Privacy Policy
Last updated: September 22, 2026
This Privacy Policy describes how Rigpa Awareness Academy (“Rigpa Awareness Academy”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you visit our website, submit a form, contact us, register your interest in our courses, retreats or other activities, or otherwise interact with us.
Rigpa Awareness Academy is currently an educational project operating under this name and is not incorporated as a separate legal entity.
For questions regarding privacy or the processing of your personal data, please contact:
Rigpa Awareness Academy
Email: info@rigpa.space

1. Scope of this Privacy Policy
This Privacy Policy applies to personal data processed through our website and related communications.
It does not govern websites, payment platforms, social networks, video platforms, messaging services or other third-party services that you may access through links on our website. Those services process information according to their own privacy policies.

2. Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data.
Information you provide directly
When you complete a form, contact us or register your interest in a course, retreat, event or other activity, we may collect:
  • first and/or last name;
  • email address;
  • telephone number;
  • information contained in your message or enquiry;
  • information relating to the course, retreat, event or activity you are interested in;
  • any other information that you voluntarily provide.
Fields that are mandatory will normally be indicated in the relevant form.
Technical and usage information
When you visit the website, certain technical information may be processed automatically, including:
  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • language settings;
  • approximate geographic location derived from an IP address;
  • pages visited;
  • date and time of visits;
  • referring website or traffic source;
  • interactions with pages;
  • technical identifiers, cookies and similar technologies.
Such information may be processed by our website infrastructure and, where you have provided the required consent, by analytics or advertising services.

3. Purposes and Legal Bases for Processing
We process personal data only where we have an appropriate legal basis.
Responding to enquiries
If you contact us or submit a form, we use your name, email address, telephone number and message to respond to your enquiry and communicate with you.
The legal basis may be:
  • taking steps at your request before entering into an arrangement with us;
  • performance of an arrangement with you;
  • our legitimate interest in responding to enquiries and administering our educational activities.
Course, retreat and event administration
Where you register or express interest in a course, retreat, teaching, pilgrimage or event, we may process your data in order to:
  • manage your registration;
  • provide organisational information;
  • communicate schedule or programme updates;
  • answer questions;
  • provide access instructions;
  • administer participation.
The legal basis is generally performance of an arrangement with you or taking steps at your request before such an arrangement is made.
Email and promotional communications
Where required by applicable law, we send newsletters, announcements, information about future teachings, courses, retreats, events or similar communications only where you have provided consent.
You can withdraw your consent at any time by using the unsubscribe option included in the relevant communication, where available, or by contacting info@rigpa.space.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Website operation and security
We may process limited technical information where necessary to:
  • operate and display the website;
  • maintain website security;
  • prevent abuse, spam or malicious activity;
  • troubleshoot technical problems;
  • store your privacy and cookie preferences.
The legal basis is our legitimate interest in maintaining a secure and functional website and, where applicable, the necessity of providing a service requested by you.
Analytics
We use or may use analytics technologies to understand how visitors use the website, for example which pages are visited and how visitors arrive at the website.
Non-essential analytics technologies are activated only where the visitor has provided the required consent through our cookie consent mechanism.
The legal basis for such processing is consent.
Advertising and conversion measurement
We may in the future use advertising or conversion-measurement technologies such as Meta Pixel.
Where these technologies involve cookies, tracking identifiers or similar non-essential technologies, they will be activated only after the required consent has been obtained.
The legal basis for such processing is consent.

4. Website Hosting and Tilda
Our website is built and hosted using the Tilda website platform.
Tilda and its infrastructure providers may process technical information necessary to host and deliver the website, serve website files and images, process website forms and provide technical functionality.
Website resources, including certain images, scripts and other files, may be delivered through Tilda infrastructure and Tilda content delivery networks, including domains such as static.tildacdn.com.
Information submitted through forms built using Tilda may be processed through Tilda infrastructure before being delivered to us or to another service that we configure to receive form submissions.
Tilda acts in accordance with its own data protection documentation and applicable data-processing arrangements.

5. Yandex Metrica
We currently use Yandex Metrica, an analytics service, to better understand use of our website.
Yandex Metrica may process information such as:
  • IP address;
  • browser and device information;
  • pages visited;
  • time and duration of visits;
  • traffic source;
  • interactions with website pages;
  • cookies, browser identifiers and similar technologies.
Yandex Metrica may use cookies and browser storage to distinguish visitors and generate website statistics.
For visitors subject to GDPR or other laws requiring prior consent, Yandex Metrica must remain disabled until the visitor has consented to Analytics cookies through our cookie settings.
If consent is refused or subsequently withdrawn, we will not intentionally use Yandex Metrica analytics tracking for that visitor from that point onward.

6. Google Analytics
We may use Google Analytics in the future to understand website traffic and usage.
Google Analytics may process technical and usage information, including online identifiers, device information, browser information, approximate location, page interactions and information stored through cookies or similar technologies.
Google Analytics will be classified as an Analytics service and, where required by applicable law, will not be activated before the visitor provides consent.
Where Google Consent Mode or a comparable consent mechanism is used, we will configure it in accordance with our consent choices and applicable data protection requirements.

7. Meta Pixel
We may use Meta Pixel, provided by Meta Platforms, in the future to measure the effectiveness of advertising, understand conversions and create or measure audiences for advertising on Meta services such as Facebook and Instagram.
Meta Pixel may process information concerning:
  • website visits;
  • page interactions;
  • advertising interactions;
  • browser and device information;
  • IP address;
  • cookie and advertising identifiers.
Meta Pixel will be classified as an Advertising technology.
Where consent is legally required, Meta Pixel and related advertising storage or tracking will remain disabled until the visitor has actively consented to Advertising cookies.

8. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some are strictly necessary for the operation of the website and to remember privacy preferences.
Other technologies, including analytics and advertising technologies, are optional and are used only subject to the choices made in our cookie consent interface where consent is required by applicable law.
Detailed information is provided in our Cookie Policy.
Visitors can change their preferences through the Cookie Settings function available on the website.

9. Special Categories of Personal Data
Rigpa Awareness Academy provides educational content relating to Dzogchen, Bön, meditation, Buddhist teachings and related contemplative traditions.
We do not normally ask visitors to provide information about their religion, philosophical beliefs, health or other special-category personal data through ordinary contact or registration forms.
However, in some circumstances, information voluntarily provided by a participant or the context of participation in particular spiritual or religious activities could potentially reveal information concerning religious or philosophical beliefs.
Where information constitutes special-category personal data under applicable law, we will process it only where a valid legal condition exists. Where required, this may include the individual's explicit consent.
Please do not provide sensitive information through ordinary website forms unless it is genuinely necessary for your request.

10. Payments and External Services
We currently do not process payments directly through the website.
Our website may contain links that redirect visitors to external platforms where payment, registration or other services are provided.
When you leave our website and use an external service, that service may collect and process your personal data independently in accordance with its own privacy policy and terms.
Rigpa Awareness Academy does not receive your full payment-card details merely because you follow a payment link from our website.
If our payment arrangements change, this Privacy Policy will be updated where necessary.

11. Social Media and External Links
Our website may contain links to social networks, messaging services, video platforms, payment services or other external websites.
Following a link does not itself mean that we control the processing carried out by the external provider.
Once you interact directly with a third-party platform, its own privacy policy and terms apply.

12. Sharing of Personal Data
We do not sell personal data.
We may share personal data only where necessary with categories of recipients such as:
  • website hosting and infrastructure providers;
  • website platform providers;
  • analytics providers;
  • communications and email providers;
  • IT service providers;
  • advertising and conversion-measurement providers where the visitor has consented;
  • contractors or team members who require access for administration of our activities;
  • professional advisers where necessary;
  • public authorities where disclosure is required by law.
Service providers should receive only the information reasonably necessary to perform the relevant service.

13. International Data Transfers
Some of the service providers we use may process information in countries outside the European Economic Area (“EEA”), the United Kingdom or the visitor's country of residence.
This may include providers with infrastructure in multiple jurisdictions.
Where GDPR applies and personal data is transferred internationally, we seek to rely on an appropriate transfer mechanism where required, such as:
  • an adequacy decision;
  • Standard Contractual Clauses;
  • another legally recognised transfer safeguard;
  • or, where legally permitted, an applicable derogation.
The availability and legal status of transfer mechanisms may change over time, and we periodically review the services we use.

14. Data Retention
We do not retain personal data longer than reasonably necessary for the purpose for which it was collected.
As a general rule:
  • ordinary enquiries and related correspondence may be retained for up to 24 months after the last substantive communication, unless a longer period is reasonably necessary;
  • course, retreat or event administration information may be retained for the duration of the relevant activity and afterwards for as long as reasonably necessary for administration, dispute resolution and applicable legal obligations;
  • marketing contact information is normally retained until consent is withdrawn or the individual otherwise opts out;
  • a minimal record of an opt-out may be retained where necessary to ensure that the person is not contacted again;
  • analytics information is retained according to the settings selected by us and the applicable provider's retention rules;
  • cookie durations are described in our Cookie Policy.
Information may be retained for longer where necessary to comply with legal obligations, establish or defend legal claims, prevent fraud or resolve disputes.

15. Your Rights Under GDPR
Where the GDPR applies to our processing of your personal data, you may have the right to:
  • obtain confirmation as to whether we process your personal data;
  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive certain personal data in a portable format;
  • withdraw consent at any time where processing is based on consent;
  • lodge a complaint with a competent data protection supervisory authority.
These rights are subject to conditions and exceptions under applicable law.
To exercise a privacy right, contact:
info@rigpa.space
We may request information reasonably necessary to verify your identity before acting on a request.

16. Withdrawal of Consent
Where processing is based on consent, you may withdraw that consent at any time.
For cookies and tracking technologies, use the Cookie Settings function on the website.
For marketing communications, use an available unsubscribe mechanism or contact info@rigpa.space.
Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

17. Automated Decision-Making
We do not currently use personal data collected through the website to make decisions producing legal or similarly significant effects solely by automated means.
If this changes, we will update this Privacy Policy and provide the information required by applicable law.

18. Security
We use reasonable organisational and technical measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.
However, no method of transmitting or storing information online can guarantee absolute security.

19. Children's Data
Our website is not primarily designed to collect personal data directly from young children.
If participation in a particular programme is open to minors, we may implement additional consent or authorisation procedures where required by applicable law.
If you believe that a child has provided personal data to us inappropriately, please contact info@rigpa.space.

20. Changes to this Privacy Policy
We may update this Privacy Policy when our website, services, technology providers or legal obligations change.
The current version will be published on the website together with its “Last updated” date.
Material changes may also be communicated through the website or another appropriate method.

21. Contact
Questions concerning this Privacy Policy, personal data or privacy rights may be sent to:
Rigpa Awareness Academy
Email: info@rigpa.space