Privacy Policy
Yoga Wise
Effective date: 1 February 2026
Yoga Wise (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, book services, attend classes, workshops or retreats, or otherwise engage with us.
We are based in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Data Controller: Yoga Wise
Address: 10 Bakersfield, Mayland, Essex, CM3 6GT, United Kingdom
Email: privacy.champion@yoga-wise.co.uk
2. The Personal Data We Collect
We may collect and process the following categories of personal data:
a) Identity & Contact Data
Name
Email address
Telephone number
Postal address
b) Booking & Transaction Data
Class, workshop or session bookings
Payment status and transaction references
Payment provider details (payments are processed securely by Stripe – we do not store full card details)
c) Health & Special Category Data
Information provided via health or medical intake forms (collected using Jotform)
Lifestyle, wellbeing or injury information relevant to safe participation in yoga, healing or bodywork sessions
This information is classed as special category data under UK GDPR and is handled with additional care.
d) Marketing & Communications Data
Email newsletter subscriptions
Preferences regarding communications
e) Technical & Usage Data
IP address
Browser type and version
Device and operating system
Website usage and analytics data (via tools such as Google Analytics)
3. How We Collect Your Data
We collect personal data:
When you complete booking or enquiry forms on our website
When you complete health or medical intake forms (via Jotform)
When you purchase services or products
When you subscribe to our mailing list (Mailchimp)
When you contact us by email or other means
Automatically through cookies and analytics tools when you use our website
4. Lawful Bases for Processing
Under UK GDPR, we rely on the following lawful bases:
a) Contract
To provide classes, workshops, 1:1 sessions and related services you book with us.
b) Consent
To process health and medical information
To send marketing emails
To use non-essential cookies
You may withdraw consent at any time.
c) Legal Obligation
To comply with accounting, tax, and regulatory requirements.
d) Legitimate Interests
To:
Operate and improve our website and services
Communicate with you about your bookings
Maintain business records
Ensure safety during sessions
We always balance our legitimate interests against your rights and expectations.
5. How We Use Your Personal Data
We use your data to:
Provide and manage our services
Assess suitability and ensure safety during sessions
Communicate important information about bookings or changes
Send newsletters and updates (where consent has been given)
Improve our services and website
Meet legal and accounting obligations
6. Children and Young People
We do not exclude participants under the age of 18. Where services are provided to children or young people, parental or guardian consent is required for:
Participation
Completion of health forms
Processing of personal and health data
7. Sharing Your Data
We may share your data only where necessary with trusted service providers, including:
Stripe – payment processing
Mailchimp – email communications
Jotform – secure form collection
Website hosting and IT service providers
Professional advisers (accountants, legal advisers)
All third parties are required to process your data securely and in accordance with data protection law.
8. International Data Transfers
Some of our service providers (e.g. Stripe, Mailchimp, Jotform) may process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:
UK adequacy regulations
Standard Contractual Clauses
Provider compliance with UK GDPR requirements
9. Data Retention
We retain personal data only for as long as necessary:
Client and health records: up to 7 years
Marketing data: until you unsubscribe or withdraw consent
Financial records: as required by HMRC (typically 6 years)
Data is securely deleted or anonymised when no longer required.
10. Data Security
We take appropriate technical and organisational measures to protect your data, including:
Secure servers and encrypted services
Password protection and access controls
Limited access to personal and health data
11. Your Rights
Under UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure (“right to be forgotten”)
Restrict or object to processing
Withdraw consent at any time
Request data portability
To exercise your rights, contact us using the details below.
12. Cookies & Analytics
We use cookies to ensure our website functions correctly and to understand how visitors use our site.
Non-essential cookies are used only with your consent. You can manage cookie preferences via our cookie banner or your browser settings.
For full details, please see our Cookie Policy.
13. Complaints
If you have concerns about how we handle your data, please contact us first.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
14. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.
15. Contact Us
If you have any questions about this Privacy Policy or your personal data, please contact:
Privacy Champion – Yoga Wise
10 Bakersfield
Mayland, Essex, CM3 6GT
Email: privacy.champion@yoga-wise.co.uk