Privacy Policy

1. Introduction

Soulful-Yoga ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our website and services, you consent to the practices described in this policy.

2. Data Controller

Soulful-Yoga is the data controller responsible for your personal data. For any questions about this Privacy Policy or our data practices, please contact us at hello@soulful-yoga.co.uk.

3. Information We Collect

3.1 Personal Information You Provide

We collect information that you voluntarily provide when using our services:

• Booking Information: Name, email address, phone number (optional), dietary requirements, special requests, and accommodation preferences
• Newsletter Subscription: Email address
• Contact Inquiries: Name, email address, phone number (optional), and message content

3.2 Automatically Collected Information

When you visit our website, we automatically collect certain anonymous information:

• Pages visited and browsing patterns
• Device type (mobile, tablet, desktop)
• Browser family and operating system family
• Browser language preference
• Referrer URL (the page that led you to our site)
• Approximate geographic location (country, region, city) from CDN headers
• Anonymous session identifiers
• UTM parameters for marketing campaign tracking (source, medium, campaign, term, content)

This information is not intended to identify you personally and is collected without the use of tracking cookies. Geographic data is derived from CDN infrastructure headers, not from precise GPS or device location. We do not use cookies for advertising purposes.

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill retreat bookings and provide our services
• Consent: Newsletter subscriptions and marketing communications (which you can withdraw at any time)
• Legitimate Interests: Responding to inquiries, improving our website, and preventing fraud
• Legal Obligations: Compliance with applicable laws and regulations

5. How We Use Your Information

We use the information we collect to:

• Process and manage retreat bookings
• Send booking confirmations and retreat-related communications
• Respond to your inquiries and support requests
• Send newsletters and updates (only if you have opted in)
• Improve our website and services based on anonymous usage patterns
• Analyze website traffic and marketing campaign effectiveness
• Comply with legal obligations

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in limited circumstances:

• Retreat Venues: We share necessary booking information with our partner venues to arrange your accommodation and meals
• Service Providers: Trusted third-party services that help us operate our website and process payments, bound by confidentiality agreements
• Legal Requirements: When required by law or to protect our rights

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Booking Data: Retained for 7 years after the retreat date for accounting and legal purposes
• Contact Inquiries: Retained for 2 years or until resolved
• Newsletter Subscriptions: Retained until you unsubscribe
• Anonymous Analytics: Retained for 2 years for trend analysis

8. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact us at hello@soulful-yoga.co.uk. We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure HTTPS encryption for all data transmissions
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Secure data storage with appropriate access controls

10. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority. However, we encourage you to contact us first at hello@soulful-yoga.co.uk so we can address your concerns.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: