Privacy Policy | All You Yoga

1. Introduction

Welcome to All You Yoga ("All You Yoga", "we", "us", or "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://allyouyoga.co.uk (the "Site") and use our services.

Please read this Privacy Policy carefully. By using our Site and services, you consent to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

2. Data Controller

All You Yoga is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: lee-ann@allyouyoga.co.uk
Website: https://allyouyoga.co.uk

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when you:

Sign up for our waitlist or newsletter
Take our yoga style quiz
Request a free class
Use our live chat feature
Contact us via email or forms
Create an account for Elevate Studio
Purchase classes or memberships

This information may include:

Name
Email address
Location preferences (e.g., preferred class locations in Nottingham)
Quiz responses and preferences
Messages you send via chat or contact forms
Payment information (processed securely by third-party payment processors)

3.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information, including:

IP address
Browser type and version
Device type and operating system
Pages visited and time spent on pages
Referring website
Date and time of visits
Clickstream data

3.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information. These include:

Essential Cookies

Required for the Site to function properly. These cannot be disabled.

Session management
Security features
Cookie consent preferences

Analytics Cookies (Google Analytics)

We use Google Analytics to understand how visitors interact with our Site. Google Analytics collects:

Pages visited and navigation paths
Time spent on pages
Geographic location (country/city level)
Device and browser information
Traffic sources

Google Analytics uses cookies to collect this data. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.

For more information about Google's privacy practices, please visit: Google Privacy Policy

Functional Cookies (Live Chat - Lead Connector)

We use Lead Connector (powered by GoHighLevel) to provide live chat support. This service may collect:

Chat messages and conversations
Name and email (if provided)
Browser and device information
Chat interaction data

4. How We Use Your Information

We use the information we collect to:

Provide and maintain our services
Notify you about class availability and schedules
Send you newsletters, updates, and marketing communications (with your consent)
Respond to your enquiries and provide customer support
Process transactions and send related information
Personalise your experience and recommend classes
Analyse usage patterns to improve our Site and services
Detect and prevent fraud or abuse
Comply with legal obligations

5. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

Consent: Where you have given clear consent for us to process your personal data for specific purposes (e.g., marketing emails, analytics cookies).
Contract: Where processing is necessary to perform a contract with you (e.g., providing yoga classes you've purchased).
Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights (e.g., improving our services, fraud prevention).
Legal Obligation: Where processing is necessary to comply with legal requirements.

6. Data Sharing and Disclosure

We may share your information with:

Service Providers

Google Analytics: Website analytics (USA - Privacy Shield compliant)
GoHighLevel / Lead Connector: CRM, chat, and marketing automation (USA)
Netlify: Website hosting (USA)
Payment processors: Secure payment handling

Other Disclosures

We may also disclose your information:

To comply with legal obligations or court orders
To protect our rights, privacy, safety, or property
In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties.

7. International Data Transfers

Your information may be transferred to and processed in countries outside the UK/EEA, including the United States. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
Data Processing Agreements with our service providers
Compliance with UK GDPR requirements

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Waitlist/newsletter subscribers: Until you unsubscribe, plus 30 days
Customer data: 7 years after last transaction (for legal/tax purposes)
Chat conversations: 2 years
Analytics data: 26 months (Google Analytics default)
Cookie consent records: 1 year

9. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing: Request limitation of how we use your data.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where we rely on consent for processing.

To exercise any of these rights, please contact us at lee-ann@allyouyoga.co.uk. We will respond to your request within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your rights have been violated.

10. Cookie Management

When you first visit our Site, you will be shown a cookie consent banner allowing you to accept or decline non-essential cookies. You can change your preferences at any time by clicking "Cookie Settings" in the footer.

You can also control cookies through your browser settings:

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for data in transit
Secure hosting with Netlify
Access controls and authentication
Regular security reviews

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Children's Privacy

Our Site and services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal data.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: lee-ann@allyouyoga.co.uk
Website: https://allyouyoga.co.uk