Centro Budista Djampel Pawo

Privacy policy

This Policy explains how Centro Budista Djampel Pawo (CNPJ 05.234.358/0001-00; Avenida Vereador José Diniz, 3720, conj. 506 — Santo Amaro — CEP 04620-900, São Paulo – SP, Brazil), the data controller, handles the personal information collected by the website djampelpawo.org, in line with Brazil's General Data Protection Law (LGPD, Law 13,709/2018).

What data we collect

  • Account and contact: name, email, phone/WhatsApp, preferred language and, if you provide them, address and city.
  • Member area: refuge name, refuge date, empowerments, retreats, mantras and profile photo, when you record them.
  • Registrations and requests: the activity and date chosen, names of the beneficiaries of requests, amounts, payment method and payment status.
  • Payments: the CPF or CNPJ required by Asaas, our payment partner. Card details are entered and stored only by Asaas; the centre does not receive them.
  • Browsing: pages visited, technical data about your device and IP address. On public pages, we use PostHog for usage statistics and session recording (how you move through the page), with the content of form fields masked; private areas, such as"My Account"and the admin panel, the request and registration forms and the payment pages are not recorded.
  • Cookies and local storage: we use the cookies needed to keep you signed in and analytics identifiers stored in cookies or in your browser's local storage (PostHog). You can block or delete these cookies and data in your browser settings or with tracking blockers; the website keeps working, but you may need to sign in again.

Sensitive data

Some of the data we handle is considered sensitive under the LGPD (art. 5, II):

  • member status and the data in the member area (refuge name and date, empowerments, retreats and mantras), because they reveal religious belief and membership of a religious organisation;
  • the names sent in Dedications for Health, because they link a person to a health condition.

Your member data is processed with your consent, given when you record it. Other people's names are sent by you, and you confirm that you are entitled to do so (for example, with the permission of the person or of their guardian). Access is restricted to the centre's administration and to the members and monks who carry out the practices. Within the centre, the name lists may be shared among members and monks so the practices can be carried out. You can withdraw your consent at any time by email at atendimento@djampelpawo.org; withdrawing it may end member access.

Send only the name and what the form asks for; do not include diagnoses or other health details.

What we use it for

  • Answering messages, confirming registrations and requests, and sending the automatic emails related to them.
  • Managing your account, member access and the name lists for the practices.
  • Meeting legal and accounting obligations.
  • Improving the website, based on usage statistics.
  • Sending the newsletter, only if you subscribed; you can leave at any time through the link in the email.

Legal bases

  • Performance of a contract or of steps you asked for: account, registrations, requests, donations and the emails related to them, except sensitive data.
  • Compliance with a legal obligation: payment records and accounting documents.
  • Legitimate interest: website security, fraud prevention, usage statistics and session recording to improve the website.
  • Consent: the newsletter, optional information you choose to record in your profile and sensitive data (see"Sensitive data").

Who we share it with

Only with services needed for the website to work: hosting and database (Google Cloud, in Brazil), website protection and delivery (Cloudflare), email delivery (Resend), payment processing (Asaas) and website analytics (PostHog), which may process data outside Brazil, based on the contractual safeguards offered by these providers (LGPD, art. 33). We do not sell personal data.

How long we keep it

  • Payment records and accounting documents: 5 years, as required by law (tax obligations).
  • Account and member area: for as long as the account exists. When the account is deleted, this data is erased, except for what we are legally required to keep.
  • Browsing data: for the retention period of our analytics service (PostHog).

You can request deletion of your account by emailing atendimento@djampelpawo.org.

Your rights

You have the right to:

  • correct incomplete, inaccurate or outdated data;
  • request the blocking or deletion of unnecessary data;
  • request the deletion of data processed with your consent;
  • withdraw your consent.
  • access to your data;
  • confirmation that your data is being processed;
  • data portability;
  • information about which entities your data is shared with;

To exercise these rights, write to atendimento@djampelpawo.org. We respond within 15 days.

Data protection contact

As a small-scale organisation, the centre has not appointed a data protection officer (Resolution CD/ANPD No. 2/2022). The channel for personal data matters is the email atendimento@djampelpawo.org.

Security

We use a secure connection (HTTPS), restrict access to data, and store passwords only in securely hashed form. We never ask for your password by email, phone or WhatsApp.

Children and teenagers

People under 18 may take part in the activities with the consent and supervision of a parent or guardian, who must make registrations, requests and payments on their behalf.

Contact

Email: atendimento@djampelpawo.org · WhatsApp (enquiries): +55 11 95078-1580 · WhatsApp (finance): +55 11 99111-5806.

This Policy may be updated; the version in force is always the one published on this page.

Last updated: 23 October 2026.