Privacy Policy
This Privacy Policy describes how Vayuma Rise collects, uses, discloses, and protects personal data in connection with our conscious entrepreneurship and spiritual growth programs. The policy applies to information collected through our website kwumrise.biz, registration forms, events, workshops, and related communications. Vayuma Rise operates from Singapore and adheres to applicable Singapore data protection standards as well as relevant international frameworks when processing personal data of non-Singapore residents. The policy explains data categories, processing purposes, legal bases, retention periods, data sharing, international transfers, and your rights as a data subject. For questions or to exercise your rights, contact our data protection representative using the contact details provided below.
Key Definitions
The following definitions clarify terms used in this policy. They describe categories of personal data, the role of parties involved, and key concepts related to processing activities carried out by Vayuma Rise in connection with its programs and services.
Data Collection and Use
We collect a combination of data that you provide directly and information gathered automatically when you use our website or attend our programs. Collection is limited to what is reasonably necessary for program delivery, administration, communication, and legal compliance.
Data You Provide
When you register for programs, subscribe to updates, or contact us, you provide information required to deliver services, manage participation, and respond to inquiries. We limit collection to data relevant to those purposes.
- Basic contact details such as full name and email address used for registration and program communication.
- Contact telephone number and postal address when required for invoicing or event logistics.
- Billing and payment information submitted to our payment processor to complete purchases or manage refunds.
- Professional and business information provided for cohort placement, networking, or eligibility assessment.
- Responses to program questionnaires, intake forms, or feedback surveys designed to tailor the participant experience.
- Communications you send to us, including email correspondence and support requests.
Automatically Collected Data
Some information is collected automatically during website use or program participation to improve service reliability, analyze trends, and support security measures. This collection is limited to data necessary for those operational purposes.
- Technical data such as IP address, browser type, device identifiers, and operating system.
- Usage data including pages visited, time spent on pages, click patterns, and referral sources.
- Cookies and similar tracking technologies used to remember preferences and measure site performance.
- Event participation metadata such as registration timestamps, attendance logs, and session usage.
- Analytics data collected by third-party providers to evaluate service effectiveness and user behavior.
- Location data when explicitly enabled by a user for event coordination or geolocation features.
Third-Party Data Sources
We may receive data from third parties that assist in delivering our services, processing payments, or providing analytics. Any such sharing is limited to what is necessary for the relevant service and governed by contractual safeguards.
- Payment processors that handle transactions and provide confirmation details.
- Event platforms and scheduling providers that facilitate registrations and virtual sessions.
- Analytics and advertising partners that supply anonymized or pseudonymized usage data.
Purposes of Processing
We process personal data for specific, explicit, and legitimate purposes. Processing is restricted to what is necessary to achieve these purposes and to comply with applicable laws.
- To deliver and manage enrollment in conscious entrepreneurship and spiritual growth programs.
- To communicate program details, updates, and administrative notices to participants.
- To process payments, invoices, and refunds through our designated payment providers.
- To personalize content, recommend relevant resources, and improve user experience based on aggregated usage data.
- To fulfill legal and regulatory obligations, including tax and accounting requirements.
- To maintain security, detect and prevent fraud, and protect the integrity of our services.
- To conduct research and evaluation to improve program design and participant outcomes using aggregated, de-identified data where feasible.
- To respond to requests, inquiries, and to exercise our contractual rights and defenses.
Legal Basis for Processing
Where applicable, we rely on one or more lawful bases to process personal data, depending on the purpose and context of processing. These bases are set out below in broad terms.
- Consent: where you have given clear and specific consent for a particular purpose, such as receiving marketing communications.
- Contract performance: processing necessary to enter into or execute a contract for program participation and related services.
- Legal obligation: processing required to comply with applicable laws, such as tax or regulatory obligations.
- Legitimate interests: processing necessary for legitimate business operations, such as fraud prevention and improving services, provided those interests do not override your fundamental rights.
GDPR and International Rights
For residents of the European Economic Area and other jurisdictions that provide similar rights, certain GDPR-style protections may apply. We describe common rights below and provide methods to exercise them.
- Right of access: you may request a copy of personal data we hold about you.
- Right to rectification: you can ask us to correct inaccurate or incomplete information.
- Right to erasure: you may request deletion of personal data where legal grounds permit.
- Right to restriction of processing: you can request limits on how your data is used in certain circumstances.
- Right to data portability: where applicable, you may obtain and reuse your personal data across different services.
- Right to object: you may object to certain processing activities, including direct marketing where consent is not the legal basis.
Cookies and Tracking Technologies
We use cookies and similar technologies to provide essential site functionality, improve performance, and personalize content. Cookies do not generally contain information that personally identifies a user unless provided during site interactions.
Common cookie types include session cookies that expire when the browser closes, persistent cookies that remain for a set period, and third-party cookies set by external service providers for analytics or functionality.
Cookies we use are categorized as essential (required for site operation), performance (analytics and usage), functional (preferences and settings), and targeting (advertising and personalization where applicable).
