Privacy Policy

School of Cultivation ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit schoolofcultivation.com or engage with our offerings.

This policy is designed to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data Controller

The data controller responsible for your personal data is School of Cultivation. For any privacy-related questions or requests, contact us at school.cultivation@gmail.com.

2. Information We Collect

We collect personal data that you voluntarily provide to us, including:

• Identity data: name and salutation.
• Contact data: email address, phone number (where shared).
• Communication data: messages, inquiries, form submissions.
• Registration data: course/retreat/community waitlist sign-ups.
• Technical data: IP address, browser type, device info, cookies, and usage data collected automatically when you visit the site.

3. How We Use Your Information

We process your personal data for the following purposes:

• To register you for courses, retreats, or community offerings.
• To respond to inquiries and provide customer support.
• To send transactional emails (confirmations, schedule updates, materials).
• To send newsletters and marketing communications, only with your consent.
• To improve our website, services, and user experience.
• To comply with legal, regulatory, and accounting obligations.

4. Legal Basis for Processing (GDPR)

We rely on the following legal bases under GDPR Article 6:

• Consent — for marketing emails, optional cookies, and waitlist sign-ups.
• Contract — to deliver the course, retreat, or service you have registered for.
• Legal obligation — for tax, accounting, and regulatory compliance.
• Legitimate interests — to operate, secure, and improve our services.

5. Sharing Your Information

We do not sell your personal data. We share data only with trusted service providers who help us operate our website and deliver our services, including:

• Hosting and database providers (Lovable Cloud / Supabase).
• Email delivery providers (e.g., Resend) for transactional and marketing emails.
• Payment processors, where applicable.
• Analytics providers, where enabled, to understand site usage.

These providers are contractually bound to protect your data and process it only on our instructions. We may also disclose data when legally required.

6. International Data Transfers

Your data may be processed outside your country of residence, including in India, the EU, or the United States. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms recognised under GDPR and the DPDP Act.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Marketing data is retained until you withdraw consent or unsubscribe. Course and retreat records may be retained for up to 7 years for compliance purposes.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a structured, commonly used format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a data protection authority (e.g., your local EU DPA, the UK ICO, or the Data Protection Board of India).

To exercise any of these rights, email us at school.cultivation@gmail.com. We will respond within 30 days.

9. Cookies & Tracking

Our website uses essential cookies required for the site to function, and may use analytics cookies to understand visitor behaviour. You can control cookies through your browser settings. Disabling cookies may affect site functionality.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Marketing Communications

We send marketing emails only with your consent. You can unsubscribe at any time using the link in our emails or by emailing us. Transactional communications related to your registration cannot be opted out of while your engagement is active.

13. Updates to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent changes. Material changes will be communicated via email or a prominent notice on our website.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

School of Cultivation
Email: school.cultivation@gmail.com