Privacy Policy
Last updated: October 9, 2026
1. Who is responsible for your data
MINDCHECKUP INC, operating as Rigpa Awareness Academy (“we”, “us”, “our”), is responsible for the personal data described in this Policy.
Address: 312 W. 2nd St #1168, Casper, WY 82601, United States
Privacy contact: info@rigpa.space
This Policy covers rigpaacademy.org, our learning account at school.rigpa.space, enquiries and communications, purchases of our online courses and online retreats, live sessions and participant recordings.
Our Terms of Service govern purchases and access. Accepting those Terms or reading this Policy does not, by itself, constitute consent to marketing, optional tracking or any processing that requires separate consent.
2. Information we process
Depending on your use of our services, we process:
3. Purposes and legal bases
Where the GDPR or UK GDPR applies, our ordinary personal-data processing uses the following bases:
Service messages about purchases, access, scheduling, security or refunds are separate from promotional messages.
For processing based on legitimate interests, we consider its necessity and its impact on your rights. You may object as described below. We do not use contract necessity as a basis for optional marketing or tracking.
4. Learning platform, website and payments
Our public website uses Tilda for hosting and website functionality. Website forms and technical requests may be processed through its infrastructure.
Our learning account at school.rigpa.space uses Prodamus.XL to administer accounts, enrolments, course access and learning materials, including recordings. Platform providers process information necessary for these functions.
A provider may process some information on our behalf and other information for its own legal, security or service purposes. Its own notice applies to that independent processing; using a provider does not remove our responsibility for processing we control.
5. Live sessions and recordings
Live online sessions use Zoom. Session recordings are primarily stored on Prodamus.XL and made available through the learning account. In individual cases, we may also use Google Drive to store and share recordings or YouTube to host and play recordings. These services process relevant content and technical information under their applicable terms and privacy notices.
Retreat recordings are available to enrolled participants of the corresponding retreat, together with authorised teachers, staff and service providers who need access to deliver and support the programme. Participant recordings are not intended for public distribution.
Your display name, voice, image, shared content and questions may be captured if you contribute to a recorded session. Recording information is provided before participation. You may keep your camera and microphone off. If you need to ask a question privately or have concerns about being identified in a recording, contact info@rigpa.space before contributing.
Where consent is needed for recording or sharing your identifiable contributions, we request it separately. Turning on a camera or microphone does not replace any explicit consent required by law. Refusal of optional recording consent does not remove your purchased entitlement to programme access.
Recordings are offered with indefinite participant access. This does not authorise unrestricted retention or disclosure of all participant information. We review whether identifiable contributions remain necessary and assess privacy requests, including whether an image, voice, name or question can be removed, obscured or replaced while retaining the teaching material.
We obtain separate permission before using identifiable participant contributions in public promotional material.
6. Sensitive information
Our meditation programmes and participant contributions may reveal religious or philosophical beliefs. Messages or questions may also contain health or other sensitive information even though our services are educational meditation programmes.
Please avoid sharing unnecessary sensitive details, particularly in group sessions. A group question or contribution may be heard by other participants and, if recorded, seen by authorised viewers of the recording.
Where applicable law treats information as special-category data, we require both an ordinary legal basis and an applicable additional condition before processing it. Where we rely on explicit consent, we explain the specific information, purpose and recipients and request a separate express indication of consent. General acceptance of our Terms or this Policy is insufficient.
7. Analytics, advertising and cookies
Our existing website uses Yandex Metrica for optional analytics, subject to the required consent. The information involved may include device and browser information, IP address, page visits, traffic sources, interactions and browser identifiers.
Google Analytics and Meta Pixel are potential future integrations, not represented here as currently active. Storage of recordings using Google services is separate from Google Analytics.
Optional analytics and advertising tracking remain disabled until the relevant consent is provided. You can reject optional categories and withdraw consent through cookie settings. See our Cookie Policy at https://rigpaacademy.org/cookie.
