1. Who I Am

Krisha provides spiritual guidance, energy healing, and digital self-development services. For the purposes of data protection law, Krisha acts as the data controller of your personal data.

2. Information I Collect

When you book a session, join Kundalini School, or interact with this website, I may collect:

• Name
• Email address
• Payment information (processed securely via third-party providers)
• Account/login details (for platform access, if applicable)
• Any personal information you voluntarily share during sessions, forms, or communication

I do not intentionally collect sensitive personal data unless it is voluntarily shared by you.

3. How Your Information Is Used (Lawful Basis)

Your data is processed under the following lawful bases:

• Contractual necessity – to deliver sessions, memberships, and services you purchase
• Legitimate interests – to improve services and maintain communication
• Consent – where you opt into marketing or non-essential communication

Your information is used only to:

• Provide your session or access to Kundalini School
• Manage bookings, payments, and account access
• Communicate with you regarding services, updates, or support
• Improve the quality and delivery of services

I do not sell or rent your personal data.

4. Third-Party Processors

To operate this website and services, I use trusted third-party providers, including:

• Stripe (payment processing)
• Website hosting providers
• Email and communication platforms

These providers process your data only as necessary to deliver their services and are expected to handle data securely and in compliance with applicable laws.

5. International Data Transfers

Some third-party providers may store or process data outside the United Kingdom. Where this occurs, reasonable steps are taken to ensure your data is protected through appropriate safeguards (such as standard contractual clauses or equivalent protections).

I may work with trusted technical service providers (including website developers and support teams) who may have limited access to personal data solely for the purpose of maintaining, developing, or supporting the website and services.

All such providers are required to handle your data securely and in accordance with applicable data protection laws. This may include service providers located outside the United Kingdom (including India), where appropriate safeguards are in place to protect your data.

6. Payment Security

All payments are processed through secure third-party platforms.

• I do not store or have access to your full payment details
• Payment providers manage and secure your financial data
• By making a payment, you agree to the terms and privacy policies of the relevant payment provider

7. Confidentiality

• Personal sharing within 1:1 sessions is treated as strictly confidential
• Group spaces (such as Kundalini School) are held with respect for privacy, but confidentiality cannot be fully guaranteed due to the nature of shared participation
• Confidentiality may be limited where disclosure is required by law

8. Data Retention

Your data is stored only for as long as necessary to:

• Deliver services
• Maintain records for legal, tax, or business obligations
• Resolve disputes or enforce agreements

When no longer required, your data is securely deleted or anonymised.

9. Your Rights

Under UK GDPR, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to certain processing
• Withdraw consent at any time (where applicable)

Requests can be made via the contact details on the website.

10. Cookies & Tracking

This website uses cookies to improve your experience and functionality. Cookies may include:

• Essential cookies (required for website operation)
• Analytics cookies (to understand website usage)
• Functional cookies (for login or preferences)

Where required, you will be given the option to accept or reject non-essential cookies via a cookie banner.

11. Data Security

Appropriate technical and organisational measures are in place to protect your data from:

• Unauthorised access
• Loss or misuse
• Disclosure or alteration

However, no online system can be guaranteed to be 100% secure.