Priya Pinto (Awakened Heart) (“we”, “us”, or “our”) is committed to protecting the privacy of visitors to our workshop website (ws.priyapinto.com/workshop). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with Indian laws (including the Information Technology Act, 2000 and the SPDI Rules, 2011)lawblend.comlawblend.com. By using our site or providing information through it (for example, to register for a workshop or make a payment), you agree to the collection and use of your information as described in this policy.

Information We Collect

We collect several types of information from workshop participants and site visitors:

• Personal Information: When you register or pay for a workshop, we collect your name and email address. Your name and contact information are considered “personal information” under Indian lawlawblend.com.
• Financial Information: We also collect payment information (such as credit/debit card details or other payment credentials) to process your transaction. Under Indian rules, financial and payment data are classified as “sensitive personal data”lawblend.comlawblend.com. We obtain your explicit consent to collect this information at the time of payment.
• Technical and Usage Data: We automatically collect certain technical data from your browser or device when you visit our site. This may include your IP address, browser type and version, device information, operating system, and the pages you visit on our site. We use cookies and similar tracking technologies (like web beacons or pixels) to gather this information. For example, we use Google Analytics to record website usage patterns and the Facebook (Meta) Pixel to monitor page views and user actions for advertising purposescaptaincompliance.com. This data helps us understand site traffic and improve our services.

All information is collected in accordance with applicable laws. Financial data and any other sensitive data are treated with higher security measureslawblend.comlawblend.com. We do not require or collect user login credentials since our site does not support user accounts or registrations.

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To process your workshop registration and payments, and to communicate with you about the workshop. For instance, we use your email address to send you booking confirmations and updates about the workshop. Payment information is used solely to complete the transaction you requestedlawblend.com.
• Customer Service: To respond to your inquiries, questions, or complaints and to provide support.
• Communications: To send administrative messages (such as confirmations, invoices, and changes to terms or policies) and to send marketing communications only if you have opted in. You can unsubscribe from promotional emails at any time.
• Site Improvement and Analytics: To analyze how our website is accessed and used, to diagnose and fix problems, and to enhance our content and features. We use tools like Google Analytics to understand site traffic and user behavior, and we use the Facebook Pixel to measure the effectiveness of our adscaptaincompliance.com.
• Advertising: To display targeted advertisements. For example, the Facebook Pixel allows us to show you relevant ads on Facebook/Instagram based on your activity on our sitecaptaincompliance.comcaptaincompliance.com. We will only do this with your consent.
• Compliance and Legal Obligations: To comply with legal requirements and protect our rights. We may use your information to detect and prevent fraud, enforce our terms of use, or defend against legal claims. Under the Digital Personal Data Protection Act, 2023 (India’s new data protection law), we will notify affected individuals and authorities of any data breach involving personal data as required by lawlawblend.comlawblend.com.

We use your data only for the purposes stated when we collected it, in line with Indian law’s purpose limitation principleslawblend.com. We will not process your personal information in a way that is incompatible with these purposes without your informed consent.

Sharing and Disclosure

We do not sell your personal information to third parties. We share your information only as necessary to operate our services, as described below:

• Payment Processor: We share your payment information with Razorpay (our payment gateway provider) to complete your financial transactions. Razorpay is a PCI DSS–compliant payment processor that operates under Reserve Bank of India (RBI) guidelines, which require payment data to be stored securely within Indialawblend.com. They use your data only to process your payment and in accordance with their privacy policy.
• Service Providers: We share information with third-party service providers who help us run our business, such as web hosting, email delivery (e.g., Mailchimp or similar), customer support, and data analytics. These providers have access to the information needed to perform their functions but are contractually prohibited from using it for other purposes. For example, we share non-identifiable analytics data with Google Analytics and Facebook to improve our site and ad campaignslawblend.com.
• Advertising Partners: We use the Facebook (Meta) Pixel on our site. The Pixel may send certain data (such as anonymized event data, user actions on our site, and possibly hashed identifiers if you provided them on forms) to Facebook. Facebook uses this data to help us deliver more relevant ads to you on their platformscaptaincompliance.comcaptaincompliance.com. We do not provide Facebook with your name or email directly (unless you supply it through a form and we allow optional Pixel data), and Facebook cannot identify you personally through the Pixel alone. You can opt out of Facebook ad tracking in your Facebook settings.
• Legal Compliance: We may disclose your information if required to do so by law, in response to a valid subpoena or court order, or if we believe such action is necessary to comply with legal obligations or to protect our rights, property, or safety.

Whenever we disclose data to third parties, we make efforts to ensure they handle it with the same level of protection. For example, Razorpay and other processors maintain robust security standards. We do not share any personal data beyond what is necessary, and we never sell your personal information to advertisers or other companieslawblend.com.

Use of Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and to collect information about how the site is used:

• Necessary Cookies: These cookies are essential for the website to function properly (for example, to keep you logged in or remember your preferences). They cannot be disabled without impacting site performance.
• Analytics Cookies: We use cookies (e.g., Google Analytics cookies) to gather statistics about site usage. This helps us understand how visitors use the site and how we can improve it. The data collected is aggregated and does not directly identify you.
• Advertising Cookies: We use the Facebook Pixel (and possibly similar tools) to show you relevant ads. These tracking technologies collect information about pages viewed and actions taken on our site to build marketing audiences. These technologies may link your activity to your Facebook/Instagram profile when you are logged into those platformscaptaincompliance.comcaptaincompliance.com.

We provide a cookie consent banner when you first visit the site, allowing you to accept or decline non-essential cookiescyberpeace.org. You may also control cookies through your browser settings: you can delete or block cookies, though this may affect your ability to use certain features of our site. Please note that refusing analytics or advertising cookies may limit our ability to personalize content and measure ads. We categorize our cookies (necessary, analytics, advertising) and explain their purposes in our Cookie Policy section.

