Privacy Policy

Updated April 2026

Bodhi is committed to protecting and respecting your privacy.

This policy explains when and why we collect personal information about people who visit our websites and use our services, how we use their information, the conditions under which we may disclose it to others, and how we keep it secure.

Bodhi is a project run by Prajna. Any questions regarding this Policy should be sent by email to contact@prajnaonline.org or by post to: Stichting Prajna, Van Ostadestraat 300, 1073TW Amsterdam, Netherlands.

The rules on processing of personal data are set out in the General Data Protection Regulation (EU) 2016/679 (the "GDPR").

Who Are We?

Bodhi is a project of Prajna, which is registered as a non-profit charitable organisation in The Netherlands (Stichting), registration number 80113761. Since 1979, Rigpa has been welcoming teachers of all Buddhist traditions, and many of the teachings given since that time form the basis of this website.

How Do We Collect Information from You?

We obtain information about you when you:

  • Use our websites

  • Contact us about courses, events, products, or services

  • Make a payment

  • Register for courses or events

  • Subscribe to our newsletter

What Type of Information Is Collected from You?

The personal information we collect may include, but is not limited to, your name, address, email address, and phone number. If you make a payment online or place an order, your card and other payment information is not held by us. It may be collected by our third-party payment processors, who specialise in the secure online capture and processing of credit/debit card transactions, as explained below.

How Is Your Information Used?

We may use your information to:

  • Process a payment that you have made

  • Process an event or course registration or subscription

  • Carry out our obligations arising from any contracts entered into by you and us

  • Seek your views or comments on the services we provide

  • Notify you of changes to our services

  • Post any printed material to you

  • Send you communications which you have requested and that may be of interest to you, including newsletters, information about events, or new features of the website

  • Communicate activities and promotions of associated Rigpa entities

We review our retention periods for personal information on a regular basis. We will hold your personal information on our systems for as long as is necessary for the relevant activity, as long as is set out in any relevant contract you may hold with us, as long as we are legally obliged to hold the data, or until you request that it is deleted. We are legally required to hold some types of information to fulfil our statutory obligations.

What Is Our Lawful Basis for Processing Your Personal Data?

Our lawful basis for processing your general personal data under Article 6 of the GDPR is as follows:

1. Consent of the data subject. We will directly ask for your consent to process data when you sign up for any of our email or mailing lists.

2. Processing necessary for the performance of a contract with the data subject or to take steps to enter into a contract. We will collect and use your personal data in the following circumstances:

  • When you place an order on our websites, so that we can process your payment, confirm transaction details, and arrange confirmation of membership or purchase of individual items, and delivery of any goods and services.

  • When you register for events, so that we can process your application and any payments, and, where applicable, arrange activities.

  • When you apply for any courses, so we can process your application and any payment involved, as well as inform you of further details.

  • When you subscribe to any of our mailing lists, so we can inform you on a regular basis about our activities.

3. Legitimate interests. Processing necessary for the purposes of the legitimate interests of the data controller or a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of the data subject.

Who Has Access to Your Information?

Stichting Prajna requires access to personal information as outlined above. It is important to note:

  • We will not sell or rent your information to third parties.

  • We will not share your information with third parties for marketing purposes.

Third-Party Service Providers Working on Our Behalf

We may pass your information to our third-party service providers, agents, subcontractors, and other Rigpa-related organisations for the purposes of completing tasks and providing services to you on our behalf (for example, to process website payments or to mail printed materials). When we use third-party service providers, we disclose only the personal information that is necessary to deliver the service, and our contracts require them to keep your information secure and not to use it for their own direct marketing purposes.

We will not release your information to third parties beyond Stichting Prajna and associated entities for them to use for their own direct marketing purposes, unless you have requested us to do so, or we are required to do so by law — for example, by a court order or for the purposes of prevention of fraud or other crime.

Website Platform

Our website is hosted on Squarespace, Inc. Squarespace provides us with the online platform that allows us to offer our services and content to you. Your data may be stored through Squarespace's data storage, databases, and general application infrastructure. Squarespace processes your data on secure servers behind firewalls. For more information, please review Squarespace's Privacy Policy.

