Privacy Policy
Last updated: May 22, 2026
Let’s Talk Spatial is committed to protecting your privacy. This policy explains how we handle your personal data when you use our website, join our mailing list, RSVP for events, or contact the community.
Our site at letstalkspatial.in is a static website built with Hugo and hosted on our own server. We do not run WordPress or store form submissions in a site database.
Information we collect
When you use our registration forms or contact us, we may collect:
- Name (first and last name)
- Email address
- Profession / affiliation (e.g. student, researcher, working professional)
- Any additional information you voluntarily provide in a message to us
We collect this data when you:
- Join our mailing list via the Register page
- RSVP for a specific event via an event registration page (e.g.
/events/rsvp/.../) - Email us directly at letstalkspatial@gmail.com or via the Contact page
How we use your information
We use your information for the following purposes:
- Processing your event RSVP or mailing-list signup
- Sending updates about the event you registered for
- Notifying you about upcoming geospatial community meetups, workshops, and mapping parties
- Responding to questions or requests you send us
- Improving future meetups based on aggregate community feedback
We do not use your information for:
- Marketing unrelated products or services
- Sharing with third parties for their own marketing
- Selling or renting your data to other organizations
Mailing list and event RSVPs
We use separate contact lists in Brevo for (1) general community announcements and (2) specific event attendee lists.
When you RSVP for an event, our Brevo automation may also add you to the general mailing list so you can hear about future meetups — in addition to emails about the event you registered for. By submitting an event RSVP form, you consent to this as described on the form and in this policy.
When you sign up only via the Register page, you join the general mailing list without RSVPing to a particular event.
You can opt out of any list at any time using the unsubscribe link in our emails or by contacting us.
Legal compliance
This policy is intended to comply with applicable data protection laws, including:
- The General Data Protection Regulation (GDPR) for users in the European Union
- India’s Digital Personal Data Protection Act, 2023 (DPDP Act)
- Other applicable privacy and data protection requirements
India DPDP Act compliance
As we process personal data of Indian residents, we align our practices with the DPDP Act, 2023:
Consent
- We obtain your free, specific, informed, unconditional, and clear consent before processing personal data through our forms
- Consent is limited to what is needed for registration, RSVPs, and community notifications
- You may withdraw consent at any time by contacting us
Your rights as a data principal
- Right to obtain information about how your personal data is processed
- Right to seek correction and erasure of personal data
- Right to grievance redressal
- Right to nominate a representative to exercise your rights on your behalf
Our obligations as data fiduciary
- Provide clear notices about data processing (including this policy)
- Process data only for the purposes described when it is collected
- Implement reasonable security safeguards
- Use data only for specified purposes and keep it accurate where practicable
Notice in Indian languages: On request, we can provide a summary of this policy in Hindi or other Indian languages.
GDPR (EU residents)
If you are in the European Union, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data
- Restrict or object to certain processing
- Data portability, where applicable
- Withdraw consent at any time
- Lodge a complaint with your local supervisory authority
Your rights (all users)
Regardless of location, you may:
- Unsubscribe from our emails using the link in any message we send via Brevo
- Request access, correction, or deletion of your data by emailing us
- Ask how your data is processed and which services we use
To exercise these rights, contact us at letstalkspatial@gmail.com or via the Contact page.
Data retention
We keep your information only as long as needed to:
- Fulfil the purposes in this policy
- Meet legal or regulatory obligations
- Maintain reasonable records for community event coordination
You may request deletion at any time. After deletion requests, we will also ask our email provider to remove your contact record where applicable.
How data is stored and secured
Website
- The public website is static HTML served from our server; form data is not stored in a WordPress or site database
- Form submissions are sent directly to Brevo for processing and list management
Email and contacts (Brevo)
- Brevo (formerly Sendinblue) stores contact details and sends transactional and announcement emails on our behalf
- We use double opt-in where configured, so you may need to confirm your email address before being fully subscribed
Spam protection
- Registration forms use Cloudflare Turnstile to reduce automated abuse
We apply appropriate technical and organizational measures and rely on reputable providers with their own security certifications and practices.
Third-party services
| Service | Role |
|---|---|
| Brevo | Mailing-list and event RSVP forms, contact storage, email delivery |
| Cloudflare Turnstile | Bot protection on forms |
| Hosting provider (VPS) | Serves the static website |
| YouTube, LinkedIn, Instagram, etc. | Embedded or linked content; governed by each platform’s policy |
We no longer use WordPress, Contact Form 7, or Flamingo on this website.
Brevo data processing
Brevo acts as our data processor for email and contact management. When you submit a form on our site:
- Purpose: Brevo processes your data only to provide email and contact-list services for Let’s Talk Spatial, including event notifications and list management
- Security: Brevo uses measures such as encryption in transit (TLS/HTTPS) and secured data centres
- Location: Data may be processed or stored in the EU or other jurisdictions with appropriate safeguards
- Retention: Brevo may retain contact data according to their policies and our instructions; we do not keep contacts longer than needed for community purposes
- Marketing: Brevo does not sell your data; we do not authorise third-party marketing use of your signup data
- Your rights with Brevo: You may also contact Brevo’s Data Protection Officer at dpo@brevo.com for processor-related requests
We maintain a Data Processing Agreement (DPA) with Brevo so that processing follows our instructions and applicable law.
Cookies and analytics
Our static site may use minimal cookies for basic functionality (for example, theme preference).
We use Umami (umami.is), a privacy-focused analytics tool hosted on infrastructure we control, to understand aggregate traffic (for example, page views and referrers). Umami is designed to avoid invasive tracking and does not use the site for advertising. We do not use advertising trackers on this site.
If you have questions about analytics data, contact us using the details in Contact us below.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with a revised Last updated date. Please review this page periodically.
Contact us
Questions about this policy or your personal data:
- Email: letstalkspatial@gmail.com
- Contact page: Contact (social links and Slack)
- Committee: See the About page
Consent
By submitting our registration or RSVP forms, or by contacting us about events, you consent to the collection and use of your information as described in this policy, subject to any separate confirmation step (such as double opt-in) shown at signup.