We understand that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits the www.AyurVeda.World site, and will only collect and use personal data in ways that are described here and in a manner that is consistent with our obligations and your rights under the law.

Please read this Privacy Policy carefully and ensure that you understand it. If you have any questions, please contact us using the details set out in this Privacy Policy.

“We/Us/Our” means AyurVeda.World, a trading name of Maharishi Ayurveda Limited, a company registered in England under 13073905, whose registered address is Maharishi Peace Palace, Rendlesham, Woodbridge, Suffolk, UK IP12 2GX. Our VAT number is 438 8723 55.

What Does This Policy Cover?

This Privacy Policy applies to our collection and use of any and all data that relates to you as an identifiable person who can be directly or indirectly identified from that data which in this case you give to us when using our site (“personal data”). Where applicable, this incorporates the definitions provided in the EU Regulation 2016/679 – the General Data Protection Regulation – as implemented in the UK (“UK GDPR“).

Our site may contain links to other websites. Please note that We have no control over how your data is collected, stored, or used by other websites and We advise you to check the privacy policies of any such websites before providing any data to them.

1. Your Rights

• 1.1 As a data subject, you have the following rights under the UK GDPR, which this Policy and our use of personal data have been designed to uphold:
• 1.1.1 The right to be informed about our collection and use of your personal data;
• 1.1.2 The right to request access to the personal data We hold about you (see section 10);
• 1.1.3 The right to rectification if any personal data We hold about you is inaccurate or incomplete;
• 1.1.4 The right to be forgotten – i.e. the right to ask us to delete any personal data We hold about you in certain circumstances;
• 1.1.5 The right to restrict (i.e. prevent) the processing of your personal data;
• 1.1.6 The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation) in certain circumstances;
• 1.1.7 The right to object to us using your personal data for particular purposes; and
• 1.1.8 Rights with respect to automated decision making and profiling.
• 1.2 If you have any cause for complaint about our use of your personal data, or if you would like to exercise any of your rights as set out above, please contact us using the details provided in section 12 and we will do our best to solve the problem for you. If We are unable to help, you also have the right to lodge a complaint with the Information Commissioner’s Office.
• 1.3 For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

2. What Data Do We Collect?

• 2.1 Depending upon your use of our site, we may collect some or all of the following personal and non-personal data (please also see section 11 on our use of small text files placed on your computer or device by our site when you visit certain parts of our site and/or when you use certain features of our site (“cookies” – see section 11):
• 2.1.1 name;
• 2.1.2 business/company name;
• 2.1.3 contact information such as email addresses and telephone numbers;
• 2.1.4 demographic information such as post code;
• 2.1.5 financial information such as credit / debit card numbers;
• 2.1.6 IP address;
• 2.1.7 web browser type and version;
• 2.1.8 operating system;
• 2.1.9 a list of URLs starting with a referring site, your activity on our site, and the site you exit to.

3. How Do we use Your Data and what is our lawful basis?

• 3.1 We may use your data for the following purposes:
• 3.1.1 Providing and managing an account required to access and/or use certain areas and features of our site (“account”);
• 3.1.2 Providing and managing your access to our site;
• 3.1.3 Personalising and tailoring your experience on our site;
• 3.1.4 Supplying our products services to you (please note that we require your personal data in order to enter into a contract with you);
• 3.1.5 Personalising and tailoring our products services for you;
• 3.1.6 Replying to emails from you;
• 3.1.7 Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time by selecting the email unsubscribe link;
• 3.1.8 Market research;
• 3.1.9 Analysing your use of our site to enable us to continually improve our site and your user experience.
• 3.2 With your permission and/or where permitted by law, we may also use your data for marketing purposes which may include contacting you by email and telephone and text message and post with information, news and offers on our products and services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that we fully protect your rights and comply with our obligations under the UK GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003.

You have the right to withdraw your consent to us using your personal data at any time, and to request that we delete it in certain circumstances.

4. Our Lawful Bases

In order to collect and use your personal data, we must have a reason under the law (“lawful basis”). We rely on the following lawful bases to collect and use personal data:

• 4.1 because it is necessary for our performance of a contract with you,
• 4.2 because you have consented to our use of your personal data (including in the circumstances set out above), or
• 4.3 because it is in our legitimate interests – for example, we have a legitimate interest in providing our services to you.

