LEGAL
Privacy policy
We collect as little as we can, use it only for the reason you gave it to us, and never sell it. This page explains exactly what that means.
1. Who we are
This website is run by Sattva Light Living Private Limited, a company incorporated in India (CIN U88900WB2026PTC288482), with its registered office at 75/2 Paikpara Row, Kolkata 700037, West Bengal, India ("Sattva", "we", "us"). For the purposes of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Digital Personal Data Protection Rules, 2025, we are the Data Fiduciary for the personal data described below.
2. What we collect, and why
| When | What | Why | How long we keep it |
|---|---|---|---|
| You request a corporate demo | Name, work email, company, team size, the format you're considering | To reply to you and prepare a proposal | Up to 24 months after our last contact, unless we start working together |
| You sign up for the Light Within workshop | Name, email, phone or WhatsApp number (optional), whether you prefer to join in person or online, the time you gave consent | To tell you the date and venue, confirm your place, and share practical details about the workshop | Up to 12 months after the workshop, or until you withdraw consent |
| You join the app waitlist | Email address, the time you gave consent | To tell you when the app launches | Until the app launches or you withdraw consent, whichever comes first |
| You sign up for the monthly letter | Email address, the time you gave consent | To send the letter | Until you unsubscribe or withdraw consent |
| You email us directly | Whatever you choose to include | To answer you | Up to 24 months after our last contact |
| Any visit to the site | Technical request data (IP address, browser type, page requested, time) recorded by our hosting provider | To keep the site secure and working, and to stop abuse | As set by our hosting provider, typically a few days to a few weeks |
We rely on your consent for workshop sign-ups, the waitlist and the monthly letter, and on the fact that you voluntarily gave us your details for a specific purpose when you request a demo or write to us (a "legitimate use" under section 7 of the DPDP Act). Security logs are kept so we can protect the site and its visitors.
The balance reading
The "Where is your balance today?" questions run entirely in your own browser. Your answers are not sent to us, not stored and not linked to you. When you leave or reload the page, they are gone.
Please don't send us health details through the website
Our forms don't ask for health information and aren't designed to hold it. If you want to discuss a health concern, we'll do that in a consultation, under the confidentiality that comes with it.
Our social media pages
We have pages on Instagram and Facebook, both run by Meta Platforms. If you follow, message or interact with us there, Meta's own privacy policy applies to what Meta collects. We only see what those platforms show page owners. This website doesn't load any Meta code; our links to those pages are ordinary links.
3. Cookies and tracking
This website does not use cookies, analytics trackers, advertising pixels or social media plug-ins. Our fonts are hosted on our own server, so loading a page doesn't send your data to font providers. If that ever changes, we will update this page and, where the law requires it, ask for your consent first.
4. Who we share it with
We never sell or rent personal data. We share it only with service providers that process it on our behalf, under contract, and only as needed to run the site:
- Cloudflare, Inc. (United States, with servers worldwide including India): website hosting, security and request logs.
- Resend, Inc. (United States): delivers form submissions to our inbox.
- Google LLC (Gmail, United States): our email inbox. Porkbun LLC (United States) forwards mail sent to our domain addresses to that inbox.
We may also disclose data where Indian law requires it, for example to comply with a lawful order.
5. Data stored outside India
Some of these providers store data outside India, including in the United States. We only transfer data to countries that are not restricted by the Government of India under section 16 of the DPDP Act, and we choose providers that apply strong security safeguards.
6. How we protect it
The site is served only over encrypted HTTPS connections, with modern security headers. Form submissions go straight to our inbox and are not stored in a public database. Access to our inbox is limited to the people who need it, and is protected with two-factor authentication. If a breach affecting your personal data ever occurs, we will tell you and the Data Protection Board of India as the law requires.
7. Your rights
Under the DPDP Act you can:
- Access: ask for a summary of the personal data we hold about you and how we use it.
- Correct or update: ask us to fix anything inaccurate or incomplete.
- Erase: ask us to delete your data once it's no longer needed for the purpose you gave it for.
- Withdraw consent: as easily as you gave it. Use the unsubscribe link in any letter, or email us. Withdrawing doesn't affect anything we did before.
- Nominate someone to exercise these rights for you in the event of death or incapacity.
- Raise a grievance with us. If you're not satisfied with our response, you can complain to the Data Protection Board of India.
If you live in Taiwan, the European Union or the United Kingdom, you have similar rights under your local law. Contact us in the same way and we'll respond.
To exercise any of these rights, email [email protected]. We'll reply within 30 days, and usually much sooner.
8. Grievance officer
Grievance Officer
Sattva Light Living Private Limited, 75/2 Paikpara Row, Kolkata 700037, West Bengal, India
Email: [email protected]
9. Children
This website is meant for adults and organisations. We don't knowingly collect personal data from anyone under 18. If you think a child has sent us their details, email us and we'll delete them.
10. Changes to this policy
When we change this policy, we'll update the date at the top. If a change is significant, we'll tell anyone on our mailing lists before it takes effect.