You can manage cookie preferences via your browser settings or use available controls on our website to adjust non-essential cookie consent. Blocking some cookies may affect site functionality and user experience.
Cookie Policy
Data Sharing and Disclosure
We share personal data only as necessary for the purposes described in this policy and under contractual terms that require third parties to protect data in accordance with applicable laws.
- Service providers and vendors who process data on our behalf for payment processing, hosting, event management, and communications.
- Professional advisors and auditors engaged to perform legal, tax, or compliance tasks.
- Event partners or facilitators involved in delivering a specific program where participant information is needed for logistics.
- Authorities or other parties when required by law or to respond to lawful requests and legal processes.
- Affiliated entities for corporate administration and program coordination within the Vayuma Rise organization.
- Analytics and marketing providers, subject to consent where required, who assist in measuring and improving our services.
International Data Transfers
Personal data may be transferred to jurisdictions outside Singapore for processing by service providers or partners. When transfers occur, we apply protections such as contractual clauses, data access restrictions, or rely on legal adequacy findings where applicable.
Safeguards for international transfers include the use of standard contractual clauses, agreements that incorporate appropriate technical and organizational measures, data minimization, and encryption during transit and at rest where practical.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce agreements.
Account and registration information is retained for the duration of active participation and for a reasonable period thereafter for administrative, tax, and legal recordkeeping purposes, typically no longer than seven years unless otherwise required by law.
Communications and message history are retained for a limited period to ensure service continuity and to respond to inquiries; retention periods vary depending on the nature of the communication but are generally no longer than three years unless needed for legal reasons.
System and security logs are retained for operational and security analysis for a limited period, commonly up to 12 months, unless an incident requires extended retention.
When data is no longer required, we will securely delete or anonymize it in accordance with internal procedures and applicable legal requirements. Requests for deletion will be evaluated against the need to retain data for legal or contractual reasons.
Security Measures
Vayuma Rise implements organizational and technical measures to protect personal data against unauthorized access, disclosure, alteration, and loss. Security controls are reviewed periodically and adjusted to reflect changes in technology and regulatory expectations. While steps are taken to secure data, no system can be guaranteed completely secure; we therefore maintain incident response procedures to address any suspected data breaches.
- Encryption of data in transit using TLS and encryption of stored sensitive data where appropriate.
- Role-based access controls, multi-factor authentication for administrative access, and periodic access reviews.
- Regular security assessments, staff training on data protection practices, and defined incident response procedures.
Your Rights
Depending on applicable law and your location, you may have certain rights regarding your personal data. To exercise a right or make an inquiry, please contact us using the information below. We will respond within a reasonable timeframe and in accordance with legal requirements.
- Request access to the personal data we hold about you and obtain a copy in a commonly used format.
- Request correction or update of inaccurate or incomplete personal data.
- Request deletion of personal data where permitted by law, subject to retention obligations.
- Complain to a supervisory authority if you consider our processing of your personal data to be unlawful; we provide assistance to help resolve concerns where feasible.
- Data portability: request a copy of personal data in a commonly used, machine-readable format where applicable.
- Restriction of processing: request temporary limitation of processing while a dispute about accuracy or lawfulness is resolved.
- Withdraw consent: when processing is based on consent, you can withdraw that consent for future processing.
- Lodge a complaint: submit a complaint to a supervisory authority if you consider our processing of personal data to be non-compliant.
Exercising your privacy rights
If you wish to exercise any privacy right described in this policy, please contact us with a clear description of the request and any supporting details that will help us identify the relevant records. We may ask for additional information to verify your identity before fulfilling requests. Requests can be submitted in writing to our registered address or via email to [email protected]. For correspondence by post, use: Vayuma Rise, 302 Tiong Bahru Road, Singapore 168732.
We aim to acknowledge receipt of privacy requests within 10 business days and to provide a substantive response within 30 calendar days. Complex or voluminous requests may require additional time; when this is the case we will inform you of any necessary extension and its reasons.
Marketing communications
With your consent or where permitted by law, Vayuma Rise may send marketing communications about programs, workshops, and events. Communications will be limited to topics relevant to conscious entrepreneurship and spiritual growth. You will be informed of the type of content you will receive when you opt in, and we will process marketing preferences in accordance with applicable law.
You can opt out of marketing messages at any time using the unsubscribe link provided in our emails, or by contacting us at [email protected]. Opting out of marketing does not affect transactional messages related to programs you are enrolled in.
Children's privacy
Vayuma Rise is focused on adults and our services are not designed for children. We do not knowingly collect personal information from individuals under 16 without parental consent. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that data as permitted by law.
Third-party links and services
Our site and program materials may contain links to third-party websites or integrate third-party tools for payments, scheduling, and analytics. These links and integrated services have their own privacy practices which are not controlled by Vayuma Rise. Review third-party privacy policies before providing personal information.
Changes to this privacy policy
We review and may update this privacy policy periodically to reflect changes in our operations, legal obligations, or services. Material changes will be posted on our website at kwumrise.biz and will include the date the policy was last updated. Continued use of our services after changes are posted constitutes acceptance of the updated policy.