In all cases, collection via cookies and similar trackers is done only with your consent, in accordance with India’s data protection principlescyberpeace.org. We do not use tracking technologies to collect special categories of personal data or to surveil individuals without consent.

Data Security

We take the security of your personal information seriously and follow industry-standard practices to protect itlawblend.com. For example:

• Encryption: We use secure socket layer (SSL/TLS) encryption for data transmitted between your browser and our servers. This protects your data (such as form entries and payment information) while it is in transit.
• Secure Storage: Personal data we collect is stored on secure servers with strict access controls. We implement measures such as firewalls, intrusion detection, and anti-malware protections. Where possible, data (including sensitive data) is encrypted at rest. For instance, your personal data is stored in secured servers with encryption and regular security auditslawblend.com.
• Limited Access: Access to your personal information is limited to authorized personnel and service providers who need it to perform their jobs. All staff who handle your data are trained on security and privacy obligations.
• Compliance with Standards: We follow “reasonable security practices” as required under Section 43A of the IT Act, 2000lawblend.com. Razorpay, as our payment processor, is PCI DSS–compliant and follows RBI guidelines. We periodically review our security measures.
• Data Retention: We retain personal data only as long as necessary to fulfill the purposes outlined above or as required by law. For example, we may keep transaction records for at least three years to comply with tax and financial regulations. After that, data is anonymized or deleted.

Despite these measures, no system is entirely foolproof. However, we continually monitor our systems for vulnerabilities and will notify affected users and authorities of any data breach in the manner required by lawlawblend.com.

Your Rights and Choices

Under applicable law, you have the following rights regarding your personal information:

• Right to Access and Correct: You may request a copy of the personal data we hold about you, and you may ask us to correct any inaccurate or incomplete information.
• Right to Delete (Right to Erasure): You can request deletion of your personal data if we no longer need it for the purposes collected or if you withdraw consent (e.g., after a one-time purchase). In such cases, we will delete your data unless we need to retain it for legal or compliance reasons.
• Right to Withdraw Consent: For any processing based on consent (such as marketing or analytics cookies), you can withdraw your consent at any time. For example, you can change your cookie preferences or unsubscribe from marketing emails.
• Right to Object: You have the right to object to certain types of processing (such as direct marketing or profiling for ads) at any time.
• Grievance Redressal: If you have a complaint about how we handle your personal data, you may contact us (see below). Under India’s data protection framework, we must provide you a grievance mechanismlawblend.comlawblend.com.

To exercise any of these rights, please contact us as indicated in the “Contact Us” section below. We will respond to your request within a reasonable time (not exceeding 30 days) as mandated by the Digital Personal Data Protection Act, 2023lawblend.com. Please note that certain obligations, like responding to data access requests or correction, are also required under SPDI Rule 6lawblend.com. We will comply with such requests unless there is a legal reason to retain the information.

For marketing communications, you can opt out or unsubscribe at any time using the link provided in our emails. You can also disable cookies through your browser or the site’s cookie settings if you no longer wish us to track your activity for analytics or advertising.

Third-Party Services

We use certain third-party services that process your data on our behalf:

• Razorpay (Payment Gateway): We use Razorpay to handle all payment transactions securely. When you make a payment, Razorpay collects your payment credentials and transaction details. Razorpay’s privacy policy governs how they use and protect that information. They use this data to process the payment and prevent fraud, and they store payment data in accordance with RBI data localization requirementslawblend.com.
• Facebook/Meta (Advertising): We use the Meta Pixel (formerly Facebook Pixel) to deliver and measure ads on Facebook and Instagram. The Pixel captures information such as which pages you view and actions you take on our sitecaptaincompliance.com. This data is shared with Facebook, which uses it to create targeted ad campaigns. Facebook’s use of this information is governed by its privacy policy.
• Google Analytics: We use Google Analytics to track and report website traffic. Google Analytics collects information sent by your browser, including device and online behavior data. Google will store and use this information on our behalf under our account. Google’s privacy policy and terms of service explain their data practices.
• Email and Communication: We may use email service providers (e.g., Mailchimp, SendGrid) to send you emails. These providers have access to your email address and message content to deliver and analyze our communications.
• Others: We may use additional services (e.g., cloud hosting, customer support tools) that collect and store data on our behalf. Each such service is chosen to meet our security and privacy standards.

We require all third-party providers to maintain appropriate security measures and to use personal data only as necessary for their services. Their privacy practices (including data sharing, retention, and security) are governed by their own policies. We encourage you to review the privacy policies of these third parties. For instance, you can find more information on Razorpay’s privacy policy on Razorpay’s website and Meta’s privacy policy on Facebook’s site.

Children’s Privacy

Our services are intended for adults. We do not knowingly solicit or collect personal information from individuals under 18 (or the minimum age of digital consent under applicable law). If you are a minor, please do not submit any personal information to us without consent from a parent or guardian.

In compliance with Indian law, particularly the Digital Personal Data Protection Act, 2023, we do not engage in targeted behavioral advertising to childrencyberpeace.org. If we discover that we have inadvertently collected information from a child without proper consent, we will promptly delete that information. Parents and guardians are encouraged to monitor their children’s online activities and instruct them never to provide personal information to us without permission.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or relevant laws. When we make changes, we will update the “Last Updated” date at the top of this page. If we make significant changes (e.g., expanding how we use your data), we will provide notice by email (if you have provided one) or by a prominent notice on our website. We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your informationlawblend.com.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us. We have designated a Grievance Officer to handle privacy matters:

Grievance Officer: Priya Pinto
Email: heart@priyapinto.com