Privacy Policy

Our Commitment to Your Privacy

At Mindful Yoga London, we are deeply committed to protecting your privacy and safeguarding your personal data. This Privacy Policy outlines how we collect, use, store, and disclose your information, ensuring full compliance with the UK General Data Protection Regulation (GDPR) and other relevant data protection laws. We believe in transparency and want you to feel confident about the security of your data when you interact with our services.

1. Information We Collect

We collect various types of information to provide and improve our services to you. This includes:

• Personal Identification Information: Your name, email address, postal address, phone number, and date of birth when you register for classes, membership, or subscribe to our newsletter.
• Health Information: Details about your physical health, injuries, or medical conditions that you voluntarily provide to ensure your safety and well-being during yoga sessions. This is collected with explicit consent.
• Payment Information: We do not directly store your credit card details. All payment transactions are processed through secure third-party payment gateways, such as Stripe or PayPal, which comply with industry security standards.
• Usage Data: Information about how you access and use our website, including your IP address, browser type, pages visited, and the duration of your visits. This helps us improve our website experience.
• Communication Data: Records of your correspondence with us via email, phone, or contact forms.

2. How We Use Your Information

The information we collect is used for various purposes, primarily to deliver and enhance our yoga services:

• To Provide Services: To manage your class bookings, membership, and provide access to our studios and online content.
• For Communication: To send you important updates about your bookings, schedule changes, membership renewals, and respond to your inquiries.
• Personalisation: To tailor our services and recommendations based on your preferences and health information (with your consent).
• Marketing: With your explicit consent, to send you newsletters, promotional offers, and information about new classes or workshops. You can opt-out at any time.
• Safety and Welfare: To ensure your safety during classes, especially when health information has been provided.
• Website Improvement: To analyze website usage and improve its functionality, content, and user experience.
• Legal Compliance: To comply with legal obligations and resolve any disputes.

3. Data Storage and Security

Your data is stored securely on servers located within the European Economic Area (EEA). We implement a variety of security measures to maintain the safety of your personal information:

• Encryption: Data transmitted to and from our website is protected using SSL/TLS encryption.
• Access Controls: Access to your personal data is restricted to authorized personnel only, who are bound by confidentiality agreements.
• Regular Audits: Our systems are regularly monitored and audited for vulnerabilities and security breaches.
• Data Minimization: We only collect information that is necessary for the stated purposes.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, customer data is kept for a period of 7 years after your last interaction with us, to comply with tax and legal obligations. Health information is retained as long as you are an active client and for a reasonable period thereafter for safety records, unless you request its earlier deletion.

5. Disclosure of Your Information

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties without your prior explicit consent, except in the following circumstances:

• Service Providers: We may share data with trusted third-party service providers who assist us in operating our website, conducting our business (e.g., payment processors, email marketing platforms), or serving our users, as long as those parties agree to keep this information confidential and comply with GDPR.
• Legal Requirements: We may disclose your information when required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of the transaction. We will notify you before your personal data is transferred and becomes subject to a different Privacy Policy.

6. Your Data Protection Rights (GDPR)

Under GDPR, you have several rights regarding your personal data:

• The Right to Access: You have the right to request copies of your personal data. We may charge you a small fee for this service.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The Right to Withdraw Consent: You have the right to withdraw your consent at any time where Mindful Yoga London relied on your consent to process your personal information.

If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us using the details provided below.

7. Third-Party Links

Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

8. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last updated" date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please do not hesitate to contact us:

• Email: [email protected]
• Phone: +44 131 678 9012
• Address: Mindful Yoga London, 82 George Street, Edinburgh, EH2 3ES, United Kingdom

Last updated: 14th June 2024