Yogalina is committed to complying with the General Data Protection Regulation and the Data Protection Act 2018.  Personal information you share with us is very important, and we want you to be confident that your personal data is kept safely and securely and to understand how we use it to offer you an individualised experience. 

This policy is to help you understand:

• how and why Yogalina collects information from you
• who bhuti shares your information with, why and on what basis
• what your rights are

If we make changes to this policy we will update you on our website and by sending you an email notification. You will be deemed to have accepted the terms of the Privacy Policy on your first use of bhuti following the alterations.  

Should you have any questions about this policy please write to us at be@bhuti.co 

This policy was last updated on the 25th of May 2018. 

Definitions and Interpretation 

In this Policy, the following terms shall have the following meanings:

Our Site - Refers to https://yogalina.co.uk

Account - means a Yogalina or Mind Body account required to access and/or use certain areas and features of Our Locations 

Personal Data - means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to Us via any of Our Locations. This definition shall, where applicable, incorporate the definitions provided in the EU Regulation 2016/679 – the General Data Protection Regulation (“GDPR”); 

We, Us, Our - means ‘Yogalina’  Company Yogalina Wellbing Cotswolds Ltd, registered in England under company number 13592685 whose registered address is 3 Finstock Heath, Witney Road, Finstock, Chipping Norton, OX7 3DF

When do we collect your personal data? 

• When you create an account at Yogalina
• When you purchase a product at Yogalina or apply for concession pricing which requires proof of age, job seekers, student or disabled status.
• When you book a service at Yogalina
• When you attend a class at Yogalina
• When you redeem or purchase a gift card at bhuti
• When you engage with us on social media
• When you download or install the bhuti app
• When you contact us by any means with queries, complaints or to send us your CV for a job application
• When you enter prize draws or competitions
• When you choose to complete any feedback requests or surveys we send you
• When you’ve given a third party permission to share with us the information they hold about you
• When you use the centre which has CCTV systems operated for the security of both guests, members, team and the general public. These systems may record your image during your visit

What data do we collect and how do we use it?
 
Depending upon your use of Yogalina, We may collect some or all of the following personal and non-personal data 

Data Protection says that we are allowed to collect and use your personal data only where we have a proper reason to do so. The law says we must have one or more of these reasons: 

Contract – your personal information is processed in order to fulfil a contractual arrangement e.g. to sign up as a member.

Consent – where you agree to us using your information in this way e.g. for storing your payment card details.

Legitimate Interests – this means the interests of Yogalina in managing our business to allow us to provide you with the best products and service in the most secure and appropriate way

Third party services and how we share your data

We contract with third parties to supply products and services to you on Our behalf. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law. In certain circumstances, We may be legally required to share certain data held by Us, which may include your personal data, for example, where We are involved in legal proceedings, where We are complying with legal requirements, a court order, or a governmental authority. 

We use the following third party data processors who are based outside the EU, but who are protected by the Privacy Shield, which allows them to store EU data on US soil with the GDPR. 

Moments Online – we use Moments online for web scheduling, registration, order processing and online payments 

Google – We may compile statistics about the use of Our Locations using Google Analytics including data on traffic, usage patterns, user numbers, sales, and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you. We may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within the bounds of the law 

Where do we store your data? 

Your data will be stored in the UK with all Moments Online data . 

How long we keep your information 

If we collect your personal information, the length of time we retain it is determined by a number of factors including the purpose for which we use that information and our obligations under other laws. 

We may need your personal information to establish, bring or defend legal claims. For this purpose, we will always retain your personal information for 7 years after the date it is no longer needed by us for any of the purposes listed under ‘What data do we collect and how do we use it’. 

the law requires us to hold your personal information for a longer period, or delete it sooner;

you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law;

we bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible; or

in limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.

Your rights 

You have the following rights under the GDPR, which this Policy and Our use of personal data have been designed to uphold:

right to access – You have the right to request information about the personal data we hold on you at any time. 

right to portability – Whenever We process your personal data, by automated means based on your consent or based on an agreement, you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to us. 

right to rectification – You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed. If you have a bhuti or Moments account you can edit your personal data under your account and membership pages. 

right to erasure – You have the right to erase any personal data processed by Us at any time except for the following situations: 

you have an ongoing matter with Customer Service

you have an unsettled debt with Us, regardless of the payment method

if you are suspected or have misused our services within the last four years

your debt has been sold to a third party within the last three years or one year for deceased customers

if you have made any purchase, we will keep your personal data in connection to your transaction for book-keeping purposes

we bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible

in limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.

Your right to object to processing based on legitimate interest 

You have the right to object to processing of your personal data that is based on Our legitimate interest. We will not continue to process the personal data unless we can demonstrate legitimate grounds for the process which overrides your interest and rights or due to legal claims. 

If you have any cause for complaint about Our use of your personal data, please contact Us at info@yogalina.co.uk in the first instance in order that we can investigate thoroughly. Should you find the response unsatisfactory, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office, by calling 0303 123 1113. 

For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau. 

Our use of cookies 

Cookies are small encrypted text files that are stored on your device by a website. We use cookies to enhance your shopping experience and to analyse our traffic. We don’t store personal information in the cookies we create, but personal information that we store about you may be linked to the information stored in and obtained from cookies. 

By continuing to browse our site, you consent to our placing cookies on your computer (unless you have chosen to disable them via your browser). Certain features of Our Site depend on Cookies to function. Cookie Law deems these Cookies to be “strictly necessary”. Your consent will not be sought to place these Cookies. You may still block these Cookies by changing your internet browser’s settings but please be aware that Our Site may not work properly if you do so.

Legal Obligation – where there is statutory or other legal requirement to share the information e.g. when we have to share your information for law enforcement purposes.