Privacy Policy

Last updated: Dec 1, 2025

1. Introduction

Yogadhaama Wellness (โ€œweโ€, โ€œourโ€, โ€œusโ€) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you visit our website (www.yogadhaama.com) or interact with our retreats, teacher training courses, workshops, accommodation services, newsletters, and inquiries.

By using our website or submitting information, you agree to the practices described in this policy.


2. Data Controller Information (GDPR Requirement)

Under the General Data Protection Regulation (GDPR), we are required to identify the entity responsible for your data.

Data Controller:
Yogadhaama Wellness
Cauvery Sannidhi for Indian Culture,
Bommuru Agrahara Village,
Srirangapatna Tq.,
Mandya District โ€“ 571606,
India
๐Ÿ“ง Email: privacy@yogadhaama.com


3. Information We Collect

We collect personal and non-personal data in the following categories:

A. Information You Provide Directly

  • Name, email address, phone number

  • Address for communication or invoicing

  • Booking / inquiry details

  • Payment-related information (processed securely by third-party gateways; we do not store card numbers)

B. Automatically Collected Information

When you visit our website, we may automatically collect:

  • IP address

  • Browser type, device information, operating system

  • Pages viewed, time spent, and referring URLs

  • Cookie identifiers

We use tools like Google Analytics to understand website traffic and improve user experience.


4. How We Use Your Information

We process your personal data for the following purposes, in compliance with GDPR:

A. To Fulfil a Contract (when you book or register)

  • Processing bookings and payments

  • Sending confirmations or essential updates

  • Providing access to your chosen course, retreat, or service

B. Based on Your Consent

  • Sending newsletters, announcements, or marketing communications

  • Using non-essential cookies (analytics, preference cookies)
    You may withdraw your consent at any time.

C. For Legitimate Interests

  • Improving website performance

  • Protecting our platform from fraud or abuse

  • Analytics and service optimization

D. Legal Obligations

  • Maintaining records for tax or regulatory purposes

  • Responding to legal requests from authorities

We never sell or rent your personal information.


5. Cookies and Tracking Technologies

Our website uses cookies to function effectively and enhance your experience.

Types of Cookies Used

  • Necessary cookies: Required for site functioning

  • Analytics cookies: From Google Analytics (used only with your consent)

  • Preference cookies: Save your chosen settings

Cookie Consent (GDPR Requirement)

EU/EEA visitors will see a cookie banner allowing them to:

  • Accept all cookies

  • Reject non-essential cookies

  • Manage preferences

You can also modify cookie settings from your browser.


6. Legal Basis for Processing (GDPR Article 6)

We process personal data on the following legal grounds:

  • Consent (email marketing, optional cookies)

  • Contract (booking a retreat/TTC or filling forms necessary for service delivery)

  • Legitimate Interest (site security, analytics, business improvement)

  • Legal Obligation (record keeping, fraud prevention)


7. International Data Transfers (GDPR Requirement)

Your data may be transferred to and processed in India, where our operations and hosting are located.

We rely on the following safeguards:

  • Secure third-party processors (e.g., Google) that implement Standard Contractual Clauses (SCCs)

  • Technical and organizational measures such as encryption and restricted access

  • Data minimization principles

By using our services, you acknowledge that your data may be processed outside the EU under these safeguards.


8. Third-Party Processing & Data Processing Agreements (DPAs)

We use trusted third-party service providers who process data on our behalf.

Service Providers We Use

  • Hostinger (Website hosting)

  • Google Analytics (Website analytics)

Each provider follows GDPR-compliant standards and has Data Processing Agreements (DPAs) available through their platforms.

These providers only receive the minimum data required to perform their functions and may not use it for any other purpose.


9. Data Retention

We retain your personal information only as long as necessary for:

  • Delivering services

  • Meeting legal, tax, or accounting requirements

  • Resolving disputes

Typical retention periods:

  • Booking/transaction records: 7 years

  • Newsletter data: until you unsubscribe

  • Inquiry data: 12โ€“24 months

  • Cookie data: based on cookie type (generally 6โ€“12 months)


10. Data Security

We implement security measures to protect your data from unauthorized access, alteration, or disclosure.

These include:

  • SSL encryption

  • Access control restrictions

  • Secure hosting infrastructure

  • Regular monitoring for vulnerabilities

While no system is 100% secure, we take all reasonable steps to safeguard your information.


11. Your Rights Under GDPR

If you are located in the EU/EEA, you have the following rights:

  • Right to Access: Request a copy of your personal data

  • Right to Rectification: Correct inaccurate information

  • Right to Erasure: Request deletion of your data (โ€œRight to be forgottenโ€)

  • Right to Restrict Processing

  • Right to Object to Processing

  • Right to Data Portability

  • Right to Withdraw Consent at any time

  • Right to Lodge a Complaint with your national data protection authority

To exercise any of these rights, email: privacy@yogadhaama.com

We will respond within 30 days.


12. Children’s Privacy

Our website is not intended for individuals below 16 years from the EU or under 13 years globally.

We do not knowingly collect data from minors.
If you believe a minor has submitted data, contact us and we will delete it.


13. Links to External Websites

Our website may contain links to third-party sites.
We are not responsible for their content or privacy practices.

We recommend reviewing their privacy policies before providing personal data.


14. Data Breach Notification

In the event of a data breach likely to result in risk to your rights or freedoms:

  • We will notify affected individuals

  • We will notify relevant authorities (if applicable under GDPR)
    within legally required timeframes


15. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services.

Significant updates will be posted on this page with a new revision date.


16. Contact Us

If you have questions, concerns, or wish to exercise your data rights, please contact:

Yogadhaama Wellness
๐Ÿ“ง privacy@yogadhaama.com
๐Ÿ“ž +91 78994 78876
๐Ÿ“ Cauvery Sannidhi for Indian Culture, Bommuru Agrahara Village, Srirangapatna Tq., Mandya District โ€“ 571606, India