Privacy Policy

Who is responsible for your information

Mission Mindfulness is the organisation responsible for the personal data described in this policy. Privacy requests can be sent to [CONFIRM: privacy contact email and postal business address]. This contact must be completed before public launch.

Information collected through this website

• Enquiry details: name, phone number, email address, selected interest or role, message, and the form source.
• Account details: when sign-in is enabled, Google/Supabase authentication may provide an account identifier, email address, and basic profile data needed to operate the account.
• Technical and consent data: essential session/authentication cookies, your cookie preference, and limited device/browser data processed by optional analytics only if you accept analytics cookies.

Why we use it

• To respond to a course, Brain Retreat, school, or teacher-practitioner enquiry.
• To create and protect a learner or administrator account when sign-in is used.
• To provide requested access, such as a learner dashboard or a confirmed live-session link after a valid enrolment.
• To prevent spam, misuse, and unauthorised access.
• To understand aggregate site use only when optional analytics has been accepted.

Legal bases and consent

For India, Mission Mindfulness aims to obtain clear, specific, informed, and affirmative consent where consent is the basis for processing personal data. Consent can be withdrawn through the privacy contact above; withdrawal does not affect processing already carried out lawfully.

For visitors in the European Economic Area or United Kingdom, processing is intended to rely on consent where required, performance of a requested service or pre-contract enquiry where applicable, and legitimate interests for essential security and fraud prevention. This is a GDPR-aware draft and must be reviewed for the final operating model.

Children and parent/guardian information

The public learning programs are aimed at school-age students. A parent or lawful guardian should submit enquiries and manage enrolment for a child. Mission Mindfulness should not knowingly collect a child’s personal data without the appropriate parent/guardian involvement required by applicable law.

Service providers and disclosures

• Supabase: database and authentication infrastructure for enquiries, profiles, and account sessions.
• Google: Google account sign-in when a visitor chooses Google authentication.
• Google Analytics: only if the business configures it and the visitor accepts optional analytics cookies.
• Video, payment, email, messaging, or webinar providers: not enabled in this site’s current public payment flow. Before any are enabled, this policy must be updated with the provider, purpose, and relevant data sharing.

Retention and security

Enquiries, account records, and any future payment records will be retained only for as long as reasonably necessary for the stated purpose, legal obligations, dispute handling, and security. [CONFIRM: retention period for enquiries, account data, and payment records before launch].

The site uses access controls, HTTPS when deployed, database row-level security, and security headers. No system can guarantee absolute security; please do not send card details or other sensitive payment information through an enquiry form.

Your privacy choices and rights

• Ask for access to, correction of, or deletion of your personal data.
• Withdraw consent where processing relies on consent.
• Object to or restrict certain processing where applicable under GDPR.
• Request a copy/portability of data where applicable under GDPR.
• Complain to the relevant supervisory authority if you believe your rights have not been respected. In India, this may include the Data Protection Board of India when applicable.

International visitors and changes

This site is operated for an India-based education business. If information is processed outside your country through a service provider, the business should ensure appropriate safeguards before launch.

We may update this policy when the service or legal requirements change. The latest version and date will appear on this page. Material changes should be communicated through a reasonable channel where required.