Privacy Policy

1. Who we are

This Privacy Policy explains how Blue Dot Transform Consulting Pvt. Ltd. ("we", "us", "our"), a company incorporated in India, collects, uses, and protects personal information when you register for, attend, or otherwise interact with the "Power of the Subconscious Mind" masterclass and related communications.

For visitors in the UK, EU/EEA, and other jurisdictions with a data controller definition, Blue Dot Transform Consulting Pvt. Ltd. is the data controller of your personal data. Contact: support@avinashanandsingh.com.

2. Scope & jurisdictions

This Policy applies globally to every visitor and customer of our website and Masterclass — including residents of India, the United Arab Emirates, the United Kingdom, the United States, Australia, Singapore, and Malaysia. Where the laws of your jurisdiction grant you additional rights, we honour those in the jurisdiction-specific sections below (UK/EU GDPR, USA CCPA/CPRA, UAE PDPL, Australia Privacy Act, Singapore & Malaysia PDPA).

If any provision of this Policy conflicts with a mandatory local law that applies to you, that local law prevails to the extent of the conflict.

3. What we collect

We collect only the information we actually need to deliver the Masterclass, keep our service safe, and comply with law.

Information you give us

• Identity: full name.
• Contact: email address, mobile number (with country code).
• Transaction: the fact that you paid, the currency and amount, and a transaction reference. Full payment card, bank, or wallet details are processed by our payment partner (Razorpay) and are never stored on our servers.
• Voluntary: anything you choose to share via support emails, surveys, community posts, or testimonials.

Information collected automatically

• Device & usage: browser type, approximate location derived from IP address, pages viewed, time on page, referrer, language, screen size, operating system, user agent.
• Attribution parameters: UTM parameters and click IDs (e.g. utm_source, utm_medium, utm_campaign, gclid, fbclid, msclkid, ttclid) so we can measure which campaigns work.
• Cookies & local storage: essential (session, checkout state, consent decision), analytics (aggregate site usage), and — only with your explicit consent — advertising (Meta Pixel, Google Ads).

Information we do not collect

• Special-category / sensitive data (health, race, religion, sexual orientation, political opinions, biometrics, genetic data). Please do not submit these via any form on our site.
• Children's data (see Section 17 below).

4. Lawful basis for processing

Where UK GDPR, EU GDPR, UAE PDPL, or a similar law applies, we rely on one or more of the following legal bases:

• Contract — to register you for the Masterclass, take payment, and deliver the session, recording, or bonuses you purchased.
• Legitimate interest — to keep our service secure (fraud & abuse prevention), measure aggregate site performance, and improve future offerings, provided this does not override your privacy rights.
• Consent — for non-essential cookies (analytics & advertising) and for marketing emails / WhatsApp messages outside the transactional scope. You may withdraw consent at any time (Section 9 & the "Manage Cookies" footer link).
• Legal obligation — to meet tax, accounting, anti-money-laundering, and other statutory duties.

5. How we use it

• To confirm your registration and deliver the live session (Zoom link, reminders, calendar invite).
• To provide the recording, WhatsApp community, meditation audio, and other bonuses if you purchased them.
• To provide customer support if you contact us.
• To send relevant updates or future offerings, only where you have not opted out (and, in jurisdictions requiring opt-in, only where you have opted in).
• To measure performance of our marketing, using aggregate and pseudonymised data, and improve the funnel.
• To meet our legal, accounting, tax, and regulatory obligations.
• To defend our legal rights, respond to lawful requests, and prevent fraud or abuse of our service.

We do not engage in automated decision-making that produces legal or similarly significant effects about you without human review.

6. Who we share it with

We do not sell your personal information. We share limited data only with service providers we need to operate the Masterclass, each of which is contractually bound to protect your data:

• Payment processor — Razorpay Software Pvt. Ltd. (INR payments) and Razorpay International (USD payments).
• Automation / workflow provider — Pabbly Connect (Magnet Brains Software Technology Pvt. Ltd.) for triggering post-payment communications.
• Email / messaging providers — for transactional and marketing emails, WhatsApp confirmations, and reminders.
• Webinar / streaming platform — Zoom Video Communications, Inc.
• Analytics & ad partners — Google LLC (Google Tag Manager, Google Analytics 4, Google Ads) and Meta Platforms, Inc. (Facebook Pixel, Conversions API), but only after you consent via the cookie banner.
• Cloud & storage vendors — for spreadsheet-based CRM and file storage.
• Legal, tax, and professional advisors — where reasonably necessary.
• Authorities — when required by law, regulation, or valid legal process.

7. International data transfers

Because we operate from India and our vendors are located globally (including the USA, Ireland, Singapore, and the UAE), your personal data may be transferred outside your country of residence. Where such transfers are subject to the UK GDPR, EU GDPR, or UAE PDPL, we rely on one or more of:

• Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the UK Addendum;
• The recipient country's adequacy decision (where one exists);
• Your explicit consent to the transfer where no other safeguard applies.

You can request a copy of the safeguards in place for a specific transfer by emailing us.