5. How and Where Do we Store Your Data?

Data Storage

• 5.1 We will not keep personal data for longer than necessary, and the appropriate retention period will vary according to the intended purpose for which we collected the personal information. By way of example, we retain:
• 5.1.1 Customer order data, to the extent required for HMRC audits, for three years
• 5.1.2 Customer account data for seven years,
• 5.2 The criteria we use to determine the retention period of personal information are: (i) the respective statutory retention period; (ii) our contractual and/or business relationships with you; (iii) (potential) disputes; and (iv) any guidelines issued by relevant regulators. After expiration of that period, the relevant information is routinely deleted, as long as it is no longer necessary for the fulfilment of a contract, the initiation of a contract or to protect or defend our position or that of a third party. If you have any questions about our retention periods, please contact us using the details set out in Section 12 below.

International Data Transfers

Some or all of your data may be stored outside of the United Kingdom or the European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). When we transfer personal information out of the UK, we take steps to ensure that your personal information is protected in accordance with appropriate safeguards, especially where the recipient country is not considered to be adequate under UK law. In particular, we rely on appropriate safeguards under data protection legislation, such as the UK International Data Transfer Agreement (or the EU Standard Contractual Clauses and UK Addendum) to protect your personal information.

Data Security

Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure data collected through our site. While we seek to use appropriate organisational, technical and administrative measures to protect personal information within our organisation, unfortunately no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us using the details in Section 12 below.

6. Do we Share Your Data?

• 6.1 We may share your personal data in the following circumstances:
• 6.1.1 In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal obligations, a court order, or a governmental authority.
• 6.1.2 We may sometimes contract with third parties to supply products and services to you on our behalf. These may include payment processing, delivery of goods, search engine facilities, advertising, and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, we will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.
• 6.1.3 We may compile statistics about the use of our site including data on traffic, usage patterns, user numbers, sales, and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you. We may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers.
• 6.1.4 We may share your personal data with our professional advisers, lawyers, accountants and auditors; or
• 6.1.5 We may share your personal data with your consent or as otherwise disclosed at the time of data collection and sharing.

7. What Happens If Our Business Changes Hands?

• 7.1 We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will become the controller of your personal data (and will send you their own Privacy Policy or Notice as appropriate).
• 7.2 In the event that any of your data is to be transferred in such a manner, you will be contacted in advance and informed of the changes. When contacted you will be given the choice to have your data deleted or withheld from the new owner or controller.

8. How Can You Control Your Data?

• 8.1 In addition to your rights under the UK GDPR, set out in section 4, when you submit personal data via Our site, you may be given options to restrict our use of your data. In particular, we aim to give you strong controls on our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from us which you may do by unsubscribing using the links provided in our emails and at the point of providing your details and by managing your Account).
• 8.2 You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service, the Corporate Telephone Preference Service and the Mailing Preference Service. These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receiving.

9. Your Right to Withhold Information

• 9.1 You may access certain areas of our site without providing any data at all. However, to use all features and functions available on our site you may be required to submit or allow for the collection of certain data.
• 9.2 You may also restrict our use of cookies. For more information, see section 11.

10. How Can You Access Your Data?

• 10.1 You have the right to ask for a copy of any of your personal data held by us (where such data is held). Under the UK GDPR, no fee is payable for this. Depending on the nature of your request, we may ask you to clarify certain points so that we can adequately respond to your request.
• 10.2 Please contact us for more details at Please contact Us at support@ayurveda.world.

11. Our use of cookies

• 11.1 Our site may place and access certain first party cookies on your computer or device. First party cookies are those placed directly by us and are used only by us. We use cookies to facilitate and improve your experience of our site and to provide and improve our products and services. We have carefully chosen these cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.
• 11.2 All cookies used by and on our site are used in accordance with the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“Cookie Law”).
• 11.3 Before cookies are placed on your computer or device, you will be shown a browser pop up notice requesting your consent to set those cookies. By giving your consent to the placing of cookies you are enabling us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of cookies; however certain features of our site may not function fully or as intended.
• 11.4 Certain features of our site depend on cookies to function. Cookie law deems these cookies to be “strictly necessary”. These cookies are shown below in this section. Your consent will not be sought to place these cookies, but it is still important that you are aware of them. You may still block these cookies by changing your internet browser’s settings as detailed below in section 11.8, but please be aware that our site may not work properly if you do so. We have taken great care to ensure that your privacy is not at risk by allowing them.

