Privacy notice

What we collect, and why

To run your registration - name, email, country, and what you booked: without these there is no booking. Payment details go directly to Stripe, our payment processor; card numbers never touch our servers.

Only if you give them - phone or WhatsApp number (for booking updates on WhatsApp, sent only after you verify the number with a code), city, state, date of birth, gender, and the language you prefer. All of these are optional and live in your own profile.

Only if you tick the box - news about future programmes. Marketing email is off until you turn it on, we keep a record of when and where you did, and every such email carries a one-click unsubscribe that works immediately.

Emails we must send regardless - receipts, invoices, entry passes, payment reminders - belong to your booking and are not marketing.

Who processes it for us

Your data stays with Oneness and the services that do one job each for us: Stripe (payments), our email delivery provider (sending the emails described above), Meta WhatsApp and LINE (messages you asked for), Kajabi (course access after a purchase), DocuSign (partner agreements), Obvio / Zoom (joining an online event), DeepL (translating our own page texts - never your answers), and Google / Facebook / Apple only if you choose to sign in with them. We do not sell your personal information, and we do not run third-party advertising trackers.

Some of these services process data outside your own country. Where that happens we rely on the service's standard data-protection terms (such as EU standard contractual clauses).

How long we keep it

Invoices and payment records: as long as accounting law requires. Sign-in codes and links: days. Message contents: 90 days after sending. Abandoned registrations and declined applications: one year. Your profile and booking history: while you have a relationship with us, or until you ask us to erase it.

Your rights

From your account page you can see and correct your profile, download everything we hold about you as a file, change any consent, and ask us to erase your data. Erasure removes your identity everywhere; only the figures on invoices stay, because tax law requires it. You can also write to info@theonenessmovement.org for any of this, or to complain - and you always have the right to complain to your local data-protection authority.

Region notes

European Union and United Kingdom - the lawful bases we rely on are contract (your booking), legal obligation (invoices), consent (marketing, optional profile details), and legitimate interest (service messages about a booking you made). All the rights above are GDPR rights.

India - info@theonenessmovement.org is our grievance contact under the Digital Personal Data Protection Act; we answer within the statutory time.

United States (California) - we do not sell or share your personal information as the CCPA defines it; the download and deletion rights above are your CCPA rights to know and to delete.

Canada - marketing email is sent only on the express consent described above (CASL).

Japan - the purposes above are the purposes of use under the APPI, and the list of services is our record of third-party provision.