Legal

Privacy Policy

Last updated: January 2026 · Version 1.0

1. Who We Are

M/S Paramguru Hospitality Private Limited, operating as Sattva Shuddhi (“we,” “our,” “us”), operates the website at sattvashuddhi.com and manages private retreat experiences. This Privacy Policy explains how we collect, use, and protect your personal data.

2. Data We Collect

We may collect the following categories of personal data:

  • Identity data: First name, last name, email address, phone number, country of residence.
  • Booking data: Retreat preferences, accommodation requirements, dietary needs, payment information (processed via Stripe — we do not store card details).
  • Communication data: Inquiry messages, consultation notes, email correspondence.
  • Technical data: IP address, browser type, device information, cookies (see Cookie Policy).
  • Calendar data: If you connect a calendar, we access free/busy information and event creation only, with your explicit consent.

3. How We Use Your Data

We use your personal data to:

  • Respond to inquiries and provide information about our retreats
  • Process retreat bookings and payments
  • Deliver retreat services and communicate important information
  • Manage your client portal account and schedule
  • Send communications you have consented to receive
  • Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

  • Contract: Where processing is necessary to perform our services
  • Consent: For marketing communications and optional calendar integration
  • Legitimate interests: For security, fraud prevention, and improving our services
  • Legal obligation: Where required by applicable law

5. Data Sharing

We do not sell your personal data. We may share data with trusted third-party service providers who assist in delivering our services, including:

  • Payment processors (Stripe)
  • Email service providers (Resend)
  • Calendar integration services (Google, Microsoft) — only with your explicit consent
  • Cloud hosting providers

All third-party processors are bound by data processing agreements consistent with applicable data protection law.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Booking data is retained for seven years for financial compliance purposes. You may request deletion of your data subject to legal retention requirements.

7. Your Rights

Under applicable data protection law (including GDPR where applicable), you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at privacy@sattvashuddhi.com.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.

9. Contact

For privacy-related enquiries: privacy@sattvashuddhi.com