PRIVACY POLICY
Anand Way of Life | Nikita Anand Last updated: 7 September 2026
1. WHO WE ARE AND HOW TO REACH US
The data controller responsible for your personal information is:
Nikita Anand, trading as Nikita Anand, Anand Way of Life, Anand Studio in Mallorca, Spain.
Email: nikita@anandwayoflife.com Website: anandwayoflife.com
For all privacy-related questions, requests, or complaints, please contact us at the email address above.
2. WHAT THIS POLICY COVERS
This Privacy Policy explains how Anand Way of Life ("we", "us", "our") collects, uses, stores, and shares your personal information when you:
Visit our website at anandwayoflife.com
Access Anand Studio via Uscreen
Purchase any of our services (retreats, pilgrimages, 1:1 sessions, online courses, memberships, events)
Contact us via email, WhatsApp, Instagram, or any other channel
Sign up to receive our newsletter or other communications
This policy applies to all personal data processing carried out by us, whether online or offline, and complies with the EU General Data Protection Regulation (GDPR) (Regulation 2016/679) and the Spanish Organic Law on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD, Ley Orgánica 3/2018, de 5 de diciembre).
3. THE LEGAL BASES ON WHICH WE PROCESS YOUR DATA
Under the GDPR, we must have a lawful basis for processing your personal data. Depending on the activity, we rely on:
a) Contract (Art. 6(1)(b) GDPR): Where processing is necessary to provide a service you have purchased or requested - for example, processing your booking for a retreat or granting you access to your Anand Studio membership.
b) Legitimate Interests (Art. 6(1)(f) GDPR): Where processing is necessary for our genuine business interests and does not override your rights - for example, sending service-related communications, improving our website, or managing our business administration. You have the right to object to processing based on this ground at any time.
c) Consent (Art. 6(1)(a) GDPR): Where you have given us explicit permission for a specific use of your information - for example, signing up to receive our newsletter, or agreeing to the use of non-essential cookies. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
d) Legal Obligation (Art. 6(1)(c) GDPR): Where we are required to process your data to comply with Spanish or EU law - for example, retaining invoices and financial records.
e) Vital Interests (Art. 6(1)(d) GDPR): In exceptional circumstances where processing is necessary to protect someone's life.
4. SPECIAL CATEGORIES OF PERSONAL DATA
The nature of our services - somatic healing, breathwork, womb ceremony, spiritual healing and related embodiment practices - means we may come into contact with sensitive personal information, including:
Health data (physical or mental health, injuries, medical history shared voluntarily)
Data relating to sex life or sexual orientation (shared within the context of healing work)
Data revealing religious or philosophical beliefs
We process special category data only with your explicit consent (Art. 9(2)(a) GDPR) or where processing is necessary for the purposes of preventive or occupational health care and you have provided this information voluntarily in that context (Art. 9(2)(h) GDPR). We never require you to share this type of information, and sharing it is always your choice.
5. INFORMATION WE COLLECT AND HOW WE COLLECT IT
Information you give us directly:
Name, email address, country, billing address, and phone number (where provided)
Payment information (processed by third-party payment providers - we do not store card data)
Health information or personal circumstances you choose to share in intake forms, session contexts, or direct communication
Messages, feedback, or other content you send us
Information collected automatically when you use our website or Uscreen platform:
IP address, browser type, device type, and operating system
Pages visited, time spent, and how you navigate our sites
Referral source (how you found us)
Cookies and similar tracking technologies (see Section 10)
Information from third parties: Where permitted, we may receive information about you from platforms such as Instagram or Facebook if you interact with our advertising.
6. HOW WE USE YOUR INFORMATION
We use your personal data to:
Provide, manage, and administer the services you have purchased or requested
Process bookings, memberships, payments, and refunds
Create and manage your account on our platforms
Send essential service communications (booking confirmations, receipts, membership notices, changes to terms)
Send marketing communications where you have consented or where we have a legitimate interest in doing so
Respond to enquiries and provide customer support
Improve our website, content, and services
Comply with our legal and regulatory obligations
Detect and prevent fraud or misuse of our services
Protect our legal rights and those of our clients
7. MARKETING COMMUNICATIONS
We send newsletters, event announcements, and other marketing materials only with your consent on the basis of legitimate interests in communicating with existing clients.
You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in the emails or by contacting us directly at nikita@anandwayoflife.com. Unsubscribing from marketing does not affect our ability to send you essential communications related to a service you have purchased.
8. HOW LONG WE KEEP YOUR DATA
We retain your personal data only for as long as is necessary for the purposes described in this policy, including satisfying our legal, accounting, and reporting obligations.
