Privacy Statement

Who we are

DevaYama (also known as Kolibri Heart Medicine) is responsible for the processing of your personal data.

• Business name: DevaYama
• Address: Wanroijseweg 6, 5427 HH Boekel, the Netherlands
• Chamber of Commerce (KvK): 30273693
• Email: kolibrimedicine@protonmail.com

If you have any questions about your privacy, you can always contact us at kolibrimedicine@protonmail.com.

Which data we collect

When you sign up on our website for a free live session, the waitlist or our newsletter, we collect:

• your first name (optional)
• your email address

When you join a live session on Zoom, Zoom may process your name, email address and, if you choose to switch them on, your camera image and voice.

When you buy a recording, teaching or programme in our online environment, we process your name, your email address and the details needed to complete and administer your purchase, such as what you bought, the amount and the payment date. Your payment itself is handled by Mollie. We do not see or store your full bank or card details.

When you book a ceremony, retreat or event, you may do so through Chipta or Hipsy. These platforms process your name, email address, booking details and payment, and share with us what we need to welcome you.

When you sign up for a ceremony, retreat or programme such as The Medicine Path, we ask you to fill in an intake form. You can read more about this below, under "Ceremonies, retreats and your health information".

We do not collect more data than we need.

Why we use your data

We use your data to:

• send you the link to join a live session you signed up for, and reminders before it starts
• let you know when registration opens, if you joined a waitlist
• send you our newsletter and occasional emails about our sessions, retreats and programmes, such as The Medicine Path
• give you access to the recordings, teachings or programmes you bought
• handle your booking for a ceremony, retreat or event
• prepare for your ceremony or retreat and take care of your safety during it
• answer your questions when you contact us

For our emails and live sessions, we process your data on the basis of your consent, which you give when you sign up. You can withdraw your consent at any time by clicking "unsubscribe" at the bottom of any email, or by emailing us.

When you buy something from us or book a ceremony, retreat or event, we process your data because we need it to deliver what you bought, and because we are legally required to keep our financial records.

Ceremonies, retreats and your health information

Before you take part in a ceremony, retreat or programme, we ask you to fill in an intake form. You receive this form as a PDF, fill it in and send it back to us by email. Besides your contact details, the form includes questions about your physical and mental health and any medication you use. We ask these questions because your safety matters to us. Some medication and some health conditions do not combine well with ceremonial work, and knowing about them helps us decide together whether a ceremony is right for you at this moment, and how we can best take care of you.

Information about your health is a special category of personal data under European law. That is why we handle it with extra care:

• We only process it with your explicit consent, which you give in the intake form. Without this information we cannot safely welcome you to a ceremony.
• Only the facilitators and team members who need it to prepare for and guide your ceremony or retreat can see it.
• Once we have received your form, we store it on a separate, encrypted external hard drive that is used only for this purpose and is not connected to the internet. We then delete your email and its attachment from our mailbox.
• We keep it for six months after the retreat you took part in, and then delete it. If you take part in The Medicine Path, we keep it until six months after the last retreat of the programme, in November.
• We never use it for marketing and never share it with anyone outside our team, unless you ask us to or we are required to by law.

You can withdraw your consent at any time by emailing us. We will then delete your health information. Please note that we may then not be able to welcome you to an upcoming ceremony or retreat.

Recordings of live sessions

Our live sessions are recorded. Afterwards, the recording is made available in our online environment, where people who could not attend can watch it later. A recording may also be offered there as a separate product. If you switch on your camera or microphone, or take part in a live coaching moment, you may be visible or audible in the recording. Anyone who takes part in a live coaching moment is asked for permission beforehand. If you prefer not to appear in the recording, simply keep your camera and microphone off.

Who else processes your data

We work with a few trusted services that process data on our behalf:

• Mailchimp (Intuit Inc., United States), for our mailing list and emails
• Zoom (Zoom Communications Inc., United States), for live online sessions
• Proton Mail (Proton AG, Switzerland), for our email correspondence, including the intake forms you send us
• Lovable, for hosting this website
• Membirds, for our online community and the recordings, teachings and programmes we offer online
• Mollie (Mollie B.V., the Netherlands), for handling payments
• Chipta, for bookings and tickets for our ceremonies, retreats and events
• Hipsy, for bookings and tickets for our ceremonies, retreats and events

Some of these services store data outside the European Union. Switzerland is recognised by the European Commission as offering an adequate level of data protection. Services in the United States do so under the safeguards required by European law, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

We never sell your data and we never share it with other parties for their own marketing.

How long we keep your data

• Newsletter and mailing list: for as long as you are subscribed. When you unsubscribe, we remove your data within 30 days, unless we need to keep it by law.
• Waitlist and session registrations: for as long as you are subscribed to our emails.
• Purchases and bookings: for seven years, because Dutch tax law requires us to keep our financial records for that long. Your access to a product you bought stays in place for as long as we offer it.
• Intake forms and health information: six months after the retreat you took part in. For participants of The Medicine Path, six months after the last retreat of the programme, in November.
• Recordings of live sessions: for as long as the recording is available in our online environment.

Your rights

You have the right to:

• see which data we have about you
• have your data corrected or deleted
• withdraw your consent at any time
• object to the use of your data
• receive your data in a format you can pass on to someone else

To use any of these rights, send an email to kolibrimedicine@protonmail.com. We will respond within one month.

If you feel we are not handling your data properly, please let us know first, so we can look at it together. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

Cookies

Our website uses cookies. Cookies are small files that are stored on your device when you visit a website.

• Functional cookies are needed for the website to work properly. We do not need your permission for these.
• YouTube videos. Some pages contain videos from YouTube (Google). When you play such a video, YouTube may place cookies and collect information about your viewing, which Google can use for its own purposes. You can read how Google handles this in Google's privacy policy. We use YouTube's privacy-enhanced mode and only load these videos after you have given permission.

We do not use cookies for advertising or to follow you across other websites.

You can change your choice at any time via the "Cookie settings" link at the bottom of every page, or by deleting the cookies in your browser settings.

Security

We take appropriate measures to protect your data against loss and unauthorised access. Only the people in our team who need your data for their work have access to it.

Changes

We may update this privacy statement from time to time. The latest version is always available on this page.