Find a practitioner Log in to the course portal ↗
Upcoming dates

Privacy policy

How this website handles your personal data. Last updated: 22 October 2026.

I follow the Swiss Federal Act on Data Protection (nFADP) and, for people in the European Union, the General Data Protection Regulation (GDPR).

Who is responsible

Jonathan Shubs Educational Services, Avenue Louis-Ruchonnet 2, 1003 Lausanne, Switzerland. Responsible person: Jonathan Shubs. Email: contact@uat.training, phone +41 21 312 82 19. For any question about your data, write to me at this address.

What data I collect and why

  • Contact form (Contact and Mentoring pages): your name, email address, phone number if you give it, the subject you choose and your message, so that I can reply to you. The form is provided by Zoho Forms; your message is stored there and sent to me by email. If you tick the box "Send me new course dates and articles by email", your name and email address are also added to the newsletter list (see below), without a confirmation email.
  • Early-enrolment form for Tracing Your Deep Song: your name, email address and phone number if you give it, so that I can tell you when a cohort opens. This form also runs on Zoho Forms and opens on Zoho's own page.
  • Course participants (course portal): when you register for Tracing Your Deep Song or for a UAT certificate, or when I give you access to course material, you have an account in my course portal (portal.uat.training), provided by Zoho TrainerCentral. It holds your name, email address and password, your progress in the course material and your quiz results. For Tracing Your Deep Song it also holds the details you give when you register; for a UAT certificate, the month, year and city of each course you attended, your consent choices and the case studies you send in. I use them to give you access to the course and its material, to check certificate applications and issue certificates, and to stay in contact about it. Your password is stored by Zoho; I cannot see it. The data is held by Zoho in its EU data centre.
  • Details from course organisers: when you attend a course run by an organiser, the organiser may pass me your name and email address, so that I can give you access to course material and stay in contact with you about the course. You can ask me at any time to stop or to delete them.
  • Practitioner directory: practitioners are listed in "Find a UAT practitioner" only with their consent, and only with the details they chose to show. Practitioners sign up through a form run by Zoho Forms. It collects the details they choose to give: name, city, country, email, phone, website, languages, a short description and an optional photo. These are kept on this website and in my contact database (Zoho CRM), so that I can manage their listing and contact them about it. They can ask to be removed at any time by emailing contact@uat.training.
  • Newsletter: to receive new course dates and articles by email, you give your first name, last name and email address on the Newsletter page. You then receive an email to confirm your address; you are added to the list only after you confirm. Your details are stored in Zoho CRM, and the newsletter is sent with Zoho Campaigns. Newsletters may record whether an email is opened and which links are clicked, to see what interests readers. Every newsletter has a link to unsubscribe, and you can also ask me at any time to remove you.
  • Mentoring bookings: you book a mentoring session in the booking calendar on the Mentoring page. It is provided by Zoho Bookings and opens within this website only after you click a booking button. You give your name, email address, phone number and what you would like to work on, so that I can prepare and confirm the session. After a booking I send you an invoice through Zoho Books (EU data centre); you can pay it by bank transfer or by card through Stripe. Card details are entered with Stripe and handled by Stripe; I never see or store them. I receive only what I need for my records: your name, the amount, the date and whether the payment went through.
  • Online sessions: online mentoring sessions take place by video call on Zoom. You receive the link by email after booking. When you join, Zoom processes data such as your name, IP address and device details under its own privacy policy.
  • Email: messages you send to contact@uat.training are handled by my email provider, Zoho Mail.
  • WhatsApp: if you choose to contact me by WhatsApp, your number and messages are handled by WhatsApp under its own privacy policy.
  • Signal: if you choose to contact me by Signal, your messages are end-to-end encrypted and handled by Signal under its own privacy policy.
  • Website visits: the hosting provider automatically records technical data (such as your IP address and browser type) for a short time, to keep the site secure and running.

This website does not handle course registrations or payments. When you register for a course, you do so on the organiser's own website, under the organiser's own privacy policy.

Cookies

This website sets no cookies of its own, and there is no advertising on it.

