Privacy Policy

1. Information We Collect

We collect the personal data you give us directly, and a limited amount collected automatically as you browse the site.

When you use our contact form, we collect your first name, last name, email address, phone number and the message you send us, so that we can reply to your enquiry. When you register your interest in a course, retreat or workshop, we collect the details needed to process that registration, such as your name, contact details and the programme you have chosen.

Like most websites, we also use cookies and similar technologies for analytics and advertising — including Google Analytics and Google Ads, Google Tag Manager, and the Meta (Facebook) Pixel — to understand how the site is used and to measure our advertising. These tools may set cookies and collect information such as your IP address and browsing behaviour on our site. Our WhatsApp button takes you to WhatsApp's own product, where your conversation with us is subject to WhatsApp's and Meta's privacy terms rather than this policy.

2. Disclosure of Personal Data

We disclose some personal data to service providers who work with us to provide our services or to assist us in marketing to prospective students and guests — for example, payment processors, email delivery services, and the analytics and advertising platforms named above. We will only share personal data with these companies to provide or improve our services and ads; it will not be shared with third parties for their own marketing purposes without your prior express consent.

Legal compliance and disclosure. It may be necessary, under the law, legal process, litigation and/or requests from public or governmental authorities inside or outside your country of residence, to disclose personal data. We may also disclose personal data where we determine it is necessary for national security, law enforcement or other matters of public importance, or where we decide in good faith that disclosure is necessary to protect our rights, enforce our terms and conditions, investigate fraud, or protect our operations or users.

3. Your Rights

We take reasonable steps to ensure that your personal data is accurate, complete and up to date. Depending on where you live, data protection law — such as the GDPR for residents of the EU/UK, or India's Digital Personal Data Protection Act, 2023 — may give you the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to further processing, to receive it in a portable format, and to complain to your local data protection authority about how it is processed.

To protect the privacy and security of your personal data, we may need to confirm your identity before acting on a request. There are instances where applicable law allows or requires us to decline to provide or delete some or all of the data we hold. You can contact us at any time to exercise these rights, and we will do our best to respond within 30 days.

4. Requesting Deletion of Your Data

You can contact us at any time to ask us to delete the personal data we hold about you. Once you do, we are not obligated to keep it, and may delete any or all of it without liability. However, we may retain some data if we believe it is necessary to prevent fraud or misuse, if required by law, or for legitimate purposes such as account recovery, auditing our records, or enforcing our rights and obligations under our agreements with you.

5. Third-Party Websites and Services

Our website may contain links to third-party websites, products and services — including our payment processor and the WhatsApp button used for enquiries. We are not responsible for the privacy practices of those third parties, nor for the information or content contained in their own products and services. This privacy statement applies only to data we collect through our own website. We recommend reading the privacy policy of any third party before using their websites, products or services.

6. Data Security, Integrity and Retention

We use reasonable technical, administrative and physical security measures designed to protect your data from unauthorized access and to help ensure it is used properly. Access to your personal data is limited to the employees, contractors and agents who need it to perform their assigned tasks.

Please take your own precautions to protect your account and device credentials from unauthorized access. If you believe the security of your personal data may be compromised, contact us immediately at rishikeshyogkendra1@gmail.com. No security system is impenetrable; in the event of a breach, we will notify you and the relevant authorities as required by law. We retain your personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law.