Last updated: May 2025

Dhama Sun (“we”, “our”, or “us”) is committed to protecting and respecting your privacy.
This Privacy Notice explains how we collect, use, store and protect your personal data when you interact with our website, services, courses, coaching sessions or content.

It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy should be read alongside our Terms of Use and any other documents referred to on our website.

Data Controller
For the purpose of the UK General Data Protection Regulation and the Data Protection Act 2018, the data controller is:


Dhama Sun
Website:
www.dhamasun.com
Email:
hello@dhamasun.com

How We Collect Information
Most of the personal information we process is provided directly by you when you:

  • Make an enquiry through our website
  • Book a mindfulness course, event, retreat or coaching session
  • Subscribe to our newsletter or mailing list
  • Create an account on our website
  • Complete a contact form
  • Engage with us on social media
  • Leave feedback, comments or reviews
  • Purchase a product, course or service
  • Participate in surveys or questionnaires
  • Apply for opportunities, collaborations or roles connected with Dhama Sun

From time to time we may also receive limited information indirectly, for example:

  • Website analytics and visitor statistics
  • Publicly available information on social media platforms
  • Partner organisations when events or services are delivered jointly

Our website is not intended for children under the age of 16 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at hello@dhamasun.com so we can remove the information.

Types of Personal Information We May Collect

Depending on your relationship with Dhama Sun, we may collect the following information:

Personal Details

  • Name
  • Email address
  • Phone number
  • Postal address (if relevant)

Course or Coaching Information

  • Course bookings and attendance
  • Coaching session notes or preferences
  • Feedback or responses you voluntarily share

Health or Wellbeing Information

In some cases you may choose to share relevant health or wellbeing information when attending a course, event or coaching session.
This information is only collected where appropriate and with your consent, in order to support your safe participation.

Payment Information

Payments for courses, services or products are processed securely by third-party payment providers such as Stripe or PayPal.

Dhama Sun does not store payment card details.

Website and Technical Information

When you visit our website we may automatically collect information including:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Pages visited
  • Referring websites
  • Time spent on pages

This information helps us understand how visitors use our website and improve the overall experience.

IP Addresses and Log Files

When you visit our website we may collect certain technical information about your device and browsing behaviour.

This may include

  • IP address
  • Browser type
  • Internet service provider
  • Pages visited
  • Access times
  • Referring website addresses

This information is used for statistical analysis and website improvement and does not normally identify individual users.

Where We Store Your Personal Data

Your data may be stored securely within the UK, the European Economic Area (EEA), or in countries outside the EEA where our trusted service providers operate.

Some service providers we use (such as website platforms, payment processors, email providers or course platforms) may process data internationally.

Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place so that your personal data remains protected in accordance with data protection laws.

All reasonable measures are taken to ensure your data is handled securely.

Unfortunately, the transmission of information via the internet is not completely secure. While we do our best to protect your personal data, we cannot guarantee the absolute security of information transmitted to our website.

Once received, we use appropriate security procedures and safeguards to protect your data.

How We Use Your Information

We use personal information in order to:

  • Deliver courses, coaching sessions, retreats or events
  • Process bookings and payments
  • Communicate with you regarding your participation in services
  • Provide course materials or updates
  • Respond to enquiries
  • Improve our website, services and content
  • Send newsletters or updates where you have consented to receive them
  • Meet legal, tax or regulatory obligations

Legal Basis for Processing Personal Information

We process personal data under one or more of the following legal bases:

Contractual necessity

Where processing is required to deliver a service you have requested or booked.

Consent

Where you have given permission for us to process your information (for example when subscribing to newsletters).

Legitimate interests

Where processing helps us operate our business effectively and improve services, provided this does not override your rights.

Legal obligation

Where processing is required to comply with legal or regulatory requirements.

Sharing Your Information

Dhama Sun never sells personal information to third parties.

We may share information with trusted third-party service providers who assist us in operating our website or delivering services. These may include:

  • Website hosting platforms (e.g. Squarespace)
  • Payment processors (e.g. Stripe or PayPal)
  • Email marketing services (e.g. MailerLite, Mailchimp, ConvertKit)
  • Course platforms (e.g. Thinkific or Teachable)
  • Online meeting platforms (e.g. Zoom)
  • Website analytics providers (e.g. Google Analytics)

These providers process personal data only on our instructions and are required to maintain appropriate security standards.

We may also share anonymous or aggregated statistics about website visitors to help understand audience engagement, but this will never identify individuals.

In certain circumstances we may disclose personal data where required to do so by law, or where disclosure is necessary to protect our rights, safety, or the safety of others.

Your Rights

Under GDPR you have several rights regarding your personal data.

These include:

  • The right to access the personal data we hold about you
  • The right to request correction of inaccurate data
  • The right to request deletion of your personal data
  • The right to restrict processing
  • The right to object to certain types of processing
  • The right to data portability
  • The right to withdraw consent at any time where consent is relied upon


To exercise any of these rights please contact: hello@dhamasun.com

Data Security

We take data security seriously and implement appropriate safeguards to protect your information.

These may include:

  • Secure website connections using HTTPS
  • Password-protected systems
  • Secure third-party payment processing
  • Restricted access to personal information


We also regularly review systems and procedures to maintain appropriate security.


Retention of Personal Information

We keep personal data only for as long as necessary.

Typical retention periods include:

Course and booking records: up to 7 years (for accounting and legal purposes)

Email subscriptions: until you unsubscribe or request deletion

Health information shared for course participation: deleted within approximately 30 days after course completion unless longer retention is required for safeguarding purposes

When information is no longer needed, it is securely deleted or anonymised.

Links to Other Websites

Our website may contain links to external websites, partner organisations or social media platforms.

If you follow a link to another website, please note that those websites have their own privacy policies. Dhama Sun does not accept responsibility for the privacy practices of those sites.

How to Access or Control Your Personal Data

You may request access, correction or deletion of your personal data by contacting: hello@dhamasun.com

We will respond to requests within a reasonable timeframe and in accordance with data protection laws.

Unsubscribing from Communications

If you no longer wish to receive marketing emails or newsletters, you may unsubscribe at any time using the unsubscribe link at the bottom of emails or by contacting us at:  hello@dhamasun.com

Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in law or our services.

The latest version will always be available on our website.

Contact

Questions, comments or requests regarding this Privacy Notice are welcomed.

Please contact: Dhama Sun

Email: hello@dhamasun.com

Website: www.dhamasun.com