8. Cookies & tracking technologies

We use cookies and similar technologies (localStorage, sessionStorage, pixels, tags) in three categories:

• Strictly necessary (always on): session identifier, checkout state, form-fill recovery, cookie-consent decision. Without these the site cannot function.
• Analytics (on with consent): Google Analytics 4, Google Tag Manager. Measures aggregate usage of the site; helps us improve.
• Advertising (on with consent): Meta Pixel + Meta Conversions API, Google Ads conversion tracking. Measures which ads convert; used to build lookalike audiences.

On our international landing page (grow.html) all non-essential cookies are blocked by default until you click "Accept All" in the cookie banner. You can revisit your choice any time via the "Manage Cookies" link in the footer.

You can also disable cookies in your browser settings; some features may not work without them.

9. Your rights (all jurisdictions)

Wherever you live, you have the right to:

• Request a copy of the personal data we hold about you (right to access).
• Correct inaccurate or incomplete data (right to rectification).
• Ask us to delete your data (right to erasure / "right to be forgotten"), subject to legal retention obligations.
• Withdraw consent for marketing communications or cookies at any time, without affecting past processing.
• Object to processing based on legitimate interest (right to object).
• Request restriction of processing (right to restrict).

To exercise any of these, email support@avinashanandsingh.com with the subject line "Privacy Request". We will respond within 30 days (or such shorter period as your local law requires).

10. UK / EU / EEA (UK GDPR & EU GDPR)

If you are in the United Kingdom, the European Union, or the European Economic Area, in addition to the rights in Section 9 you also have:

• Right to data portability — receive your data in a structured, commonly used format and transfer it to another controller.
• Right not to be subject to automated decision-making that produces legal or similarly significant effects.
• Right to lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ICO); in the EU/EEA, your national data protection authority (see edpb.europa.eu).

11. USA — California residents (CCPA / CPRA)

If you are a California resident, in addition to Section 9 you also have:

• Right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose, and the categories of third parties with whom we share it.
• Right to delete personal information (subject to legal exceptions).
• Right to correct inaccurate personal information.
• Right to opt out of "sale" or "sharing" of personal information for cross-context behavioural advertising. We do not sell your personal information. Sharing personal information with our advertising partners (Meta, Google) for measurement of ad performance may qualify as "sharing" under CPRA; you can opt out via the cookie banner or the "Manage Cookies" footer link.
• Right to limit the use of sensitive personal information — we do not collect sensitive personal information for the purposes covered by this right.
• Right to non-discrimination for exercising any of the above rights.

To submit a verifiable consumer request, email support@avinashanandsingh.com with the subject "California Privacy Request" and include enough detail for us to verify your identity.

12. UAE (Federal Decree-Law No. 45 of 2021 on Personal Data Protection — "PDPL")

If you are in the United Arab Emirates, you have the rights set out in Section 9, plus the right to lodge a complaint with the UAE Data Office. Where PDPL applies, we process data only for specified, explicit, and legitimate purposes and take reasonable steps to keep data accurate and up to date.

13. Australia (Privacy Act 1988, Australian Privacy Principles)

If you are in Australia, we handle your personal information in accordance with the Australian Privacy Principles (APPs). You have the rights in Section 9. You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

14. Singapore & Malaysia (PDPA)

If you are in Singapore, we comply with the Personal Data Protection Act 2012 (PDPA); complaints may be lodged with the Personal Data Protection Commission (PDPC).

If you are in Malaysia, we comply with the Personal Data Protection Act 2010; complaints may be lodged with the Department of Personal Data Protection (JPDP).

15. Retention

We keep your information only as long as we need it to provide the service and to meet legal, accounting, or tax obligations — typically:

• Registration & contact data: up to 7 years after your last interaction (matches Indian tax retention requirements).
• Transaction records: up to 7 years for tax and audit purposes.
• Marketing consent records: until you withdraw consent, then a further 3 years to evidence compliance.
• Cookie consent decisions: up to 13 months, after which we re-prompt.

When the retention period ends we delete or irreversibly anonymise the data.

16. Security

We use reasonable industry-standard safeguards — encryption in transit (TLS 1.2+), access controls, regular vendor review, and least-privilege access to buyer data — to protect your information. No system on the internet is ever 100% secure, so we cannot guarantee absolute security, but we treat it as a top priority. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority within the timeframe required by law (72 hours under UK/EU GDPR).

17. Children

The Masterclass is intended for adults (18+). We do not knowingly collect information from anyone under 18. If you are a parent or guardian and believe a minor has registered, please email us and we will delete the record. For US visitors under 13, we comply with COPPA — we do not knowingly collect data from children under 13.

18. Do Not Track & Global Privacy Control

Some browsers transmit a "Do Not Track" (DNT) signal or a Global Privacy Control (GPC) header. Where required by law (e.g. California under CPRA), we treat a GPC signal as an opt-out of the "sale" or "sharing" of personal information for cross-context behavioural advertising. DNT is not a legally-recognised signal in most jurisdictions but we still take it into account where feasible.

19. Changes

We may update this Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated by email or via a prominent notice on this page at least 14 days before they take effect.

20. Contact & complaints

For any privacy question, request, or complaint, email support@avinashanandsingh.com with the subject line "Privacy". If we do not resolve your complaint to your satisfaction, you may escalate to the supervisory authority in your jurisdiction (see the country-specific sections above).

Postal address: Blue Dot Transform Consulting Pvt. Ltd., India. (Full registered-office address available on request.)