Gavel Speaks Inc. ("we," "us," or "our") operates the website at compliance.gavelspeaks.com (the "Site"). This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.
By using this Site, you agree to the practices described in this policy. If you do not agree, please do not use the Site.
1. Information We Collect
We collect personal information only when you voluntarily provide it to us. Specifically, when you submit the contact form on our Site, we collect:
- Name — so we can address you personally in our response
- Email address — so we can reply to your inquiry
- Message content — the details of your inquiry or question
When you schedule an appointment through our Calendly booking link, Calendly may collect additional information such as your name, email address, and any details you provide during scheduling. Please see Calendly's own privacy policy for details on how they handle that data.
We do not currently collect any financial information, Social Security numbers, or sensitive personal data through this Site.
2. How We Use Your Information
Information you provide through the contact form is used solely for the following purposes:
- To respond to your inquiry, question, or service request
- To provide information about our legal and compliance consulting services
- To schedule and confirm consultations or calls
- To follow up on prior conversations, if relevant
We do not sell, rent, or trade your personal information to third parties. We do not use your contact information for unsolicited marketing without your consent.
3. Third-Party Services
To operate this Site and respond to inquiries, we use the following third-party services. Each of these services has its own privacy policy governing how they handle data:
- Web3Forms — Our contact form is processed through Web3Forms (web3forms.com). When you submit the contact form, your name, email address, and message are transmitted to Web3Forms servers and then forwarded to our email inbox. Web3Forms does not retain your form submissions for marketing purposes. Please review the Web3Forms Privacy Policy for details.
- Calendly — We use Calendly (calendly.com) to allow visitors to book calls and consultations. When you use our booking link, Calendly collects the personal information needed to schedule your appointment. Please review the Calendly Privacy Policy for details on their data practices.
- Vercel — This Site is hosted on Vercel (vercel.com). Vercel may collect standard server log data such as IP addresses and browser information as part of hosting infrastructure. Please review the Vercel Privacy Policy for details.
We take reasonable steps to use only third-party services that maintain appropriate security and privacy practices. However, once data is transmitted to a third party, their own privacy policies govern how that data is handled.
4. Data Retention
We retain personal information you submit through our contact form for as long as is reasonably necessary to respond to your inquiry and maintain business records. In general:
- Contact form submissions are retained in our email inbox and may be kept for up to 3 years for business record purposes.
- Calendly appointment data is retained according to Calendly's own retention policies.
- If you request deletion of your information, we will make reasonable efforts to remove it from our systems within 30 days, subject to any legal or record-keeping obligations.
5. Legal Basis for Processing (GDPR & UK GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following lawful bases as defined by the EU General Data Protection Regulation (GDPR) and UK GDPR:
- Consent — When you voluntarily submit the contact form, you consent to us processing your name, email, and message to respond to your inquiry.
- Legitimate interests — We may process your information to respond to inquiries about our legal services, to maintain business records, and to improve our Site, where such processing does not override your fundamental rights and freedoms.
- Contract performance — If you engage us for legal services, we process your data as necessary to perform our obligations under that engagement.
You may withdraw your consent at any time by contacting us at ann@gavelspeaks.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
6. Your Rights
Depending on your location, you may have some or all of the following rights regarding your personal information. We respect these rights regardless of where you are based and will make reasonable efforts to honor all requests.
For All Users
- Access — Request a copy of the personal information we hold about you.
- Correction — Request that we correct inaccurate or incomplete information.
- Deletion — Request that we delete your personal information from our records.
- Restriction — Request that we restrict how we use your information in certain circumstances.
EU & UK Residents (GDPR / UK GDPR)
In addition to the rights above, if you are located in the EEA or UK, you have the right to:
- Data portability — Receive a copy of your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
- Object to processing — Object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds.
- Withdraw consent — Withdraw consent at any time where consent is the legal basis for processing.
- Lodge a complaint — File a complaint with your local data protection supervisory authority. For the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.
