Privacy Policy - My Yoga Place
Privacy Policy — My Yoga Place
Effective date: [10/08/2026]
Business: My Yoga Place, 70 Kyle Street, Ayr, KA7 1RZ, United Kingdom
Contact: myyogaplaceayr@gmail.com
1) Who we are
My Yoga Place ("we", "us") is the data controller for the personal data described in this Privacy Policy. Our website and booking systems are hosted by Wix.com, which stores and processes personal data on our behalf as a service provider (data processor).
2) What personal data we collect
Depending on how you interact with us, we may collect:
• Identity & contact details: name, email address, phone number, address (if provided).
• Bookings & membership details: classes/services booked, attendance, membership status, passes, and related communications.
• Payment-related information: transaction records and payment status. Card payments are processed by Stripe; we do not receive or store your full card details.
• Health information (optional): information you choose to share about injuries, pregnancy, medical conditions, or accessibility needs so we can support safe participation.
• Messages you send us: emails, form submissions, chat messages.
• Website usage data: device and browser information, IP address, pages viewed, and cookies/analytics data (where enabled).
3) How we use your data (purposes)
We use personal data to:
• Provide and administer classes, workshops, appointments, memberships, and gift certificates.
• Manage bookings, cancellations, refunds/credits, and customer support.
• Communicate with you about your sessions, changes, and important service updates.
• Improve our services and website performance.
• Meet legal, tax, and accounting obligations.
• With your choice/consent where required: send marketing communications and use photos/videos.
4) Lawful bases (UK GDPR)
We rely on the following lawful bases, depending on the situation:
• Contract: to provide what you book or purchase.
• Legitimate interests: to run and improve our business, respond to enquiries, and keep records (balanced against your rights).
• Legal obligation: for tax/accounting and other legal requirements.
• Consent: where required (e.g. certain marketing, cookies/analytics where applicable, and use of photos/videos when you opt out/in as relevant).
• Vital interests: in rare cases, to protect someone's health/safety.
Health information: If you share health information, we use it only to support safe participation and appropriate modifications. You can choose not to provide it.
5) Where we store your data (Wix + accounting records)
Your data is stored and processed through Wix.com (our website hosting and booking systems).
Accounting records (Google Drive and local storage): We may keep limited customer transaction records for accounting and tax purposes (such as customer name and amounts paid). These records may be stored securely in Google Drive and/or on our own password-protected computer. Access is restricted to authorised staff only, and we keep these records only as long as required for legal, accounting, or insurance purposes.
6) Who we share your data with
We share personal data only as needed with:
• Wix.com (website hosting, bookings, forms, member accounts, and related services).
• Stripe – to process card payments and help prevent fraud. Stripe receives payment and transaction details needed to process your payment; we do not store your full card details.
• Professional advisers (accountants/insurers) where necessary.
• Authorities where required by law.
We do not sell your personal data.
7) International transfers
Some providers (including Wix and Stripe) may process data outside the UK. Where personal data is transferred internationally, appropriate safeguards are used as required by data protection law.
8) How long we keep your data
We keep personal data only as long as necessary for the purposes above, including to meet legal, accounting, and insurance requirements. Retention periods vary depending on the type of record.
9) Your rights
You have rights under data protection law, including:
• Access to your personal data
• Correction of inaccurate data
• Deletion (in certain circumstances)
• Restriction or objection to processing (in certain circumstances)
• Data portability (in certain circumstances)
• Withdraw consent (where processing is based on consent)
To exercise your rights, contact myyogaplaceayr@gmail.com. We may need to verify your identity.
You also have the right to complain to the Information Commissioner's Office (ICO): https://ico.org.uk/
10) Cookies and analytics
Our website may use cookies and similar technologies. Where required, you will be given choices via a cookie banner/settings. You can also control cookies through your browser settings.
11) Photos and videos
We may take photos/videos during classes or events for promotional use (e.g. social media and our website). If you do not wish to be photographed or filmed, please tell us and we will respect your preference.
12) Children
Our services are intended for adults. If we knowingly collect personal data relating to a child, we will handle it in line with applicable law and may request parental/guardian consent where required.
13) Changes to this policy
We may update this Privacy Policy from time to time. The latest version will be posted on our website with the effective date.