Privacy policy

1. Data Controller

 

The controller responsible for processing your personal data is:

 

Kundalini Paradise Yoga School

Geneva, Switzerland

Email: kundaliniparadise@gmail.com

 

If you have any questions about this Privacy Policy or data protection, you can contact us at the email address above.

 

 

2. What Data We Collect

 

We may collect and process the following categories of personal data about you:

 

 

2.1 Data you provide directly

 

Contact forms / enquiries

 

When you contact us via the contact form, email, or social media, we collect:

 

• First name and last name

• Email address

• Any information you include in your message

 

Free discovery calls / bookings

 

When you book a discovery call (e.g. via Calendly) or sign up for a class, retreat, or training, we may collect:

 

• First name and last name

• Email address and/or phone number

• Preferred language

• Date/time and details of the call or program

• Information you voluntarily share about your experience, goals, or expectations

 

Newsletter subscriptions

 

When you subscribe to our newsletter, we collect:

 

• Email address

• Name (if provided)

• Consent to receive email marketing

 

Payments and invoicing

 

When you pay for a retreat, teacher training, class package or online course, we (or our payment providers) may collect:

 

• Name and billing details

• Email address

• Payment information (e.g. last digits of card, transaction ID – full payment data is usually processed by our payment service provider)

• Purchase history (what you bought, when, and how much you paid)

 

 

2.2 Data collected automatically

 

When you visit our Website, certain data is collected automatically by your browser or device, such as:

 

• IP address

• Date and time of access

• Pages viewed and actions taken

• Device type and operating system

• Browser type and version

• Referring website (if you came from another website)

 

This information is usually collected through cookies and similar technologies (see Section 6).

 

 

2.3 Special categories of data (sensitive data)

 

In the context of yoga classes, retreats, and trainings, you might voluntarily share information related to your health (e.g. injuries, pregnancy, medical conditions) so that we can adapt practices and keep you safe.

 

We treat this information with particular care and only use it:

 

• With your consent, and

• To adapt classes or retreats to your needs and ensure your safety.

 

You are not obliged to share any health information. If you do, you can ask us to delete or update it at any time (see Section 9).

 

 

3. Purposes and Legal Bases for Processing

 

We process your personal data for the following purposes and, where applicable, on the following legal bases under FADP and GDPR:

 

 

3.1 Communication and customer support

 

• To respond to your messages and enquiries

• To organise discovery calls, explain our offerings, and follow up

  Legal basis:

• Fulfilment of (pre-)contractual obligations

• Our legitimate interest in responding to enquiries and providing good service

 

 

3.2 Provision of classes, retreats, and teacher trainings

 

• To manage your registration and participation

• To provide course materials and information

• To manage attendance and certificates (e.g. Yoga Alliance compliant 200-hour teacher training)

  Legal basis:

• Fulfilment of contract

• Legal obligations (e.g. accounting and tax rules)

 

 

3.3 Newsletter and marketing communication

 

• To send you news, updates, offers, and content about yoga classes, retreats, and trainings

• To manage your email subscription and preferences

  Legal basis:

• Your consent (e.g. ticking “Yes, subscribe me to your newsletter” on the form)

  You can unsubscribe at any time via the “unsubscribe” link in our emails or by contacting us.

 

 

3.4 Operation and optimisation of the Website

 

• To ensure the Website works correctly and securely (e.g. security logs)

• To analyse traffic and improve our content, navigation, and user experience (e.g. basic analytics)

  Legal basis:

• Our legitimate interest in maintaining, securing, and improving our Website

 

 

3.5 Compliance and protection

 

• To comply with legal obligations (e.g. tax and accounting retention periods)

• To prevent abuse, fraud, or security incidents

• To assert, exercise, or defend legal claims

  Legal basis:

• Legal obligations

• Our legitimate interest in protecting our rights and the security of our services

 

 

4. Sharing of Personal Data

 

We do not sell your personal data. We only share it with third parties where necessary and in accordance with applicable data protection law.

 

We may share your data with:

 

• Service providers / processors who help us run our business, such as:

   

  • Website hosting providers

  • Email newsletter providers (e.g. mailing list tools)

  • Online scheduling tools (e.g. Calendly)

  • Payment service providers

  • Video conferencing tools (e.g. Zoom or similar)

  • Learning or course platforms

 

These providers process your data on our behalf and only according to our instructions. We conclude appropriate data processing agreements with them where required.