International data transfers: If you are based in the EEA or UK, your personal data may be transferred to our servers in the United States. We rely on Standard Contractual Clauses (SCCs) and appropriate safeguards to ensure your data is protected in compliance with GDPR and UK GDPR requirements. You may request a copy of these safeguards by contacting us.
California Residents (CCPA / CPRA)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:
- Know — Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Delete — Request deletion of your personal information, subject to certain exceptions.
- Opt out of sale/sharing — We do not sell or share your personal information for cross-context behavioral advertising.
- Non-discrimination — You will not be discriminated against for exercising your CCPA/CPRA rights.
- Correct — Request correction of inaccurate personal information.
- Limit use of sensitive information — We do not collect sensitive personal information as defined under CPRA.
India Residents (DPDP Act 2023)
Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), if you are a Data Principal based in India, you have the right to:
- Access — Obtain a summary of personal data being processed and the processing activities.
- Correction & erasure — Request correction of inaccurate or misleading personal data, and erasure of personal data that is no longer necessary for the purpose for which it was collected.
- Grievance redressal — Contact our designated grievance officer (details below) with any complaints regarding the processing of your personal data.
- Nominate — Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity, as permitted under the DPDP Act.
- Withdraw consent — Withdraw consent for processing at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Grievance Officer (India DPDP Act): For grievances related to the processing of your personal data under the DPDP Act, please contact:
Name: Ankita (Ann) Srivastava
Email: ann@gavelspeaks.com
We will acknowledge your grievance within 48 hours and resolve it within 30 days.
Exercising Your Rights
To exercise any of the rights listed above, regardless of your location, please contact us at ann@gavelspeaks.com. We will verify your identity and respond to your request within:
- GDPR / UK GDPR: 30 days (extendable by 60 days for complex requests)
- CCPA / CPRA: 45 days (extendable by an additional 45 days)
- DPDP Act: 30 days
- All other requests: 30 days
7. Cookies
This Site currently uses minimal cookies. We do not use cookies for tracking, advertising, or analytics purposes at this time.
Vercel, our hosting provider, may set technical cookies necessary for site functionality and security. Calendly's booking widget may also set cookies when you interact with it directly.
Note: We may add Google Analytics in the future to understand how visitors use this Site. If and when we do, this Privacy Policy will be updated to reflect that change, and any analytics will be configured to respect user privacy (e.g., with IP anonymization enabled). We will not deploy analytics tracking without first updating this policy.
8. Children's Privacy
This Site is not directed at, and does not knowingly collect personal information from, children. Our services are intended for business professionals, founders, and organizations seeking legal and compliance consulting.
- US (COPPA): We do not knowingly collect personal information from children under the age of 13.
- EU / UK (GDPR): We do not knowingly collect personal data from individuals under the age of 16 without parental consent.
- India (DPDP Act): We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental consent.
If we become aware that we have inadvertently received personal information from a child (as defined under the applicable law of their jurisdiction), we will delete it promptly. If you believe we may have collected information from a child, please contact us at ann@gavelspeaks.com.
9. International Data Transfers
Gavel Speaks Inc. is based in the United States. If you access this Site from outside the US — including from the EU, UK, India, or UAE — your personal information may be transferred to, stored, and processed in the United States.
We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable law:
- EU / UK: We rely on Standard Contractual Clauses (SCCs) approved by the European Commission and the UK ICO for transfers of personal data outside the EEA and UK.
- India: Under the DPDP Act, cross-border data transfers are permitted unless the Indian government restricts transfers to specific countries. As of the date of this policy, no such restrictions apply to transfers to the United States.
- UAE: We process data in compliance with applicable UAE data protection requirements, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page.
We encourage you to review this policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.
11. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
- Business: Gavel Speaks Inc.
- Owner: Ankita (Ann) Srivastava
- Email: ann@gavelspeaks.com
- Website: compliance.gavelspeaks.com
- Address: 3400 Cottage Way Ste G2 #9805, Sacramento, CA 95825, USA
This Privacy Policy was last updated in April 2026. It applies to personal information collected through compliance.gavelspeaks.com only, and does not govern information collected through other means (such as in-person consultations or direct email correspondence outside of this Site's contact form).