Last updated: August 11, 2025

Bhakti Yoga Rishikesh (“BYR,” “we,” “us,” or “our”) operates a WhatsApp chatbot (the “Chatbot”) to share spiritual knowledge and practices of bhakti. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Chatbot and our related websites, forms, or services (collectively, the “Services”).

If you do not agree with the terms of this Privacy Policy, please do not use the Services.

1. Who we are (Data Controller)

Controller: Bhakti Yoga Rishikesh, Rishikesh, Uttarakhand, India.
Contact email: bhaktiyogarishikesh@gmail.com
EU/UK Representative: Prem, Bhakti Yoga Rishikesh, bhaktiyogarishikesh@gmail.com

2. Information we collect

We collect personal data as defined under the EU/UK General Data Protection Regulation (GDPR) and India’s Digital Personal Data Protection Act, 2023 (DPDPA). Categories include:

• Identity data: name, display name, contact details.
• Contact data: WhatsApp number, email address, country of origin.
• Communications: messages you send to the Chatbot.
• Technical data: metadata from WhatsApp, device info, timestamps.
• Preferences: topics of interest, language choice.

We do not collect special category/sensitive personal data unless voluntarily provided, and we advise users not to share such data.

3. Lawful bases for processing

We process your personal data under:

• Consent (Art. 6(1)(a) GDPR; Sec. 4 DPDPA) – e.g., devotional updates.
• Contract (Art. 6(1)(b) GDPR) – delivering requested content.
• Legitimate interests (Art. 6(1)(f) GDPR) – improving services, ensuring security.
• Legal obligation (Art. 6(1)(c) GDPR; Sec. 8 DPDPA) – where required by law.

4. Your rights under GDPR and Indian law

You have the right to:

• Access your personal data.
• Rectify inaccuracies.
• Request erasure (“right to be forgotten”).
• Restrict processing.
• Data portability (GDPR).
• Object to processing.
• Withdraw consent at any time.
• Nominate a person to exercise rights in the event of death or incapacity (DPDPA).

To exercise these rights, email bhaktiyogarishikesh@gmail.com with the subject “Data Rights Request.”

5. International transfers

If your data is transferred outside India or the EEA/UK, we ensure appropriate safeguards (e.g., EU Standard Contractual Clauses, contractual safeguards under DPDPA).

6. Data retention

Personal data is retained only as long as necessary for the purposes collected or as required by law, after which it is securely deleted or anonymized.

7. Data processors and sharing

We may share data with:

• WhatsApp/META for message delivery.
• Cloud hosting/messaging providers.
• Only with third parties under contracts meeting GDPR and DPDPA requirements.

We never sell your personal data.

8. Automated decision-making

We do not use your data for solely automated decision-making with legal or significant effects.

9. Security

We apply technical and organizational measures to protect personal data, including encryption in transit, access controls, and staff confidentiality agreements, in line with GDPR and DPDPA.

10. Complaints

If you are in the EU/UK, you can lodge a complaint with your local data protection authority. In India, you can contact the Data Protection Board of India under the DPDPA.

11. Changes

We will notify you of any material changes to this Privacy Policy via the Chatbot or our website.