Privacy Policy
Last updated: 31 October 2026
1. Controller
The controller responsible for processing personal data on this website is Gayatri Interdisciplinary Research Institute Pvt. Ltd. ("GIRI"), Jay Ganesh Galli 129, Gairigaun, Kathmandu Metropolitan City – Ward 9, Kathmandu, Nepal, which operates the brand Kathmandu Meditates. Contact: hello@kathmandumeditates.com or the contact form. Further provider details are in the Impressum.
2. Principles
We process only the personal data we need to operate this website and to send the emails you request. We do not sell personal data. This website itself sets no cookies and uses no tracking or advertising technologies. Embedded third-party content is described under "Embedded content".
3. Hosting and server log data
The website is hosted by Cloudflare Pages. When you visit it, Cloudflare processes technical data such as your IP address, the date and time of the request, the requested page, and browser and device information, in order to deliver the site and to protect it against abuse. Legal basis: our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR).
4. Email challenge
If you register for the free 21-day challenge, we process your email address, the time of registration, proof of your consent and, if you tick the corresponding box, your interest in group meditations, seva (selfless service) and news about the timer. Emails are sent through MailerLite, which processes this data on our behalf. After you register, we send a confirmation email, and you are added to the list only once you confirm (double opt-in).
Legal basis: your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time with effect for the future by using the unsubscribe link in every email or by writing to us. We keep your data until you unsubscribe. After that we retain only the minimum record needed to make sure you are not contacted again and to document your consent and its withdrawal.
5. Embedded content
Meditation timer. The page "Meditate" embeds our meditation timer, which is hosted on GitHub Pages (GitHub, Inc., USA). When you open that page, your browser connects to GitHub and your IP address is transmitted to it. The timer runs in your browser and may store your settings locally on your device. Legal basis: our legitimate interest in offering the timer (Art. 6(1)(f) GDPR).
YouTube video. The page "Meditate" embeds a YouTube video in its privacy-enhanced mode (youtube-nocookie.com). When you open the page, your browser connects to YouTube and your IP address is transmitted to it, and YouTube may store or read information on your device once you play the video. Legal basis: our legitimate interest in presenting the video (Art. 6(1)(f) GDPR). YouTube's privacy policy applies.
Instagram. The home page shows preview images of four of our Instagram reels, stored on this website. Nothing is loaded from Instagram until you click a preview; then you leave this website and go to Instagram (Meta Platforms), whose privacy policy applies.
6. Contact by email or form
If you write to us by email or through the contact form, we process your name (if given), your email address and your message in order to answer you. Emails to hello@kathmandumeditates.com are forwarded by Cloudflare Email Routing to our mailbox at Google (Gmail). The contact form is sent through the form service FormSubmit (formsubmit.co, USA) to the same mailbox. Legal basis: our legitimate interest in answering enquiries and, where your message concerns a contract or a request you made, pre-contractual measures (Art. 6(1)(f) and (b) GDPR). We delete correspondence when it is no longer needed.
7. External links and affiliate links
This website links to external sites, including Instagram, GIRI, the Kathmandu Philosophy Club and BookRetreats. We have no influence over their data processing; their own privacy policies apply once you follow a link. Links to BookRetreats are affiliate links and are marked as advertising. If you book through one, BookRetreats may use cookies to attribute the booking to us and pays us a commission. We do not receive your personal data from that process.
8. Photos and video
Photos and videos of group practices appear on this website with the agreement of the people shown. If you appear in an image and would like it removed, please contact us and we will remove it promptly.
9. Transfers to third countries
We are established in Nepal, and our service providers may process data in the European Union, the United States or other countries. Where required, transfers rely on the safeguards offered by the respective provider, such as standard contractual clauses or an adequacy decision. Details are set out in the providers' own terms.
10. Your rights
Under applicable data-protection law you have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interests. You may withdraw any consent at any time. You also have the right to lodge a complaint with a data-protection supervisory authority, for example in the country where you live. To exercise your rights, contact us at hello@kathmandumeditates.com.
11. Changes
We may update this policy when our services or legal requirements change. The current version is always available on this page.