8. Who receives information
We disclose information only as necessary for the relevant purpose, including to:
9. International processing
We are based in the United States. Information may be processed outside your country of residence by us and the service providers identified in this Policy. Processing locations depend on the provider and the services configured.
These countries may have different data-protection laws from your country. Where the GDPR or UK GDPR requires safeguards for an international transfer, the relevant transfer must have an applicable lawful mechanism and any necessary additional protections.
You may contact info@rigpa.space for information about the applicable safeguards and how to obtain a copy, subject to lawful redactions.
10. Retention
We retain personal data for the period necessary for the purpose for which it is processed, taking account of service access, applicable legal requirements and your rights:
11. Your rights and choices
Depending on the applicable law, you may have rights to access or obtain a copy of your data, correct it, request deletion or restriction, receive eligible data in a portable format, object to processing based on legitimate interests, and withdraw consent.
Withdrawal does not affect processing lawfully carried out before withdrawal. We stop processing that depends on withdrawn consent unless another valid basis permits or requires particular processing. Necessary financial records or information for legal claims may need to be retained.
Contact info@rigpa.space to exercise a right or raise a concern about a recording. We may request information reasonably necessary to verify your identity. We respond within applicable legal time limits; the refund-processing timetable in our Terms is separate.
You may complain to your competent data-protection authority, including, where applicable, the authority in the EEA country where you live or work or where an alleged infringement occurred, or the UK Information Commissioner.
Deleting information needed to administer your account may affect our ability to authenticate you or provide access. We explain relevant consequences when assessing your request. We do not require you to waive mandatory privacy rights to retain purchased access.
12. Security, age and automated decisions
We use reasonable organisational and technical measures to protect personal information and restrict access to authorised persons. No system can guarantee absolute security. Keep your login credentials private and tell us promptly about suspected unauthorised access.
Our paid online programmes and learning accounts are for participants aged 18 or older. If we learn that a person under 18 has registered contrary to our Terms, we assess the account and remove personal information that is not required for legal or other valid purposes.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
13. Updates and contact
We update this Policy when our services or data practices change and display the revised date. Where legally required, we provide additional notice or obtain new consent before the relevant processing changes.
MINDCHECKUP INC / Rigpa Awareness Academy
312 W. 2nd St #1168, Casper, WY 82601, United States
info@rigpa.space
1. Who is responsible for your data
MINDCHECKUP INC, operating as Rigpa Awareness Academy (“we”, “us”, “our”), is responsible for the personal data described in this Policy.
Address: 312 W. 2nd St #1168, Casper, WY 82601, United States
Privacy contact: info@rigpa.space
This Policy covers rigpaacademy.org, our learning account at school.rigpa.space, enquiries and communications, purchases of our online courses and online retreats, live sessions and participant recordings.
Our Terms of Service govern purchases and access. Accepting those Terms or reading this Policy does not, by itself, constitute consent to marketing, optional tracking or any processing that requires separate consent.
2. Information we process
Depending on your use of our services, we process:
- Contact and enquiry information: your name, email, telephone number if provided, messages and programme interests.
- Account information: your email, profile information you provide, authentication information processed through our learning platform, account identifiers and access permissions. Accounts use email and password.
- Purchase information: the programme purchased, price and currency, transaction reference, payment status, payer information supplied by PayPal, refund requests and related correspondence.
- Learning and participation information: enrolment, access to course materials, attendance and learning activity recorded by the platform where its relevant features are enabled, and questions or submissions you provide.
- Live-session information: display name, attendance, and audio, video, screen-sharing content or questions you choose to contribute. Where a session is recorded, contributions captured in the recording may remain in it.
- Technical information: IP address, browser and device information, connection and security logs, timestamps and service interactions. Optional analytics may also process page visits, traffic sources, interactions and cookie identifiers after consent.
