Privacy policy
Last updated 17 October 2026
This policy explains what personal data we collect on wishanddo.com, why, and your choices. The data fiduciary (the person responsible for your data) is Ramyalakshmi Shanmugasundaram, trading as Mandala Made Simple, a course by Wish & Do, [POSTAL ADDRESS, Salem, Tamil Nadu, PIN]. Contact: hello@wishanddo.com.
What we collect
- When you buy: your name, email address and phone number; what you bought and the amount; Razorpay's order and payment reference; and whether you ticked the box to get a free mandala design on WhatsApp each month.
- When you scan a QR code in the course: the time and which link you scanned (for example, Day 7 video), so we know which lessons people use. Later copies of the course may also include your order reference in these links.
- If you message us on WhatsApp: your number and what you send (such as photos of your work), to reply and, with your permission, to share reviews.
- Card, UPI and bank details are collected directly by Razorpay. We never see or store them.
- Website usage: basic technical logs (such as IP address and browser) for security, and, if enabled, the Meta Pixel and Google Analytics, which use cookies to measure visits and ads.
Why we use it
- To deliver the course, send your download link and help you with support.
- To put your name and email on your copy of the course files, to discourage sharing.
- To keep records required by law (for example, payment and tax records).
- To understand which ads and pages work, if analytics is enabled.
- To send you a free mandala design on WhatsApp each month, only if you ticked that box. Reply STOP at any time to stop.
Who we share it with
Only with services that help us run the shop, and only what they need:
- Razorpay (payments)
- Brevo (sending emails)
- WhatsApp (Meta) (messages you send us, and monthly designs if you opted in)
- Cloudflare (website hosting and storing orders and files)
- Meta / Google (ads measurement, if enabled)
We don't sell your data. We may disclose it if the law requires.
How long we keep it
Order records are kept for as long as tax and accounting laws require (generally up to 8 years).
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask to access, correct or erase your personal data, and raise a grievance. Email hello@wishanddo.com and we'll respond within 30 days. Erasure doesn't apply to records we must keep by law.
Security
Data is stored with reputable providers over encrypted connections. Download links are personal and expire.
Children
The course is sold to adults. If a child uses it, a parent or guardian should make the purchase.
Changes
We'll update this page if anything changes and show the date at the top.