Privacy Policy
Last updated: 29 June 2026
Who we are
This website is operated by Nikita Pandey, a meditation facilitator based in India. Nikita Pandey is the sole data controller responsible for the personal data collected through this website and its registration forms. For any privacy-related questions, please contact us at hello@nikitapandey.net.
What data we collect
Presence
When you register for Presence, we collect your full name, email, your selection from the available days, date and time slots, your eligibility based on gender and age confirmation, your health status confirmation, your camera consent, and your acceptance of the EU statutory right of withdrawal, these Terms of Service, and our Privacy Policy. Presence is open to women aged 24 to 30 only. Each time slot holds a limited number of participants.
Before proceeding to payment, we record your withdrawal consent. This confirms your agreement that sessions will begin within the 14-day statutory withdrawal period. After submitting your registration form, you will be directed to PayPal, a service provided by PayPal Payments Private Limited, to complete your payment. Your Presence registration will be confirmed only upon receipt of full payment. We do not store your payment details.
Upon registration, we generate a unique Presence ID for each participant, which is shared with you via your session details confirmation email. This ID is used to identify your registration for cancellation, withdrawal, and refund purposes.
Why we collect it
Your personal data is collected solely to manage your session registration, including sending you session access details, payment confirmation, cancellation and refund communications, and any updates relating to your sessions. We do not use your data for marketing purposes, profiling, or any purpose beyond direct session management. We do not sell, rent, or share your personal data with any third party for their own purposes.
Legal basis for processing
We process your personal data in compliance with the General Data Protection Regulation (GDPR), which applies to our users in the European Economic Area, and the Digital Personal Data Protection Act, 2023 (DPDPA), which applies under Indian law as we are based in India.
The legal basis for processing your registration data is the performance of a contract, specifically to fulfil your registration and deliver the sessions you have signed up for. We do not process your data beyond what is necessary for this purpose.
How long we keep your data
We retain your registration data for a maximum of 24 months following your last session. We retain transaction and payment confirmation records, including withdrawal and cancellation requests, for a minimum of 6 years as required under applicable Indian tax law. All data is permanently deleted once its applicable retention period expires. Where applicable law requires a longer retention period, we will retain data only for the minimum period required.
Your rights
If you are located in the European Economic Area, you have the following rights under the GDPR:
The right to access the personal data we hold about you.
The right to request correction of inaccurate data.
The right to request deletion of your data where there is no lawful reason for us to continue processing it.
Please note that where we are required to retain data under applicable law, such as Indian tax law, we may be unable to fulfil a deletion request for that data until the legally required retention period expires.
The right to object to processing where that processing is based on legitimate interests rather than the performance of a contract.
The right to restrict processing of your data where you contest its accuracy or object to its use.
The right to receive your personal data in a structured, commonly used and machine-readable format (right to data portability).
The right to withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
The right to lodge a complaint with your local data protection authority.
If you are located in India, you have rights under the Digital Personal Data Protection Act, 2023, including the right to access information about your data, the right to correction and erasure, and the right to grievance redressal.
To exercise any of these rights, please contact us at hello@nikitapandey.net. We will respond to your request within one month of receipt.
Data breaches
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected participants, we will notify affected participants without undue delay. Where required under GDPR, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach.
Automated decision-making
We do not use automated decision-making or profiling in connection with your personal data. All registration decisions are made manually by Nikita Pandey.
Sessions and recordings
Sessions are conducted live on Zoom. They are never recorded. Participants are strictly not permitted to record sessions by any means, in order to protect the privacy and safety of all participants present. Violation of this rule will result in immediate removal from Presence. For information on how Zoom processes data during sessions, please refer to the Third-party services — Zoom section below.
Cookies
This website does not use non-essential cookies. Hostinger's built-in analytics does not use cookies and does not collect personal data. Zoho Forms, used on this website, uses only strictly necessary functional cookies required for the forms to load and operate correctly. No consent is required for these cookies. These are governed by Zoho's Privacy Policy at zoho.com/privacy.
