Privacy policy.

1. Introduction

This Privacy Policy explains how Prish Oy, trading as Pukhraj Ranjan ("we," "us," "our"), collects, uses, shares, and protects your personal data when you visit pukhrajranjan.com, purchase our coaching programs or products, or otherwise interact with us.

We are the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) and applicable national data protection law.

Controller: Prish Oy (trading as Pukhraj Ranjan)
Merikorttikuja 4 A11, 00960 Helsinki, Finland
VAT Number - FI 3012147-9
Email: hello@pukhrajranjan.com
Phone : +358449223854

This policy applies to our website, our coaching Services (as described in our Terms of Service), and any related community spaces, email lists, or booking tools we use.

2. What Personal Data We Collect

  • Identity & contact data: name, email address, phone number, postal/billing address.

  • Payment data: billing details processed by our payment provider (e.g., Stripe/Squarespace Payments) — we do not store full card numbers ourselves.

  • Account & program data: purchase history, program enrollment, progress, session bookings, and materials you submit (e.g., journal entries, worksheets).

  • Communications: messages you send us by email, contact forms, or community/messaging platforms (e.g., WhatsApp), and our replies.

  • Technical & usage data: IP address, browser type, device information, pages visited, and cookies (see Section 5).

  • Information you choose to share during coaching, which may include sensitive personal details (see Section 3).

3. Special Category Data Shared During Coaching

Coaching conversations may involve you voluntarily sharing sensitive personal information — for example, details about your health, emotional wellbeing, family life, or beliefs ("special category data" under GDPR Article 9).

We only process this data with your explicit consent, given by choosing to share it with us in a coaching context, and only to the extent necessary to provide the coaching Service you've asked for. We do not use this information for marketing or share it with third parties beyond what's described in Section 6. You may decline to share any information you're not comfortable disclosing.

4. How We Use Your Data & Our Legal Basis

  • Deliver purchased programs, memberships, or coaching — Performance of a contract

  • Process payments and installment/deposit plans — Performance of a contract

  • Respond to inquiries and provide support — Performance of a contract / legitimate interest

  • Send program-related updates and logistics — Performance of a contract 

  • Send marketing emails and newsletters — Consent (you can withdraw anytime)

  • Improve our website and offerings — Legitimate interest

  • Comply with tax, accounting, and legal obligations — Legal obligation

  • Process sensitive information shared during coaching — Explicit consent

We don't use your data for automated decision-making or profiling that has a legal or similarly significant effect on you.

5. Cookies & Website Analytics

Our website may use cookies and similar technologies to:

  • Keep the site functioning properly (essential cookies)

  • Understand how visitors use the site (analytics cookies, e.g., Google Analytics)

  • Remember your preferences

Where required by law, we'll ask for your consent before setting non-essential cookies, via a cookie banner. You can manage or withdraw cookie consent at any time through your browser settings or our cookie preference tool, where available.

6. Third Parties & Processors

We share personal data only with trusted service providers who help us run our business, under appropriate data processing agreements:

  • Payment processing: [e.g., Squarespace Payments/Stripe] — to process purchases and installment/deposit payments.

  • Website hosting & platform: Squarespace

  • Content & journaling tools: Notion for the Journal Ecosystem included in some programs.

  • Community & messaging: Currently Whatsapp for community spaces and group communication.

  • Email marketing: Substack for newsletters and program communications.

  • Video hosting: Zoom, for course videos and live calls.

  • Analytics: Google Analytics

We do not sell your personal data. We only disclose it to third parties beyond those listed here if required by law, to protect our legal rights, or with your consent.

7. International Data Transfers

Some of the service providers listed in Section 6 may process data outside the EU/EEA (e.g., in the United States). Where this happens, we rely on appropriate safeguards recognized under GDPR, such as the European Commission's Standard Contractual Clauses, or the provider's own certified adequacy mechanism (e.g., the EU-U.S. Data Privacy Framework), to ensure your data remains protected.

8. Data Retention

We keep your personal data only as long as necessary for the purposes described in this policy:

  • Customer/purchase records: for the duration of our relationship plus the period required by tax and accounting law (typically up to 10 years in the EU).

  • Coaching notes & session content: for the duration of your engagement plus a reasonable period afterward, then deleted or anonymized, unless you request earlier deletion (see Section 9).

  • Marketing data: until you unsubscribe or withdraw consent.

  • Website/analytics data: per our analytics provider's default retention settings, typically 14–26 months.

When data is no longer needed, we securely delete or anonymize it.

9. Your GDPR Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you

  • Rectify inaccurate or incomplete data

  • Erase your data ("right to be forgotten"), subject to legal retention requirements

  • Restrict or object to certain processing

  • Data portability — receive your data in a portable format

  • Withdraw consent at any time, where processing is based on consent

  • Lodge a complaint with your national data protection authority

To exercise any of these rights, contact us at hello@pukhrajranjan.com. We'll respond within one month, as required by GDPR.

10. Data Security

We use reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration — including encrypted payment processing, access controls, and working only with reputable service providers. No method of transmission or storage is 100% secure, but we take your privacy seriously and act promptly to address any issues.

11. Children's Privacy

Our Services are intended for adults (18+). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We'll post the updated version here with a revised "last updated" date, and notify you by email if changes materially affect how we use your data.

13. Contact & Complaints

Questions about this policy or your data? Reach out to:

Pukhraj Ranjan

Prish OY
Merikorttikuja 4 A11, 00960 Helsinki, Finland
VAT Number - FI 3012147-9
Email: hello@pukhrajranjan.com
Phone : +358449223854

We aim to respond to all support requests within 48 hours..

If you're not satisfied with our response, you have the right to lodge a complaint with your national data protection authority. Our business is established in Finland, so this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).