 

• Professional advisors and authorities

  Where required by law or necessary for legal protection, we may share personal data with:

   

  • Tax or regulatory authorities

  • Legal or financial advisors

  • Courts or law enforcement agencies, if legally obliged

 

 

5. International Data Transfers

 

Our Website and services may involve providers located outside Switzerland and/or the EU/EEA (for example, email tools, hosting, scheduling tools, or payment providers).

 

In such cases, we ensure that either:

 

• The country has an adequacy decision (i.e. data protection deemed adequate), or

• Appropriate safeguards are in place, such as standard contractual clauses or similar contractual protections.

 

You can contact us if you wish to receive more information about cross-border data transfers and the safeguards used.

 

 

6. Cookies and Similar Technologies

 

Our Website may use cookies and similar technologies (e.g. local storage, pixels) to:

 

• Enable basic website functions (e.g. navigation, forms)

• Improve performance and security

• Collect aggregated statistics on how visitors use the Website

 

Cookies are small text files that are stored on your device. You can control and/or delete cookies as you wish:

 

• You can configure your browser to block or delete cookies.

• Please note that blocking certain cookies may affect the functionality of the Website.

 

If we use analytics or marketing cookies that are not strictly necessary, we will inform you (e.g. via a cookie banner) and, where required, ask for your consent.

 

 

7. Data Retention

 

We keep your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including:

 

• Contact and enquiry data: as long as needed to handle your request, plus a reasonable period for follow-up and documentation.

• Customer and booking data: for the duration of the contractual relationship and in line with statutory retention periods (e.g. accounting and tax obligations, typically several years).

• Newsletter data: until you unsubscribe or withdraw your consent.

• Health-related information: only as long as necessary for the class or program, or until you ask us to delete it.

 

When data is no longer needed, it will be deleted, anonymised, or, where deletion is not possible, securely blocked from further use.

 

 

8. Security of Your Data

 

We implement appropriate technical and organisational measures to protect your personal data against:

 

• Unauthorised access

• Loss or misuse

• Alteration or destruction

 

These measures may include:

 

• Secure hosting and encrypted connections (HTTPS)

• Access controls and restricted access for staff

• Regular updates and security checks

 

However, no method of transmission or storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

 

 

9. Your Rights

 

Subject to applicable law (FADP and, where applicable, GDPR), you have the following rights regarding your personal data:

 

• Right of access – to know whether we process your data and to obtain a copy.

• Right to rectification – to have inaccurate or incomplete data corrected.

• Right to erasure – to request deletion of your personal data, where legally permitted.

• Right to restriction of processing – to limit how we use your data in certain cases.

• Right to data portability – to receive personal data you provided us in a structured, commonly used format, where technically feasible and legally required.

• Right to object – to object to certain processing based on our legitimate interests, especially direct marketing.

• Right to withdraw consent – where processing is based on your consent, you may withdraw this consent at any time, without affecting the lawfulness of processing before withdrawal.

 

To exercise your rights, please contact us at: kundaliniparadise@gmail.com

 

You also have the right to lodge a complaint with a data protection authority, for example:

 

• In Switzerland: the Federal Data Protection and Information Commissioner (FDPIC)

• In the EU/EEA: your local supervisory authority for data protection

 

 

10. Data Concerning Children

 

Our Website and services are generally aimed at adults. We do not knowingly collect personal data from children under the age required by applicable law without appropriate parental consent.

 

If you believe that a child has provided us with personal data without parental consent, please contact us so we can delete the data as required.

 

 

11. Links to Other Websites

 

Our Website may contain links to external websites (e.g. Calendly, social media platforms, or partner pages). We are not responsible for the content or privacy practices of those websites.

 

We recommend that you read the privacy policies of any third-party websites you visit.

 

 

12. Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements.

 

The “Last updated” date at the top indicates when this Privacy Policy was last revised.

 

We encourage you to review this page periodically to stay informed about how we process your personal data.

 

 

13. Contact

 

If you have any questions, requests, or concerns about this Privacy Policy or how we handle your personal data, you can contact us at:

 

Kundalini Paradise Yoga School

Geneva, Switzerland

Email: kundaliniparadise@gmail.com