Privacy Policy

Bhupi Panesar | bhupipanesar.com | Last updated June 2026

Who We Are

This Privacy Policy explains how Bhupi Panesar (sole trader, based in London, UK)

collects, uses and protects your personal data when you use bhupipanesar.com,

mandalas4you.com or henna4you.com, or when you purchase or enquire about any

of our programmes, products or services.

Data controller: Bhupinder Panesar, reachable through our contact page

What Data We Collect

We may collect the following personal data:

  • Your name and email address when you sign up to our newsletter or contact

us

  • Your IP address and browser information when you visit our website
  • Any information you voluntarily share during sessions, in emails or in our

community groups

We do not collect sensitive personal data unless you choose to share it with us

during a session.

How We Use Your Data

We use your personal data to:

  • Process your orders and deliver our programmes, products and services
  • Send you booking confirmations, session links and programme materials
  • Send you our newsletter if you have signed up for it (you can unsubscribe at

any time)

  • Respond to your enquiries and provide customer support
  • Improve our website and services

We do not sell your data to third parties. Ever.

Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

  • Contract: to fulfil your order and deliver the services you have purchased
  • Consent: for our newsletter and marketing emails (you can withdraw consent

at any time)

  • Legitimate interests: to improve our services and communicate with existing

clients

Payments

Payments are processed through Stripe via Systeme.io. We do not store your full

payment card details. Stripe processes and stores payment information in

accordance with their own privacy policy and PCI DSS compliance standards.

Cookies

Our website currently uses only essential cookies necessary for the website to

function. We do not currently use tracking or analytics cookies.

We will update this policy before introducing any tracking or analytics tools and will

ask for your consent where required by law.

Email Marketing

If you sign up to our newsletter, we will send you updates about our programmes,

workshops and offers. You can unsubscribe at any time by clicking the unsubscribe

link in any email or through our contact page

We use Systeme.io to manage our email list. Your data is stored on their servers in

accordance with their privacy policy.

How Long We Keep Your Data

We keep your personal data for as long as necessary to deliver our services and to

comply with our legal obligations. If you ask us to delete your data, we will do so

unless we are legally required to keep it.

Your Rights

Under UK GDPR (and equivalent Canadian privacy law PIPEDA), you have the right

to:

  • Access the personal data we hold about you
  • Ask us to correct inaccurate data
  • Ask us to delete your data
  • Withdraw your consent to marketing at any time
  • Complain to the Information Commissioner's Office (ICO) in the UK if you

believe your rights have been breached

To exercise any of these rights, get in touch through our contact page

Third Party Services

We use the following third-party services which may process your data:

  • Systeme.io: website, funnels, email and payment processing platform
  • Stripe: payment processing
  • Zoom: delivery of online sessions and workshops
  • Cloudinary: image hosting
  • Substack: newsletter and content platform

Each of these services has their own privacy policy. We recommend reviewing them

if you have concerns.

International Transfers

Some of our third-party service providers are based outside the UK and EEA. Where

this is the case, we ensure appropriate safeguards are in place in accordance with

UK GDPR.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always

be on bhupipanesar.com. If we make significant changes we will let you know by

email.

Contact

If you have any questions about this Privacy Policy or how we handle your data,

please get in touch through our contact page