Last updated: April 8, 2026
Privacy Policy
This Privacy Policy explains how NamasteFinder (“we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you use our website and services. We are committed to compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
1. Data Controller
The data controller responsible for your personal data is:
NamasteFinderNamasteFinder Ltd., 8 The Green, Ste R, Dover, Delaware, United States
Email: hello@namastefinder.com
2. Personal Data We Collect
We collect the following categories of personal data:
- Account data: Name, email address, profile photo, and authentication credentials when you create an account via Auth0.
- Profile data: Bio, specialties, languages, certifications, and other information you voluntarily add to your facilitator or user profile.
- Contact form data: Name, email, phone number, and message content submitted through our contact or inquiry forms.
- Booking and payment data: Booking details, participant counts, and payment transaction references (card details are processed by Stripe and are never stored by us).
- Usage data: Pages visited, search queries, clicks, browser type, IP address, and device information collected automatically via cookies and analytics tools.
- Media uploads: Photos and images you upload for your listings or profile, stored securely on AWS S3.
3. Legal Basis for Processing
Under the GDPR, we process your personal data on the following legal bases:
Contract performance (Art. 6(1)(b))
To create and manage your account, process bookings, and provide our services.
Legitimate interests (Art. 6(1)(f))
To improve our platform, prevent fraud, ensure security, and send service-related communications.
Consent (Art. 6(1)(a))
For marketing communications, analytics cookies, and any processing where we explicitly ask for your agreement.
Legal obligation (Art. 6(1)(c))
To comply with applicable laws, tax regulations, and lawful requests from authorities.
4. How We Use Your Data
- Create and manage your user or facilitator account
- Display your public profile and listings to other users
- Process bookings and coordinate payments via Stripe
- Send transactional emails (booking confirmations, account notifications) via Resend
- Respond to enquiries and support requests
- Improve and personalise the platform through analytics (Google Analytics / GTM)
- Detect and prevent fraudulent or abusive activity
- Comply with legal and regulatory obligations
5. Third-Party Services & Data Sharing
We share your data only where necessary with the following trusted service providers acting as data processors under appropriate agreements:
| Provider | Purpose | Location |
|---|---|---|
| Auth0 (Okta) | Authentication & identity management | USA (SCCs) |
| MongoDB Atlas | Database storage | EU |
| AWS (S3, App Runner, Amplify) | Hosting, media storage, and infrastructure | EU (eu-west-1) |
| Stripe | Payment processing | USA (SCCs) |
| Resend | Transactional email delivery | USA (SCCs) |
| Google (reCAPTCHA, GTM, Analytics) | Bot prevention and usage analytics | USA (SCCs) |
SCCs = Standard Contractual Clauses approved by the European Commission, ensuring adequate data protection for transfers outside the EU/EEA.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
6. Cookies & Tracking Technologies
We use the following types of cookies:
Strictly necessary
Required for the platform to function (authentication sessions, security tokens). Cannot be disabled.
Analytics
Google Analytics via Google Tag Manager to understand how visitors use the site. Only activated with your consent.
Functional
Remember your preferences (language, saved items). Activated only where required for the feature.
You can manage or withdraw cookie consent at any time through your browser settings or our cookie preference centre (when available).
7. Data Retention
We retain your personal data for as long as necessary to provide our services:
- Account data: retained for the duration of your account plus 30 days after deletion
- Booking records: retained for 7 years to comply with tax and accounting obligations
- Contact form submissions: retained for 12 months then deleted
- Analytics data: aggregated and anonymised after 26 months
- Uploaded media: deleted within 30 days of account deletion upon request
8. Your Rights Under GDPR
If you are located in the EU/EEA, you have the following rights regarding your personal data:
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Request correction of inaccurate or incomplete data.
Right to erasure
Request deletion of your data ("right to be forgotten") where no legal basis remains.
Right to restrict processing
Request that we limit how we use your data while a dispute is resolved.
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent
Withdraw consent at any time without affecting prior processing.
Right to lodge a complaint
Contact your local supervisory authority if you believe we have mishandled your data.
To exercise any of these rights, please contact us at hello@namastefinder.com. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include HTTPS encryption, secure authentication via Auth0, encrypted storage on AWS, access controls and role-based permissions, and regular security reviews. In the event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.
10. Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice on our platform before the change takes effect. The “Last updated” date at the top of this page indicates when the policy was last revised.
12. Contact Us
For any questions, requests, or concerns about this Privacy Policy or how we handle your personal data, please contact our privacy team:
NamasteFinder — Privacy TeamEmail: hello@namastefinder.com
Or use our contact form.