  • The contact form and the newsletter sign-up form use two technical cookies set by Zoho, needed for the form to work and to protect it. The sign-up form loads when you open the Newsletter page. If you type your email address in the sign-up line at the bottom of the pages, it is passed to that form so that you do not have to type it again; nothing is loaded from Zoho before you open the Newsletter page. The cookies are: one for the duration of your visit, and one security token. They are not used for tracking or advertising.
  • The booking calendar on the Mentoring page is provided by Zoho Bookings. Nothing is loaded from Zoho until you click a booking button. Only then does the calendar open and Zoho set three technical cookies, needed for booking: for load balancing, for the security of the form, and for your session. They are not used for tracking or advertising.
  • To protect the forms against spam, including the sign-up form for the practitioner directory, Cloudflare Turnstile checks that a form is filled in by a person, not an automated program. Cloudflare processes technical data for this, such as your IP address and browser details.
  • Videos on this site are shown in YouTube's privacy-enhanced mode. Nothing is loaded from YouTube until you click a video; if you do, YouTube (Google) processes data under its own privacy policy.
  • The course portal (portal.uat.training) is provided by Zoho TrainerCentral and is a separate site: nothing from it loads on this website. When you open it or log in, Zoho sets technical cookies needed for logging in and for security: for load balancing, security tokens that protect the login and forms, your login session, and one Zoho setting kept for 7 days. They are not used for tracking or advertising.

Visitor statistics

To understand how the website is used and improve it, I use Matomo, a statistics tool installed on my own web hosting at Infomaniak in Switzerland. No data is sent to Google or any other third party.

Matomo records the pages you visit, the time of your visit, the website you came from, your browser and device type, and your approximate location (country). Your IP address is shortened (the last two parts are removed) before it is stored, and only this shortened address is used to estimate your location.

No cookies are used for statistics, so your consent is not needed for it.

Legal basis (for visitors from the EU)

Replying to your request, arranging your mentoring session or your participation in a course (steps before or as part of a contract), my legitimate interest in giving course participants access to course material and staying in contact with them (details passed on by organisers), my legitimate interest in running a secure website, my legitimate interest in understanding how the website is used, in order to improve it (visitor statistics without cookies), your consent for the newsletter (which you can withdraw at any time by unsubscribing), your consent for a listing in the practitioner directory (which you can withdraw at any time by emailing contact@uat.training), and your consent when you choose to play a video.

Who processes your data

  • Infomaniak Network SA (website hosting and statistics, Switzerland)
  • Zoho Corporation B.V. (contact, newsletter, enrolment and practitioner directory sign-up forms (Zoho Forms), contact database and newsletter list (Zoho CRM), newsletters (Zoho Campaigns), mentoring bookings, invoices (Zoho Books), email, course portal (Zoho TrainerCentral); EU data centre)
  • Stripe Payments Europe, Ltd. (card payments; Ireland)
  • Zoom Communications, Inc. (online mentoring sessions; USA, certified under the Swiss–US and EU–US Data Privacy Framework)
  • Cloudflare, Inc. (spam protection of the forms, including the practitioner directory sign-up form; USA, certified under the Swiss–US and EU–US Data Privacy Framework)
  • Google Ireland Ltd / Google LLC (YouTube videos, only if you play one; EU/USA)

Your data is not sold, and is not used for advertising.

How long it is kept

Contact messages and form entries are deleted when they are no longer needed to answer you or to tell you about a course. Booking details are kept as long as needed to arrange and hold the session, and as required for my accounting records. Participant accounts are kept as long as you have access to the course material, and deleted on request. Invoices and payment records are kept as long as Swiss law requires for accounting (ten years). Newsletter details are kept until you unsubscribe or ask me to remove them. Practitioner directory entries are kept until the practitioner asks to be removed. Contacts in my contact database (Zoho CRM) are kept until the person asks to be removed. Technical website data is deleted after a short period. Detailed visit statistics are deleted after 25 months; only summary reports are kept. Case studies you send in for a UAT certificate are kept until you ask me to remove them. If you agreed that an anonymised version of your case may be shared, that version stays in the course libraries for other participants.

Your rights

You can ask to see, correct or delete your data, or object to its use, within the limits of the law. To do so, write to me at contact@uat.training; I will reply within 30 days. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU, to your national data protection authority.