Privacy Policy

When you book a slot we collect your name, mobile number, email address, and a screenshot of your UPI payment proof. When you use the contact form we collect your name, email address, phone number, and the message you send. We do not collect passwords or card numbers. You pay directly through your own UPI app and we never see your payment credentials.

Your details are used only to manage your booking: confirming your slot, verifying payment, and contacting you about the session you booked. We never sell your information or use it for advertising. We do share it with the service providers who run this platform on our behalf, listed in section 3.

Booking details and payment screenshots are stored in a private database and storage bucket hosted on Supabase, accessible only to an authenticated administrator. This site is hosted on Vercel, which also provides Vercel Analytics and Speed Insights. These collect anonymous page performance and visit data. They do not use cookies and do not track you across other websites. Fonts are self-hosted at build time and are not requested from an external server when you visit. We use no advertising, marketing, or social media tracking of any kind.

We keep booking and payment records for six years from the end of the relevant financial year, as required under Indian tax law. Payment screenshots are deleted twelve months after the session they relate to, since the transaction record itself is the accounting record. Messages sent through the contact form are deleted after twelve months. You can ask us to delete your data sooner and we will action it where we are not legally required to keep it.

You can ask us at any time what data we hold about you, request a correction, or request deletion, subject to any records we're legally required to retain (such as payment records).

You can withdraw your consent at any time through the contact form. Withdrawing is as easy as giving consent. Once you withdraw, we stop processing your data for that purpose and delete it, except where we are legally required to retain it. Withdrawal does not affect processing carried out before you withdrew.

Under the Digital Personal Data Protection Act 2023 you may nominate another person to exercise your rights on your behalf if you die or become unable to act. Tell us through the contact form and we will record your nomination.

Our database and file storage are hosted on Supabase in the Northeast Asia (Tokyo) region. Japan holds an adequacy decision from the European Commission and is recognised by the United Kingdom, so personal data from the EU and UK is transferred to a country with an equivalent standard of protection. Our website is hosted on Vercel, which serves pages from edge locations worldwide.

If a data breach affects your personal information, we will notify you and the relevant authority within 72 hours of becoming aware of it, telling you what happened, what data was involved, and what to do.

In addition to the rights above, you may request a copy of your data in a portable format, ask us to correct or restrict processing, object to processing, and lodge a complaint with your local data protection authority. We respond to all requests within 30 days.

For any question or complaint about how your data is handled, contact us through the contact form. We acknowledge every request and respond within 30 days. Our operations are based in India.

We may update this Privacy Policy from time to time. Continued use of this site after changes are posted constitutes acceptance of the updated policy.