The following first party cookies may be placed on your computer or device:

Name of cookie	Provider	Purpose	Is the cookie strictly necessary for the running of the site?
wordpress_	WordPress	WordPress uses the cookie wordpress_[hash] to store the authentication details on login. The authentication details include the username and double hashed copy of the password. However, this usage of the cookie is limited to the admin console area, the backend dashboard of the website.	Vital for operation
wordpress_logged_in_	WordPress	The cookie wordpress_logged_in_[hash] is used to indicate when you are logged in, and who you are. This cookie is maintained on the front-end of the website as well when logged in.	Vital for operation
woocommerce_cart_hash	WooCommerce	Helps WooCommerce determine when cart contents/data changes.	Vital for operation
woocommerce_items_in_cart	WooCommerce	Helps WooCommerce determine when cart contents/data changes.	Vital for operation
wp_woocommerce_session_	WooCommerce	Contains a unique code for each customer so that it knows where to find the cart data in the database for each customer.	Vital for operation
PHPSESSID	PHP	The PHPSESSID cookie is native to PHP and enables websites to store serialized state data. It is used to establish a user session and to pass state data via a temporary cookie, which is commonly referred to as a session cookie. As the PHPSESSID cookie has no timed expiry, it disappears when the client is closed.	Vital for operation
_ga	Google Analytics	These cookies collect information about how visitors use our website. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to our website, where our visitors to our website have come from and the pages they have visited. The information obtained does not identify anyone.	Not strictly necessary
_gat_UA-XXX	Google Analytics		Not strictly necessary
_gid	Google Analytics		Not strictly necessary
loc	AddThis – Social sharing with Facebook/Twitter	These are “Add This” social media cookies. These cookies enable users, if they wish, to login to their accounts on social media sites such as Twitter or Facebook and share content from our websites with their friends. These cookies do not allow us access to your accounts or provide us with any confidential information relating to any of your accounts.	Not strictly necessary
uvc			Not strictly necessary
__atuvc			Not strictly necessary
__atuvs			Not strictly necessary

and the following third party cookies may be placed on your computer or device:

Name of cookie	Purpose	Strictly Necessary
VISITOR_INFO_LIVE	Third Party	Tries to estimate the user’s bandwidth on pages with integrated YouTube video’s.
TSC	Third Party	Registers unique ID to keep statistics of what videos from YouTube the user has seen.

• 11.5 Our site uses analytics services provided by Google Analytics and Facebook. Website analytics refers to a set of tools used to collect and analyse anonymous usage information, enabling us to better understand how our site is used. This, in turn, enables us to improve our site and the products services offered through it. You do not have to allow us to use these cookies, however whilst our use of them does not pose any risk to your privacy or your safe use of our site, it does enable us to continually improve our site, making it a better and more useful experience for you.
• 11.6 The analytics service(s) used by our site use(s) cookies to gather the required information.
• 11.7 The analytics service(s) used by our site use(s) the following cookies:

Name of cookie	1st or 3rd	Provider	Purpose
__utm.gif	Third party	google-analytics.com	Google Analytics Tracking Code that logs details about the visitor’s browser and computer.
__utmb	Third party	google-analytics.com	Registers a timestamp with the exact time of when the user accessed the website.
__utmt	Third party	google-analytics.com	Used to throttle the speed of requests to the server.
__utmz	Third party	google-analytics.com	Collects data on where the user came from, what search engine was used, what link was clicked and what search term was used.
__utmc	Third party	google-analytics.com	Registers a time stamp with the exact time of when the user leaves the website.
__utma	Third party	google-analytics.com	Collects data on the number of times a user has visited the website as well as dates for the first and most recent visit.
Ads/ga-audiences	Third party	Google.com	Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor’s behaviours access websites.
Ads/User-lists/#	Third party	Google.com	Google Analytics ad tracking
FR	Third party	Facebook.com	Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.
IDE	Third party	DoubleClick.net	Used by Google DoubleClick to register and report the websites user’s actions after viewing or clicking one of the advertiser’s ads with the purpose of measuring the efficiency of an ad and to present targeted ads to the user.
Test-cookie	Third party	DoubleClick.net	Used to check if the user’s browser supports cookies.

• 11.8 In addition to the controls that we provide, you can choose to enable or disable cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third-party cookies. By default, most internet browsers accept cookies, but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.
• 11.9 You can choose to delete cookies on your computer or device at any time, however you may lose any information that enables you to access our site more quickly and efficiently including, but not limited to, login and personalisation settings.
• 11.10 It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.

12. Contacting us

If you have any questions about our site or this Privacy Policy, please contact us by email at support@ayurveda.world or by telephone on 03330 42 42 42. Please ensure that your query is clear, particularly if it is a request for information about the data we hold about you (as under section 10, above).

13. Changes to our Privacy Policy

We may change this Privacy Policy from time to time (for example, if the law changes or to take into account changes at www.AyurVeda.World ). Updates to this Policy will be posted on this page – we recommend that you check this page regularly to keep up-to-date. We will also use reasonable efforts to inform you of any significant changes by email where appropriate.

This Privacy Policy was last updated on 21 August 2023.