3. Purposes and legal bases
Where the GDPR or UK GDPR applies, our ordinary personal-data processing uses the following bases:
Purpose | Information involved | Legal basis |
Answer enquiries and arrange enrolment | Contact details, programme interests, correspondence | Steps at your request before a contract; legitimate interests in responding to general enquiries |
Create and administer an account; deliver purchased programmes and access | Account, enrolment, access and participation information | Performance of our contract |
Confirm purchases and handle refunds | Order, transaction and refund information | Performance of our contract; legal obligations where applicable |
Keep legally required financial records | Necessary transaction and accounting information | Applicable legal obligations |
Protect accounts and services; prevent abuse; handle disputes | Necessary technical, account and transaction information | Legitimate interests in security, fraud prevention and establishing or defending legal claims; legal obligations where applicable |
Include your identifiable contributions in participant recordings where we rely on consent | Display name, voice, image and contributions | Consent, with a separate special-category condition where required |
Send optional promotional email | Contact details and communication preferences | Consent where required by applicable law |
Use optional analytics or advertising technologies | Technical information and tracking identifiers | Consent |
Service messages about purchases, access, scheduling, security or refunds are separate from promotional messages.
For processing based on legitimate interests, we consider its necessity and its impact on your rights. You may object as described below. We do not use contract necessity as a basis for optional marketing or tracking.
4. Learning platform, website and payments
Our public website uses Tilda for hosting and website functionality. Website forms and technical requests may be processed through its infrastructure.
Our learning account at school.rigpa.space uses Prodamus.XL to administer accounts, enrolments, course access and learning materials, including recordings. Platform providers process information necessary for these functions.
A provider may process some information on our behalf and other information for its own legal, security or service purposes. Its own notice applies to that independent processing; using a provider does not remove our responsibility for processing we control.
5. Live sessions and recordings
Live online sessions use Zoom. Session recordings are primarily stored on Prodamus.XL and made available through the learning account. In individual cases, we may also use Google Drive to store and share recordings or YouTube to host and play recordings. These services process relevant content and technical information under their applicable terms and privacy notices.
Retreat recordings are available to enrolled participants of the corresponding retreat, together with authorised teachers, staff and service providers who need access to deliver and support the programme. Participant recordings are not intended for public distribution.
Your display name, voice, image, shared content and questions may be captured if you contribute to a recorded session. Recording information is provided before participation. You may keep your camera and microphone off. If you need to ask a question privately or have concerns about being identified in a recording, contact info@rigpa.space before contributing.
Where consent is needed for recording or sharing your identifiable contributions, we request it separately. Turning on a camera or microphone does not replace any explicit consent required by law. Refusal of optional recording consent does not remove your purchased entitlement to programme access.
Recordings are offered with indefinite participant access. This does not authorise unrestricted retention or disclosure of all participant information. We review whether identifiable contributions remain necessary and assess privacy requests, including whether an image, voice, name or question can be removed, obscured or replaced while retaining the teaching material.
We obtain separate permission before using identifiable participant contributions in public promotional material.
6. Sensitive information
Our meditation programmes and participant contributions may reveal religious or philosophical beliefs. Messages or questions may also contain health or other sensitive information even though our services are educational meditation programmes.
Please avoid sharing unnecessary sensitive details, particularly in group sessions. A group question or contribution may be heard by other participants and, if recorded, seen by authorised viewers of the recording.
Where applicable law treats information as special-category data, we require both an ordinary legal basis and an applicable additional condition before processing it. Where we rely on explicit consent, we explain the specific information, purpose and recipients and request a separate express indication of consent. General acceptance of our Terms or this Policy is insufficient.
7. Analytics, advertising and cookies
Our existing website uses Yandex Metrica for optional analytics, subject to the required consent. The information involved may include device and browser information, IP address, page visits, traffic sources, interactions and browser identifiers.
Google Analytics and Meta Pixel are potential future integrations, not represented here as currently active. Storage of recordings using Google services is separate from Google Analytics.
