Privacy

The short version

We collect what you type into one of the three forms, and nothing else. We set no cookies and use no analytics or tracking of any kind. We do not sell anything to anybody, and we do not share what you send us except with the services listed below that are needed to deliver it.

What we collect, and why

When you write to us

The contact form takes your name, your email address and your message. It is sent straight to our inbox as an email so that we can reply, and you are sent a short automatic note to say it arrived. It is not stored in this website's database - it lives only in our mail, like any other message you might send us.

When you register for a course, retreat or circle

We record your name, your email address, your phone number, how many people are coming, anything you write under questions or comments, which event or course you are coming to, whether you have a place or are on the waiting list, the date you registered, and when you accepted our cancellation and refund policy. For an event paid by Zelle we also record whether you told us you had sent the payment or will send it, and that you understood your spot is confirmed once it is checked - your payment itself goes through Zelle, not through this website, and we never see your bank details. We need this to hold your places and to reach you about where and when to turn up. It is stored in our content system and you are sent a confirmation.

Automatically, in the background

Our host keeps ordinary server logs. When you submit one of the forms your IP address is recorded briefly so that the same address cannot flood the forms. To limit how many messages one connection or one email address can send, a scrambled, one-way fingerprint of each is also kept for 24 hours - it cannot be turned back into the address. Both are used for that and nothing else, and are not linked to anything else you do.

Why we are allowed to hold it

Data protection law asks us to name a reason for each thing we do, so here they are in plain terms.

• Answering your message - our legitimate interest in replying to someone who has written to us.
• Holding your place at an event or course - necessary to do the thing you asked us to do.
• Rate limiting the forms - our legitimate interest in keeping the site working and not being used to send mail to other people.

How we look after it

Everything travels over an encrypted connection. Registration records are kept in our content system, where they can only be read by people we have given access to and by the website's own server - they are never shown on the site. Each registration and each message also arrives in our email inbox. We collect as little as the job needs in the first place.

We do not profile you, and nothing here makes an automated decision about you.

Typefaces are loaded from Google

The two typefaces this site uses are served by Google Fonts. That means your browser asks Google for them, and in doing so your IP address is visible to Google. We do not send Google anything else, and there is no Google analytics or advertising on this site.

Who else handles your information

These are the services we use to run the site. They only ever receive what is needed for their part, and they are not permitted to use it for anything else.

• Sanity - stores the website's content and the registration records.
• Resend - delivers the emails the forms send.
• Google (Gmail) - our email inbox, where your messages and registration details arrive.
• Cloudflare - hosts the website, delivers it, and keeps the server logs. On pages with a form, its Turnstile check also looks at your browser to tell a person from an automated program, so the forms are not flooded with spam.
• Google Fonts - serves the typefaces, as described above.

Some of these are based outside the European Economic Area, including in the United States. Where that is so, the transfer is covered by the European Commission's standard contractual clauses, or by the provider's certification under the EU-US Data Privacy Framework.

How long we keep it

• Messages you send us - kept while the conversation is live and for as long as we may reasonably need to refer back to it.
• Registrations - kept until the event or course has happened and any follow-up is done, then deleted.
• Server logs - kept briefly by our host and then discarded.
• Form-limit fingerprints - deleted after 24 hours.

What you can ask us to do

You can ask us to show you what we hold about you, correct it, delete it, send you a copy, or stop using it. Ask by writing to InLightWithUs@gmail.com - there is no form and no process, and we will not ask you to justify it.

If you are in the UK or the European Union and you think we have handled your information badly, you also have the right to complain to your national data protection authority.

Changes

If what we do changes, this page changes with it. It was last reviewed on 26 October 2026.

Who we are

InLightWithUs is run by Asta and Skaistė, in Naperville, IL. Write to us at InLightWithUs@gmail.com about anything on this page.