.

Cookies

This website does not set its own advertising or analytics cookies. There is no analytics tool in the site's own code.

Some optional tools do use cookies. A notice at the bottom of each page asks you to accept or reject them before the Spotify player and the YouTube preview load. Your choice is saved in this browser's local storage, on this device, so the notice does not have to ask again. That storage is not a tracking cookie. You can change your choice here:

The sign-up form uses Google reCAPTCHA (via EmailOctopus) to prevent spam. That check is needed to provide the sign-up, so the form loads with the page on the home page, the Daily Reset page, the book page and the app page. Google reCAPTCHA may set a cookie and may receive technical information, including your IP address. EmailOctopus may set a cookie that the form needs in order to work.

If you accept, the Listen and watch page can load the Spotify player, which may set cookies, and the YouTube preview image.

If you reject, the Spotify player and the YouTube preview image do not load. The sign-up form still loads. You can still message me on WhatsApp, and you can still open Spotify, YouTube or Instagram by following a link. A link leaves this site.

The YouTube yoga session does not play by itself. Pressing play loads it from youtube-nocookie.com, YouTube's privacy-enhanced mode. Pressing play loads only that yoga session. It does not accept the other optional cookies.

You can also block or delete cookies in your browser. If you do, the Spotify player or the YouTube preview may not work as you expect. The sign-up form still loads. Google reCAPTCHA on that form may need its own cookie to check for spam.

Who helps me

A few companies process information so the site can run. They do so to provide their service, or because you use their form or player.

  • EmailOctopus stores what you type into the mailing-list form and sends the emails.
  • Vercel hosts the website.
  • Google provides the fonts, reCAPTCHA on the mailing-list form, and YouTube if you press play.
  • Spotify provides the podcast player on the Listen and watch page.
  • WhatsApp carries a message if you choose to send one. That message is not stored on this website.

Some of these companies, or their suppliers, are outside the UK, including in the United States. Spotify is based in the EEA. Where personal information goes outside the UK, the transfer relies on a safeguard UK law recognises. That is an adequacy decision, where the UK has decided a country's protection is enough (this covers the EEA), or a contract in the form of the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK addendum where that is needed.

How long I keep it

I keep mailing-list details until you unsubscribe. Every email from the list has an unsubscribe link.

This website does not store enquiry messages. A WhatsApp conversation stays in WhatsApp. I keep it only as long as I need it to reply and to follow up, then I delete it there.

Your rights

You can ask me to:

  • give you a copy of the personal information I hold about you (access)
  • correct it if it is wrong (rectification)
  • delete it (erasure)
  • limit how I use it (restriction)
  • stop using it where I rely on legitimate interests (objection)
  • provide it in a portable form, where it came from you and I use it with your consent (portability)

You can withdraw consent at any time. That does not affect anything done with your consent before you withdrew it. You can also unsubscribe with the link in any mailing-list email.

To use any of these rights, contact me via WhatsApp or the mailing list reply address.

You have the right to complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk. I would welcome the chance to put things right first.

Children

This website is not directed at children under 16. I do not knowingly collect information from anyone under 16. If you believe a child has joined the mailing list, message me on WhatsApp and I will delete those details.

Security

I take reasonable care to protect the information I hold. A reply to a mailing-list email is not a fully secure way to send personal details, so please don't include anything you would not want to travel that way. A WhatsApp message is handled by WhatsApp, not by this website.

Changes to this policy

I will update this page if the way I use information changes. The date below is when it was last updated.

Last updated: 29 September 2026