Last updated: May 2026
1. Who we are
This Privacy Policy explains how we collect, use, and protect your personal data when you visit rammeditation.com or register for a retreat.
Data Controller: Sofia Dobrovolska [Address placeholder] Email: hello@rammeditation.com
If you have any questions about how your data is handled, please contact us at hello@rammeditation.com. We aim to respond within 5 business days.
2. What data we collect and why
We collect personal data only for specific, legitimate purposes. Here is exactly what we collect and why.
2.1 Retreat registration
When you fill in the registration form, we collect:
- Full name
- Email address
- Phone number / WhatsApp
- Country of residence
- Meditation experience level
- Translation requirements
- Dietary requirements and health considerations
- Any additional information you choose to share
Legal basis: Performance of a contract (Article 6(1)(b) GDPR) — this data is necessary to process your registration and provide the retreat service.
Retention: We keep this data for the duration of the retreat relationship and up to 3 years after the event for legal and accounting purposes, after which it is securely deleted.
2.2 Payment processing
Payments are processed via Stripe (stripe.com). When you proceed to payment, you are redirected to a secure Stripe-hosted payment form. We do not collect or store your card details on our website.
Stripe acts as an independent data processor and processes your payment data under their own Privacy Policy, available at stripe.com/privacy.
Legal basis: Performance of a contract (Article 6(1)(b) GDPR).
Payments are processed by Biedrība "Ištar", registration No. 40008278213, registered address: Aleksandra Bieziņa iela 2–14, Rīga, LV-1029, Latvia — acting as the payment recipient on behalf of the retreat organiser.
2.3 Event communications
If you register for a retreat, we will send you emails related to that specific event — including confirmation, logistics, schedule, and follow-up information.
These emails are sent via SendPulse (sendpulse.com), which acts as our data processor. Your email address is transferred to SendPulse solely for this purpose.
Legal basis: Performance of a contract (Article 6(1)(b) GDPR).
2.4 Newsletter
If you opt in during registration, we will send you occasional updates about future retreats, teachings, and events via SendPulse.
Legal basis: Consent (Article 6(1)(a) GDPR).
You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any email, or by writing to hello@rammeditation.com. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.
We do not transfer existing subscriber lists to SendPulse. Only data collected through this website is used.
2.5 Website analytics
We use Google Analytics to understand how visitors use our website. This involves the collection of anonymised data about pages visited, time spent, and general geographic location (country level). No personally identifiable information is collected through analytics.
Google Analytics sets cookies on your device (see Section 4 below).
Legal basis: Legitimate interests (Article 6(1)(f) GDPR) — understanding website usage helps us improve the information we provide to prospective participants.
You can opt out of Google Analytics tracking at any time using the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout
3. Who we share your data with
We do not sell, rent, or trade your personal data. We share data only with the following processors, and only to the extent necessary:
| PROCESSOR | PURPOSELOCATION | LOCATION |
| Stripe | Payment processing | USA / EU (SCCs in place) |
| SendPulse | Event and newsletter emails | EU |
| Google Analytics | Website analytics | USA / EU (SCCs in place) |
Where processors are located outside the European Economic Area (EEA), transfers are made under Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection.
4. Cookies
Cookies are small text files stored on your device when you visit a website. We use the following cookies:
Strictly necessary cookies
These cookies are required for the website to function. They cannot be disabled.
- Stripe cookies — set when you proceed to the payment form, necessary for secure transaction processing.
Analytics cookies
These cookies help us understand how visitors use the site. They are only set with your consent.
- Google Analytics (_ga, _gid, _gat) — used to distinguish users and throttle request rate. Data is anonymised and aggregated. Retention: up to 2 years.
When you first visit the site, you will be asked for your consent to analytics cookies via a cookie banner. You can change your preferences at any time through the cookie settings link in the footer.
5. Your rights under GDPR
As a data subject in the European Union or European Economic Area, you have the following rights:
- Right of access — you may request a copy of the personal data we hold about you.
- Right to rectification — you may ask us to correct inaccurate or incomplete data.
- Right to erasure — you may ask us to delete your data, subject to legal retention obligations.
- Right to restriction — you may ask us to restrict processing of your data in certain circumstances.
- Right to data portability — you may request your data in a structured, machine-readable format.
- Right to object — you may object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us at hello@rammeditation.com. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.
If you believe your rights have been violated, you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija): www.dvi.gov.lv
6. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:
- HTTPS encryption across the entire website
- Access to personal data limited to authorised personnel only
- Use of vetted, GDPR-compliant third-party processors
No method of transmission over the internet is completely secure. In the unlikely event of a data breach affecting your rights, we will notify you and the relevant supervisory authority as required by GDPR.
7. Children
This website and its services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data through this website, please contact us at hello@rammeditation.com and we will delete it promptly.
8. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last updated. We will notify registered participants of any material changes by email.
9. Contact
For any questions, requests, or concerns about your personal data:
Sofia Dobrovolska hello@rammeditation.com rammeditation.com