Short version. Visitors do not need an account and we do not track them. Practitioners give us the details needed to publish a listing and take payment, and that listing is public. We do not sell personal data, and we do not collect information about clients or the sessions they book.

1. Who we are

Elevare Solutions, a company licensed in Dubai, United Arab Emirates ("Elevare", "we", "us"), operates Tantra Sanctuary (the "Platform") and is the controller of the personal data described in this policy. Contact for any privacy matter: admin@tantrasanctuary.com.

2. What we collect

From practitioners who subscribe or list: name; category; city and country; services, specialties and training; biography and session rates; profile photograph; WhatsApp number, email address and any other contact details they choose to publish; any identity, licence or qualification material we request for review; correspondence with us; and subscription and billing details processed by our payment provider (name, email, phone number, plan and payment status, and the card brand and last digits shown by Stripe). We do not receive or store full card numbers.

From visitors: no account is needed to browse. Our servers and hosting provider automatically receive technical data such as IP address, browser and device type and pages requested, which is standard for any website and is used for security and operation. We do not use cookies, analytics or advertising trackers at present (see our Cookie Policy).

From people who email us (including enquiries about our website services): the content of the message and the contact details they give.

Clients. Clients do not create accounts and we do not ask for, receive or store information about clients, their health, beliefs or personal life, or the sessions they arrange. Conversations between a client and a practitioner take place on WhatsApp or other channels outside the Platform, and we do not see them.

3. Why we use it and on what basis

We do not sell personal data and we do not use it for advertising profiling.

4. What is public

A practitioner's profile, including their name, photograph, biography, training, rates and the WhatsApp number or email they choose to publish, is visible to anyone who visits the Platform and may be indexed by search engines and copied by third parties, which we cannot control. By listing, the practitioner agrees to this publication. Clicking a WhatsApp or email button on a profile opens a conversation through Meta's WhatsApp or the visitor's email provider, which have their own privacy policies.

5. Who we share data with

We share personal data only as needed to run the Platform, with: our payment provider (Stripe); our website hosting and infrastructure providers; our email and communications providers; the font provider we use to load the site's typeface (Fontshare, which receives the visitor's IP address when the page loads); and our professional advisers. These providers act on our behalf and are bound by confidentiality and data-protection obligations. We may also disclose data where required or permitted by law, to competent authorities in the UAE or Saudi Arabia, to enforce our terms or protect rights and safety, and in connection with a sale or reorganisation of the business.

6. International transfers

Our providers, including Stripe and our hosts, may process data in countries outside the UAE and Saudi Arabia. Where we transfer personal data across borders we do so on the bases and with the safeguards permitted by applicable law, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and the Saudi Personal Data Protection Law, and only to the extent needed for the purposes above.

7. Retention

We keep practitioner profile data while a listing is active and for a reasonable period afterwards. We keep billing and accounting records for as long as the law requires, which can be several years. We delete or anonymise other data when it is no longer needed, or earlier where you validly ask us to and the law allows.

8. Security

We use reasonable technical and organisational measures to protect personal data. No online service can be completely secure, so we cannot guarantee absolute security. Where the law requires, we will notify the competent authority and affected individuals of a personal data breach.

9. Your rights

Under the UAE and Saudi data protection laws, and under other laws that apply to you (including the GDPR or UK GDPR if you are in the EU or UK), you may have the right to be informed, to access, correct, update or delete your personal data, to restrict or object to certain processing, to receive a copy of your data, and to withdraw consent at any time where processing is based on consent. To exercise a right, email admin@tantrasanctuary.com. We may need to verify your identity and will respond within the time the law requires. Withdrawing consent or deleting data may mean we can no longer keep your listing live. You may also complain to the competent authority, such as the UAE Data Office or the Saudi Data and Artificial Intelligence Authority (SDAIA).

10. Children

The Platform is for adults only and is not directed at anyone under 18. We do not knowingly collect data from minors and will delete it if we learn we have.

11. Third-party services and links

The Platform links to services we do not control, such as WhatsApp, Stripe and social media. Their privacy practices are governed by their own policies.

12. Changes to this policy

We may update this policy as the Platform evolves. Changes take effect on the "Last updated" date above, and we will make any material change reasonably visible.

13. Contact

Questions or requests about this policy: admin@tantrasanctuary.com.