Privacy

1. Who Is Responsible

Who is responsible: Lamma Pulse is operated by Tamara Norris, trading as Vivid Vibrations ("we", "us"). We are the data user, under the Personal Data (Privacy) Ordinance (Cap. 486), for the personal data we collect and keep. We collect only what is needed to make a Booking or Order, or to deliver an Enquiry.

2. Data Collected & Purpose of Processing

Information Collected: Customer full name, email address, contact phone number, and participant count submitted during checkout or enquiry forms.

Payment Data: Payment card details are processed directly by Stripe on secure PCI-compliant servers. Lamma Pulse never stores or accesses full credit card numbers.

3. Data Sharing & Processor Destinations

Who handles your data for us: Railway (which hosts the site), Supabase (our database), Stripe (payments) and Resend (email). The site and its database are hosted in Singapore. Stripe and Resend are international services and may process your details in other countries.

Members: when you book, order or send an Enquiry to a Member, we pass that Member your name and email, with the number of people or items for a Booking or Order, or your message for an Enquiry. The Member uses them to run your Booking or Order or to answer you, and is itself a data user for the copy it receives, responsible for it under the Ordinance.

Zero Advertising: We never sell user data, share data with third-party advertisers, or employ behavioral tracking technology.

4. Fixed Data Retention & Automated Erasure

How long we keep your details: we keep your name and email only as long as the record they came with needs them. Then we erase them automatically and keep the rest of the record (such as the number of places) without them.

• A Booking: 6 months after its date, or after a Course's last date.
• An Order: 6 months after the day it was placed.
• If a Booking or Order is cancelled, 6 months from the cancellation if that is later.
• While a refund is due or a card dispute is open, we keep the details until it is settled.
• A Booking or Order that was never paid for: 30 days after its payment time ran out.
• An Enquiry: your name, email and message, 90 days after you sent it.

Six months covers the time in which a card payment can still be refunded or disputed.

Copies elsewhere: Resend, our email service, keeps its own copy of each email we send, including your name and email address, for 30 days after it was sent. Stripe keeps the payment details under its own privacy policy. Erased details can stay in our backups for up to 30 days. The copies a Member received from us (see "Members" above) are the Member's own responsibility, and our erasure does not reach them, so ask the Member about those.

5. Data Subject Rights & Contact

Your rights: under the Ordinance, you can ask for a copy of the personal data we hold about you, and ask us to correct it, without charge. Email hello@lammapulse.com, giving the email address you booked, ordered or wrote with. We reply within 40 days, and only to that address, so your details go to no one else. We do not erase details on request: they are erased on the schedule above, which keeps them only as long as their record needs them.

6. Cookies

Cookies: we use only cookies the site needs to work, so we do not ask for consent. Booking, ordering or sending an Enquiry sets none. A Member who signs in gets cookies that keep them signed in, and nothing else. Our test sites, which are closed to the public, also set one that remembers their password was entered. We use no analytics, advertising or tracking cookies. Payment takes place on Stripe's own pages, which follow Stripe's privacy policy.