If in future we add analytics or marketing tools, this policy will be updated and your consent will be requested.
We use Plausible Analytics to track overall trends in website usage. Plausible Analytics collects only aggregated information, which does not allow us to identify any visitor to our website. No personal data is collected. For more information, see the Plausible Analytics Data Policy: https://plausible.io/data-policy
Third-party services
Third-party services — Hostinger Web Hosting
This website is hosted on Hostinger Web Hosting, a service provided by Hostinger International UAB, a company registered in Lithuania, European Union. When you visit this website, Hostinger automatically processes standard technical and log data as part of their standard hosting operation. This data may be processed on servers outside your country of residence. This data collection is governed by Hostinger's Privacy Policy, available at hostinger.com/privacy-policy.
Third-party services — Zoho Forms
This website uses Zoho Forms, a service provided by Zoho Corporation and its affiliates. A time slot preference form is embedded on this website to collect time slot preferences. This form collects only your time slot preference and does not require you to provide your name or email address. All registration, withdrawal, and cancellation forms are hosted on Zoho's own platform. When you submit any of these forms, you will be directed to Zoho's platform where Zoho's Privacy Policy also governs that interaction. Personal data submitted through registration, withdrawal, and cancellation forms, including name, email, time slot, consent records, and transaction details where applicable, is stored on Zoho's servers and may be processed on servers outside your country of residence. Zoho complies with GDPR as a data processor and has Standard Contractual Clauses in place for international data transfers. For more information, please refer to Zoho's Privacy Policy at zoho.com/privacy.
Third-party services — Zoom
Sessions are delivered via Zoom, a platform provided by Zoom Video Communications, Inc. The Zoom session link will be sent to your registered email address. When you attend a session, Zoom may collect certain data as part of their standard service operation, regardless of whether you have a Zoom account. For transfers of data relating to users in the European Economic Area, Zoom relies on Standard Contractual Clauses as the applicable transfer mechanism under GDPR. This data collection is governed solely by Zoom's Privacy Policy and Data Processing Addendum, both of which can be reviewed at zoom.us/privacy. We have no control over Zoom's data practices. Participants are encouraged to review Zoom's Privacy Policy before attending.
Third-party services — PayPal
Payments for Presence is processed through PayPal, a service provided by PayPal Payments Private Limited. After submitting your registration form, you will be directed to PayPal to complete your payment. We receive transaction confirmation details from PayPal solely for the purpose of verifying your payment and confirming your registration. We do not receive or store your payment card or banking details. Payment data may be processed on servers outside your country of residence. All payment processing is governed by PayPal's Privacy Policy, available at paypal.com/privacy.
Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee the absolute security of your data. Where your data is processed by third-party services, as described in the Third-party services section above, the security of that data is also subject to those providers' own security practices.
Grievance redressal
If you have any concern or grievance regarding the handling of your personal data, you may contact us at hello@nikitapandey.net. We will acknowledge your grievance promptly and resolve it within one month of receipt.
If your grievance is not resolved to your satisfaction, you have the right to approach the Data Protection Board of India for further redressal, subject to the Board being fully constituted under the Digital Personal Data Protection Act, 2023.
If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection authority in your country of residence.
Disclaimer
The sessions offered by Nikita Pandey are not a substitute for medical or psychological treatment. If you are experiencing a mental health condition or any other medical concern, please consult a qualified professional. To the maximum extent permitted by applicable law, Nikita Pandey accepts no liability for any outcomes arising from participation in sessions.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated date.Where material changes are made to how we process your personal data, we will notify registered participants by email at least 14 days before the changes take effect. Changes will not apply retroactively to participants already enrolled in Presence at the time the changes are made.
Contact
For any questions or concerns regarding this Privacy Policy, or to exercise your data rights, please contact us at hello@nikitapandey.net. Please include your full name and registered email address in your request so we can identify and process it promptly. We will respond to your request within one month of receipt.