As a general guide:
Client records and contract data: retained for the duration of our relationship and for 5 years thereafter, in line with Spanish civil law limitation periods (Real Decreto Legislativo 1/2007 and the Spanish Civil Code)
Invoices and financial records: retained for a minimum of 6 years in accordance with Spanish commercial and tax law (Ley 58/2003 General Tributaria and Código de Comercio)
Email marketing records and consent logs: retained for 3 years from the date of last activity or consent, to demonstrate compliance
Website server logs: retained for up to 30 days, then deleted or anonymised
Suppression lists (unsubscribe records): retained indefinitely to ensure we honour your preference
When data is no longer required, it is securely deleted or anonymised.
9. WHO WE SHARE YOUR DATA WITH
We do not sell, rent, or trade your personal data to any third party.
We may share your information with carefully selected third-party service providers who assist us in running our business. These providers act either as data processors (acting on our instructions) or as independent data controllers under their own privacy policies. We share only the information necessary for the relevant purpose.
Our current service providers include:
Platform and Hosting:
Uscreen - video membership platform for Anand Studio. Uscreen, Inc., 1390 Market Street, Suite 200, San Francisco, CA 94102, USA. Data transfers are governed by Standard Contractual Clauses. Privacy policy: uscreen.tv/privacy-policy
Squarespace - website hosting and creation. Squarespace Ireland Ltd, Le Pole House, Ship Street Great, Dublin 8, Ireland. Third-country transfers: EU-US Data Privacy Framework, Standard Contractual Clauses. Privacy policy: squarespace.com/privacy
HeyClients — funnel, email, and client management platform. HeyClients, Inc. (heyclients.io). Legal basis: Legitimate Interests (Art. 6(1)(f) GDPR). Privacy policy: heyclients.io/privacy. Data may be processed in the United States; transfers are governed by Standard Contractual Clauses.
Payment Processing:
Stripe - payment processing. Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA. Third-country transfer basis: EU-US Data Privacy Framework. Privacy policy: stripe.com/privacy
PayPal - payment processing. PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Privacy policy: paypal.com/privacy
Klarna — buy now, pay later and payment services. Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna is a licensed bank regulated by the Swedish Financial Supervisory Authority (Finansinspektionen). Legal basis: Contract performance (Art. 6(1)(b) GDPR); Legitimate Interests (Art. 6(1)(f) GDPR). Privacy policy: klarna.com/international/privacy-policy. Data transfers outside the EEA are governed by Standard Contractual Clauses.
Clearpay (Afterpay) — buy now, pay later payment services. In Spain and the EU, Clearpay operates as Clearpay, S.A.U., authorised by the Spanish Ministry of Economy and supervised by the Bank of Spain. Clearpay is a subsidiary of Afterpay Limited (Block, Inc.), Level 1, 357 Collins Street, Melbourne VIC 3000, Australia. Legal basis: Contract performance (Art. 6(1)(b) GDPR); Legitimate Interests (Art. 6(1)(f) GDPR). Privacy policy: clearpay.es (or clearpay.co.uk/en-GB/privacy-policy for EU customers). Data transfers outside the EEA are governed by Standard Contractual Clauses.
Communication and Scheduling:
Zoom - video conferencing. Zoom Video Communications, Inc., 55 Almaden Blvd, San Jose, CA 95113, USA. Third-country transfer basis: EU-US Data Privacy Framework, Standard Contractual Clauses. Privacy policy: zoom.us/privacy
WhatsApp - messaging. WhatsApp Ireland Limited, 4 Grand Canal Quay, Dublin 2, Ireland. Third-country transfer basis: EU-US Data Privacy Framework. Privacy policy: whatsapp.com/legal/privacy-policy
Calendly - appointment scheduling. Calendly LLC., 271 17th St NW, Atlanta, GA 30363, USA. Third-country transfer basis: Standard Contractual Clauses. Privacy policy: calendly.com/privacy
Analytics and Marketing:
Google Analytics - website analytics. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Third-country transfer basis: EU-US Data Privacy Framework, Standard Contractual Clauses. Privacy policy: policies.google.com/privacy. Opt-out: tools.google.com/dlpage/gaoptout
Meta (Instagram / Facebook) - social media and advertising. Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Third-country transfer basis: EU-US Data Privacy Framework, Standard Contractual Clauses. Privacy policy: facebook.com/about/privacy
Business Operations:
Google Workspace - email, documents, and cloud storage. Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland. Third-country transfer basis: EU-US Data Privacy Framework, Standard Contractual Clauses. Privacy policy: policies.google.com/privacy
We may also disclose your information where required to do so by law, by a court order, or by a regulatory authority, or where necessary to establish, exercise, or defend our legal rights.