Optional analytics and advertising tracking remain disabled until the relevant consent is provided. You can reject optional categories and withdraw consent through cookie settings. See our Cookie Policy at https://rigpaacademy.org/cookie.
8. Who receives information
We disclose information only as necessary for the relevant purpose, including to:
- authorised teachers and staff administering courses, retreats, support and accounts;
- website, learning-platform, video-session, storage, communication and IT providers, including Tilda, Prodamus.XL, Zoom and Google where used;
- PayPal for payments, refunds and payment disputes;
- analytics providers when the required consent has been given;
- professional advisers and authorities where necessary for legal obligations or legal claims.
9. International processing
We are based in the United States. Information may be processed outside your country of residence by us and the service providers identified in this Policy. Processing locations depend on the provider and the services configured.
These countries may have different data-protection laws from your country. Where the GDPR or UK GDPR requires safeguards for an international transfer, the relevant transfer must have an applicable lawful mechanism and any necessary additional protections.
You may contact info@rigpa.space for information about the applicable safeguards and how to obtain a copy, subject to lawful redactions.
10. Retention
We retain personal data for the period necessary for the purpose for which it is processed, taking account of service access, applicable legal requirements and your rights:
- Enquiries: ordinarily up to 24 months after the last substantive contact, unless a purchase, continuing enquiry or legal matter requires longer retention.
- Accounts and access entitlements: the information necessary to maintain your account and purchased access for as long as those services are provided. Indefinite access can require long-term retention of a minimal entitlement record; it does not require keeping every log or interaction indefinitely.
- Recordings: teaching recordings are intended to remain available indefinitely. Identifiable participant contributions are subject to necessity review, applicable consent conditions and privacy rights, rather than an unconditional promise never to delete them.
- Purchase and refund records: for applicable accounting, tax and legal retention periods, and as necessary for unresolved disputes or legal claims.
- Marketing information: until consent is withdrawn or the relevant communication purpose ends; a minimal suppression record may be kept to honour an opt-out.
- Security logs, analytics and backups: for periods appropriate to their specific function and configured retention limits. Cookie and storage lifetimes are disclosed in our Cookie Policy and cookie settings.
11. Your rights and choices
Depending on the applicable law, you may have rights to access or obtain a copy of your data, correct it, request deletion or restriction, receive eligible data in a portable format, object to processing based on legitimate interests, and withdraw consent.
Withdrawal does not affect processing lawfully carried out before withdrawal. We stop processing that depends on withdrawn consent unless another valid basis permits or requires particular processing. Necessary financial records or information for legal claims may need to be retained.
Contact info@rigpa.space to exercise a right or raise a concern about a recording. We may request information reasonably necessary to verify your identity. We respond within applicable legal time limits; the refund-processing timetable in our Terms is separate.
You may complain to your competent data-protection authority, including, where applicable, the authority in the EEA country where you live or work or where an alleged infringement occurred, or the UK Information Commissioner.
Deleting information needed to administer your account may affect our ability to authenticate you or provide access. We explain relevant consequences when assessing your request. We do not require you to waive mandatory privacy rights to retain purchased access.
12. Security, age and automated decisions
We use reasonable organisational and technical measures to protect personal information and restrict access to authorised persons. No system can guarantee absolute security. Keep your login credentials private and tell us promptly about suspected unauthorised access.
Our paid online programmes and learning accounts are for participants aged 18 or older. If we learn that a person under 18 has registered contrary to our Terms, we assess the account and remove personal information that is not required for legal or other valid purposes.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
13. Updates and contact
We update this Policy when our services or data practices change and display the revised date. Where legally required, we provide additional notice or obtain new consent before the relevant processing changes.
MINDCHECKUP INC / Rigpa Awareness Academy
312 W. 2nd St #1168, Casper, WY 82601, United States
info@rigpa.space