Privacy Policy

Privacy Policy
Effective Date: July 26, 2025
Poy Yoga | poyyoga.com


1. Introduction

Poy Yoga (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, share, and protect your personal data when you visit our website poyyoga.com, use our yoga services, or communicate with us via email or other means.

We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.


2. Data Controller

The data controller for your personal data is:

Poy Yoga
Website: www.poyyoga.com
Email: [email protected]


3. Personal Data We Collect

We may collect and process the following types of personal data:

  • Contact Information: Full name, email address, phone number (if provided)
  • Payment Information: Billing address and limited payment data (processed securely via third-party payment providers)
  • Account Information: Login credentials, user preferences
  • Service Usage: Information about services purchased, classes attended, feedback submitted
  • Technical Data: IP address, browser type, device identifiers, cookies, log files
  • Communication Data: Emails, messages, inquiries, and other communications with us

We do not collect any special categories of personal data (e.g., health information) unless you explicitly provide it and consent to its processing.


4. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To provide, manage, and personalize yoga services
  • To process bookings and payments
  • To communicate with you about your account or services
  • To send newsletters and marketing communications (if you’ve opted in)
  • To analyze usage and improve our website and offerings
  • To comply with legal obligations and protect our legal rights

5. Legal Bases for Processing

We rely on one or more of the following legal bases to process your data:

  • Consent: When you have given clear consent for us to process your data
  • Contractual Necessity: When processing is necessary for the performance of a contract with you
  • Legal Obligation: To comply with legal or regulatory obligations
  • Legitimate Interests: To operate our business and improve our services, provided your rights do not override our interests

6. How We Share Your Data

We do not sell your personal data. However, we may share your data with:

  • Service Providers: Such as website hosting, payment processors, email platforms, and analytics tools
  • Legal and Regulatory Authorities: If required by law or to protect our legal rights
  • Business Transfers: In the event of a business sale, merger, or acquisition, your data may be transferred to the new owner

All third parties are required to respect the confidentiality and security of your data and process it in accordance with the law.


7. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When transferring your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.


8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

Criteria used to determine retention periods include:

  • Legal obligations
  • Contractual necessity
  • Your continued use of our services

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request corrections to inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data, subject to legal limitations
  • Right to Restrict Processing: Request limited use of your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to certain types of processing, including direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time, without affecting prior lawful processing
  • Right to Lodge a Complaint: File a complaint with a supervisory authority in your EU member state

To exercise any of these rights, please contact us at: [email protected]


10. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Secure hosting with encryption
  • Regular security audits and updates
  • Access controls and authentication protocols
  • Encrypted payment transactions via trusted third-party providers

Despite our efforts, no method of transmission or storage is 100% secure. If you believe your data has been compromised, please contact us immediately.


11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, understand user behavior, and improve our site.

You can manage your cookie preferences through your browser settings. For more information, please refer to our Cookie Policy (if available).


12. Children’s Privacy

Our website and services are not intended for individuals under the age of 16. We do not knowingly collect data from children without verifiable parental consent.


13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes. We encourage you to review it periodically.

The date of the latest revision will always be noted at the top.


14. Contact Us

For questions, concerns, or to exercise your rights, please contact:

Poy Yoga
Email: [email protected]
Website: www.poyyoga.com