In the event that Anand Way of Life undergoes a business transition (merger, acquisition, or sale of assets), your personal data may be transferred as part of that transaction, subject to applicable data protection law and appropriate safeguards.
10. COOKIES AND TRACKING TECHNOLOGIES
Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies to operate our website, remember your preferences, analyse site usage, and support our marketing.
Types of cookies we use:
Strictly necessary cookies: Required for the website to function. These cannot be switched off. No consent is required.
Analytics cookies: Help us understand how visitors use our site (e.g. Google Analytics). We seek your consent before placing these.
Marketing/advertising cookies: Used to show relevant advertising and measure its effectiveness. We seek your consent before placing these.
Your cookie choices:
Where required by law, we will ask for your consent before placing non-essential cookies. You may also control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.
You can opt out of Google Analytics at any time at tools.google.com/dlpage/gaoptout and manage advertising preferences at adssettings.google.com.
11. INTERNATIONAL DATA TRANSFERS
Some of the service providers we use are based outside the European Economic Area (EEA), including in the United States. Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:
Standard Contractual Clauses (SCCs) approved by the European Commission under Art. 46(2)(c) GDPR
EU-US Data Privacy Framework (where applicable)
Adequacy decisions by the European Commission
Full information on international transfers and applicable safeguards is available on the European Commission's website at commission.europa.eu/law/law-topic/data-protection.
12. DATA SECURITY
We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures include:
TLS/HTTPS encryption across our website and platforms
Access controls limiting who within our operation can access personal data
Use of reputable, security-certified third-party platforms
Please be aware that no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you use our services at your own risk in this regard. You are responsible for maintaining the security of any account credentials you use to access our services.
13. YOUR RIGHTS UNDER GDPR AND SPANISH LAW
Under the GDPR and the Spanish LOPDGDD (Ley Orgánica 3/2018), you have the following rights in relation to your personal data:
Right of access (Art. 15 GDPR): You may request confirmation of whether we process your personal data and, if so, receive a copy of it.
Right to rectification (Art. 16 GDPR): You may request that we correct inaccurate or incomplete data.
Right to erasure / "right to be forgotten" (Art. 17 GDPR): You may request that we delete your personal data in certain circumstances - for example, where it is no longer necessary for the purposes for which it was collected.
Right to restriction of processing (Art. 18 GDPR): You may request that we limit how we use your data in certain circumstances.
Right to data portability (Art. 20 GDPR): Where processing is based on consent or a contract, and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
Right to object (Art. 21 GDPR): You have the right to object at any time to processing based on legitimate interests - including direct marketing. Where you object to direct marketing, we will stop processing your data for that purpose immediately.
Right to withdraw consent (Art. 7 GDPR): Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Right not to be subject to solely automated decision-making (Art. 22 GDPR): We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these rights, please contact us at nikita@anandwayoflife.com. We will respond within 30 days. We may need to verify your identity before fulfilling your request.
14. CHILDREN'S PRIVACY
Our website and services are not directed at children under the age of 14. Under Spanish law (LOPDGDD Art. 7), the minimum age for a child to give consent to data processing is 14. We do not knowingly collect personal data from children under 14. If you become aware that a child under 14 has provided us with personal data without appropriate parental consent, please contact us immediately and we will delete that information.
15. LINKS TO THIRD-PARTY WEBSITES
Our website and platforms may contain links to third-party websites and services. We are not responsible for the privacy practices of those third parties. We recommend that you review their privacy policies before providing them with any personal information.
16. SOCIAL MEDIA
We maintain a presence on Instagram and Facebook (Meta). When you interact with us on these platforms, Meta processes your data in accordance with its own privacy policy. We have limited control over this processing. Where we operate a Facebook Page, we and Meta are jointly responsible for the initial collection of data in relation to page visits ("Page Insights"), in accordance with Meta's Page Controller Addendum.
17. GOVERNING LAW
This Privacy Policy is governed by the laws of Spain and, where applicable, European Union data protection law. Any disputes arising in relation to this Privacy Policy shall be subject to the jurisdiction of the courts of Palma de Mallorca, Spain, without prejudice to your right to bring a complaint before the AEPD or your local supervisory authority.
18. UPDATES TO THIS POLICY
We review and update this Privacy Policy periodically to reflect changes in our services, technology, or legal requirements. The most recent version will always be published at anandwayoflife.com with the date it was last updated.
Where changes are material - meaning they significantly affect how we collect or use your personal data - we will notify you by email or through a prominent notice on our website before the changes take effect.
19. CONTACT
For any questions, concerns, or requests relating to this Privacy Policy or your personal data:
Nikita Anand | Anand Way of Life | Anand Studio nikita@anandwayoflife.com anandwayoflife.com Mallorca, Spain