GDPR
Privacy Policy
Last Updated: 25th March 2025
At Yoga With Carol, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website, [www.yogawithcarol.org](http://www.yogawithcarol.org), and use our services. This policy is in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 in the United Kingdom.
By using our website or engaging with our services, you consent to the collection and use of your data as described in this Privacy Policy.
1. Information We Collect
We may collect and process the following types of personal data:
Personal Identification Information: Name, email address, phone number, and other contact details.
Account Information: Username and password if you create an account with us.
Payment Information: Details of your payment method and billing information (processed securely by third-party payment providers).
Usage Data: Information on how you use our website, such as IP addresses, browser type, pages visited, and actions taken on our website.
Communication Data: Messages you send to us, including customer support inquiries.
2. How We Use Your Information
We use the personal data we collect for the following purposes:
Providing Services: To process your purchases, manage your account, and provide you with access to our yoga classes and courses.
Communication: To communicate with you about your account, respond to inquiries, and send updates related to our services.
Marketing: With your consent, we may send you promotional emails or newsletters about new courses, offers, or updates.
Improving Our Services: To analyse how our website is used, improve user experience, and ensure our website functions efficiently.
Legal Obligations: To comply with any applicable legal or regulatory requirements.
3. Lawful Basis for Processing Personal Data
Under the GDPR, we are required to have a lawful basis for processing your personal data. The lawful bases we rely on are:
Consent: We will obtain your consent before sending marketing materials, promotional offers, or newsletters.
Contractual Necessity: We process your personal data as necessary to provide you with the services you have requested (e.g., access to yoga classes, course purchases).
Legitimate Interests: We may process your data for purposes such as improving our services, analyzing website usage, and enhancing the customer experience.
Legal Obligation: We may need to process your data to comply with legal obligations, such as tax or accounting requirements.
4. Sharing Your Data
We do not sell or rent your personal data to third parties. However, we may share your personal data with the following third parties for the purposes stated in this policy:
Payment Processors: To process payments made on our website (e.g., PayPal, Stripe).
Service Providers: Third-party providers that assist with website hosting, email services, or other business functions.
Legal Compliance: If required by law, we may disclose your personal data to law enforcement, regulatory bodies, or other third parties.
5. Data Retention
We will retain your personal data for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, including any legal, accounting, or reporting obligations. After this period, we will securely delete or anonymise your data.
6. Your Data Protection Rights
As a data subject, you have the following rights under the GDPR:
Right to Access: You have the right to request copies of your personal data.
Right to Rectification: You can request that we correct any inaccuracies in your personal data.
Right to Erasure: You can request that we delete your personal data under certain conditions.
Right to Restriction of Processing: You can request that we restrict how we process your data.
Right to Data Portability: You can request that we transfer your personal data to another organisation, if applicable.
Right to Object: You can object to the processing of your personal data for direct marketing purposes.
To exercise these rights, please contact us using the details below.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance the user experience on our website. Cookies are small text files placed on your device that help us analyse website traffic, personalise content, and improve website functionality. You can manage your cookie preferences through your browser settings.
For further information, visit allaboutcookies.org.
How do we use cookies?
Our Company uses cookies in a range of ways to improve your experience on our website, including:
Keeping you signed in
Understanding how you use our website
[Add any uses your company has for cookies]
What types of cookies do we use?
There are a number of different types of cookies, however, our website uses:
Functionality — Our Company uses these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer and the location you are in. A mix of first-party and third-party cookies are used.
Advertising — Our Company uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed, and information about your browser, device, and your IP address. Our Company sometimes shares some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.
How to manage your cookies
You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.
8. Security of Your Data
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no data transmission over the internet can be guaranteed as completely secure. While we strive to protect your personal data, we cannot ensure the absolute security of any information you transmit to us.
9. International Transfers of Data
Your personal data may be transferred to and stored on servers located outside the UK. We ensure that such transfers comply with the GDPR’s data protection requirements and implement appropriate safeguards.
10. Links to Other Websites
Our website may contain links to external websites that are not operated by us. We are not responsible for the privacy practices or content of such third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with the updated date at the top.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Yoga With Carol
Email: yogawcarol@gmail.com
Website: (www.yogawithcarol.org](http://www.yogawithcarol.org)