Payment Processing

When you make a purchase through our websites, your payment is processed by a third-party payment processor (such as Stripe, integrated via Squarespace Commerce), which specialises in the secure online capture and processing of credit/debit card transactions. If you have any questions regarding secure transactions, please contact us at contact@prajnaonline.org.

Transfers in Connection with Organisational Changes

We may transfer your personal information to a third party as part of any restructuring or reorganisation, or if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or to enforce or apply our terms of use, or to protect the rights, property, or safety of our supporters and customers. However, we will take steps to ensure that your privacy rights continue to be protected. We would not transfer your personal information to a third party in the case of a sale of some or all of our activities and assets.

Your Choices

You always have a choice about whether or not you wish to receive information from us. If you do not want to receive direct communications from us, you can opt out at any time using the unsubscribe link at the footer of emails we send, or by emailing us at contact@prajnaonline.org. Rigpa members can also opt out by changing their preferences in the Admin and Care database.

Your Rights

Under the GDPR, you have the following rights:

  1. Right of access. You have the right to ask for a copy of the information that Stichting Prajna holds about you. To make a request, email contact@prajnaonline.org.

  2. Right to rectification and erasure. You have the right to ask for your data to be deleted, or for erroneous or out-of-date data to be corrected. Rigpa members can update their personal data in the Admin and Care system. All others, please email us at contact@prajnaonline.org.

  3. Right to restriction of processing. You have the right to request that we restrict the processing of your personal data in certain circumstances.

  4. Right to data portability. You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

  5. Right to object. You have the right to object to processing based on legitimate interests or direct marketing at any time.

  6. Right to lodge a complaint. You can exercise all relevant rights, queries, or complaints by contacting us at contact@prajnaonline.org. If you are not satisfied by our reply, you have the right to lodge a complaint with the relevant data protection authority or with the relevant court.

Security Precautions

When you give us personal information, we take steps to ensure that it is treated securely. Any sensitive information (such as credit or debit card details) is encrypted and protected with SSL/TLS encryption. When you are on a secure page, a lock icon will appear in your web browser.

Non-sensitive details (such as your email address) may be transmitted over the Internet, and transmission can never be guaranteed to be 100% secure. While we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems.

Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We recommend you do not share your password with anyone.

Profiling

We may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. We may also use your personal information to detect and reduce fraud and credit risk.

Cookies and Website Analytics

To improve your experience on our sites, we may use "cookies." Cookies are an industry standard and most major websites use them. A cookie is a small text file that our site may place on your computer as a tool to remember your preferences. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of our website.

Squarespace Analytics

Our website is built on Squarespace, which uses its own cookies and analytics tools to collect information about how visitors interact with the site. This may include pages visited, time spent on pages, and referral sources. Squarespace analytics data is used to help us understand website traffic and improve user experience. For more details, see Squarespace's Cookie Policy.

Social Media

Our website interfaces with social media sites such as Facebook, Instagram, and others. If you choose to "like" or "share" information from any of our websites through these services, you should review the privacy policy of that service. If you are a member of a social media site, the interfaces may allow the social media site to connect your visits to this site with other personal information.

Links to Other Websites

Our website may contain links to other websites run by other organisations. This privacy policy applies only to our websites, so we encourage you to read the privacy policy on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites not owned or run by Stichting Prajna, even if you access them using links from our websites.

If you linked to our websites from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the policy of that site.

Children (16 or Under)

We are concerned to protect the privacy of children aged 16 or under. We do not knowingly obtain or process personal data of anyone aged under 16 without their parent or guardian's explicit consent.

Transferring Your Information Outside of Europe

As part of the services offered to you through Stichting Prajna's website, the information which you provide to us may be transferred to countries outside the European Union ("EU") or the European Economic Area ("EEA"). For example, this may happen if any of our servers or third-party service providers (such as Squarespace or payment processors) are located in a country outside of the EU/EEA. These countries may not have equivalent data protection laws. Where such transfers occur, we will take steps to ensure that appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.

If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.

How to Make a Complaint

To exercise all relevant rights, queries, or complaints, please in the first instance contact us via email at contact@prajnaonline.org.

If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Further Processing

If we wish to use your personal data for a new purpose not covered by this Privacy Policy, we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.

Review of This Policy

Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email.

This policy was last updated in April 2026.