Privacy Policy.

Who we are

This website is published by KIKI Wellness Retreat ("KIKI", "we", "us"), a wellness retreat taking shape at Kadadhe in the Sahyadris near Pune, Maharashtra, India. For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), KIKI is the data fiduciary for the personal data described here.

For anything about your personal data, write to concierge@kikiwellnessretreat.com.

What we collect, and when

Reading this website collects nothing about you by name. It sets no cookies today. An enquiry you send waits in your browser only until it has reached us, usually within seconds, and is then deleted there; if your connection drops first, it is sent the next time you open the site.

When you send the enquiry form, you give us your name, email address, phone number, where you live if you choose to say, and a message if you choose to write one. Our server also records the page the form was on, the type of browser used, the time, and a hashed form of your internet address that cannot be turned back into the address itself. The hash exists to stop automated abuse of the form.

We do not collect sensitive personal data, payment details or identity documents through this website. There is no booking or payment on the site.

Why we use it

To answer your enquiry and to continue that conversation with you about KIKI. To understand who is interested in the retreat as it takes shape. To protect the form and the site from misuse.

You give consent to this use when you send the form, which asks for these details for these purposes and nothing more. We do not sell personal data, and we do not use it for advertising to you unless you have separately agreed to that.

Where it goes and who sees it

An enquiry is delivered to the people at KIKI who answer enquiries, as an email and a row in a private spreadsheet that only they can open. When the retreat's own records system is in place, enquiries will also be stored there, under the same access.

The website is hosted by Vercel Inc., and the delivery of enquiries uses Google services. Both may process data on servers outside India. The Central Government may restrict transfers to certain countries under the DPDP Act, and we will follow any such restriction.

We do not share personal data with anyone else, except where the law requires it or to protect the rights and safety of people or of KIKI.

How long we keep it

We keep an enquiry for as long as the conversation it began is open, and for up to twenty-four months after the last contact, unless you ask us to delete it sooner or the law requires us to keep it longer. After that it is deleted.

Your rights

Under the DPDP Act you may ask us what personal data we hold about you and how we use it; ask us to correct, complete or update it; ask us to delete it; withdraw the consent you gave, with effect from that point; and nominate another person to exercise these rights for you if you are unable to.

To exercise any of these, write to concierge@kikiwellnessretreat.com from the email address you gave us, or tell us how to confirm it is you. We respond within thirty days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

Children

This website is not directed at children, and the enquiry form is meant for adults. If you believe a person under eighteen has sent us personal data, write to us and we will delete it.

Keeping it safe

The site is served only over an encrypted connection. The form is checked and rate limited on our server, and the internet address of the sender is stored only as a hash. Access to enquiries is limited to the people who answer them. No system is perfectly secure; if a breach affects your data, we will inform you and the Data Protection Board as the DPDP Act requires.

Analytics, cookies and other sites

If we add analytics or marketing tools to the site, they will run only after you accept them on the notice that appears, and the Cookie Policy will name each one, what it sets and for how long.

Links to other websites lead to sites with their own privacy practices, which we do not control.

Changes to this policy

When we change this policy we update the date at the top. A change that affects how we use data you have already given us will be told to you by email.