Privacy Policy

At Yanna Pappa Holistic Yoga ("we," "us," or "our"), we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

1. Information We Collect

1.1 Personal Information

When you book our services or create an account, we may collect:

• Full name
• Email address
• Phone number
• Billing and payment information (processed securely through Stripe)
• Profile picture (optional)

1.2 Health Information

To provide safe and personalized yoga instruction, we may collect information about:

• Medical conditions or injuries
• Physical limitations or concerns
• Fitness level and yoga experience
• Emergency contact information

This sensitive health information is treated with the highest level of confidentiality and is only used to ensure your safety and customize your practice.

1.3 Booking and Usage Information

We automatically collect information about your interactions with our services:

• Booking history and preferences
• Class attendance and participation
• Communication history with instructors
• Reviews and testimonials you provide

1.4 Technical Information

When you visit our website, we may collect:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website addresses

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To process bookings, schedule sessions, and deliver the yoga services you've requested
• Communication: To send booking confirmations, reminders, updates, and respond to your inquiries
• Safety: To ensure your health and safety during classes and retreats by understanding your physical condition
• Payment Processing: To process payments and manage your account
• Improvement: To analyze and improve our services, website functionality, and user experience
• Marketing: To send promotional offers, newsletters, and updates about our services (with your consent)
• Legal Compliance: To comply with legal obligations and protect our rights

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal data based on:

• Contract Performance: Processing necessary to fulfill our services to you
• Consent: Where you have given explicit consent (e.g., marketing communications, health data)
• Legitimate Interests: For improving our services and preventing fraud
• Legal Obligation: Where required by law

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting our business (e.g., Stripe for payment processing, Base44 for hosting)
• Instructors: Your health and booking information may be shared with instructors to provide personalized and safe instruction
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Emergency Situations: To protect the safety and rights of you or others

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Secure Socket Layer (SSL) encryption for data transmission
• Secure payment processing through Stripe (PCI DSS compliant)
• Regular security assessments and updates
• Access controls and authentication procedures
• Encrypted storage of sensitive health information

While we strive to protect your information, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for processing based on consent at any time
• Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, please contact us through our Contact page. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Understand how you use our website
• Improve website functionality and performance
• Provide personalized content and recommendations

You can control cookies through your browser settings. Disabling cookies may affect your experience on our website.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we will securely delete or anonymize it.

Typical retention periods include:

• Account information: Duration of your account plus 3 years
• Booking and payment records: 7 years (for accounting and legal purposes)
• Health information: Duration of your participation plus 2 years
• Marketing communications: Until you unsubscribe or request deletion

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country. By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page with a new "Last Updated" date. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our Contact page.