Privacy Policy

1. Consent and Acknowledgement

Under the DPDPA, 2023, your personal data is processed solely on the basis of your explicit, specific, unambiguous, and revocable consent. By visiting our website or submitting your inquiries through our contact forms, you acknowledge that you have read this Privacy Policy and consent to our collection, storage, and processing of your personal data as described herein. You have the right to withdraw your consent at any time.

2. Personal Data We Collect

To facilitate booking confirmations, respond to inquiries, and personalize your wellness journey, we collect specific personal data. We only collect details that you voluntarily submit to us. This includes:

• Identity Information: Full Name.
• Contact Details: Email Address, Phone Number, and WhatsApp Number.
• Inquiry Details: Custom messages regarding your health goals, yoga experience, preferred session timings, and booking requirements.
• Technical and Usage Data: IP Address, browser type, device information, operating system, and details about how you interact with our website (using cookies and analytical tracking).

3. Purpose of Processing

We process your personal data in accordance with the principle of purpose limitation. The collected information is used solely for the following specified, lawful purposes:

• To verify your identity and manage class, sound bath, or retreat bookings.
• To contact you via Email, phone, or WhatsApp to confirm schedules, answer inquiries, or provide administrative updates.
• To dispatch notifications about your bookings.
• To maintain audit logs, verify transaction histories, and enhance administrative security inside our private admin dashboard.
• To improve website performance, user experience, and troubleshoot technical anomalies.

4. Sensitive Personal Data or Information (SPDI)

Yogabhyasi does not collect sensitive personal data such as financial account credentials (passwords, credit card credentials), biometric info, physical or mental health histories, sexual orientation, or medical records on our website.

If you voluntarily share sensitive health history details in the open contact message field to describe your physical constraints (e.g., back injury or pregnancy) for custom yoga alignment, we treat such details with extreme confidentiality and store them securely under strict access controls.

5. Data Retention and Deletion

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal frameworks in India. Once the processing purpose is completed, or when you withdraw your consent, we will permanently delete or anonymize your personal data from our active databases and backup storage systems.

6. Sharing and Disclosure of Information

We respect your privacy and do not sell, trade, rent, or distribute your personal data to third-party marketing companies. Your information is only shared with trusted service providers who assist in running our sanctuary operations under strict confidentiality, or if required by government/law enforcement agencies under the Information Technology Act, 2000.

7. Your Rights under DPDPA, 2023 (Rights of Data Principals)

As a Data Principal under Indian privacy laws, you possess legal rights over your personal data:

• Right to Summary: You have the right to request a summary of the personal data we hold about you and the processing activities executed on it.
• Right to Correction & Erasure: You can request us to correct inaccurate data, update outdated records, or permanently erase your personal details.
• Right to Withdraw Consent: You have the absolute right to withdraw your consent to data processing at any point.
• Right to Nominations: You can nominate any other individual to exercise your rights in the event of death or incapacity.
• Right to Grievance Redressal: You have the right to lodge complaints regarding any data handling practices with our Grievance Officer.

8. Data Security Measures

We implement robust physical, electronic, and managerial security practices (including encrypted database storage, secure SSL/HTTPS channels, and private admin credentials with rate-limiters) to prevent unauthorized access, alteration, disclosure, or destruction of your personal data.