Intuitive Yoga & Healing ('We', 'Us', 'Our') is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use The Edge subscription service. It is written in plain English so that you can easily understand your rights.
This policy is drafted in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
The data controller for the purposes of the UK GDPR is the owner and operator of Intuitive Yoga & Healing and The Edge. If you have any questions about how we handle your personal data, please contact us at intuitiveyogaandhealing@gmail.com.
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
| Category | Examples |
|---|---|
| Identity Data | First name, last name, username |
| Contact Data | Email address |
| Financial Data | Payment card details (processed securely by our payment provider; we do not store card numbers) |
| Transaction Data | Subscription payments, billing history, discount codes used |
| Health Data | Any health information you voluntarily share with us (e.g. injuries, medical conditions) — treated as Special Category Data |
| Technical Data | IP address, browser type and version, device information, login data |
| Usage Data | Information about how you use the platform, classes watched, login frequency |
| Communications Data | Emails, community posts, and other messages you send to us or post within the community |
We do not collect data from children under the age of 16. If you are under 16, please do not use this Service.
3. How We Collect Your Data
- Directly from you — when you register, subscribe, make a payment, contact us by email, or participate in the online community.
- Automatically — when you access and use the platform (technical and usage data collected via cookies and similar technologies).
- From payment processors — confirmation of payment and billing status (we do not receive or store full card details).
4. How We Use Your Personal Data
We use your personal data for the following purposes:
| Purpose | Lawful Basis |
|---|---|
| To provide and manage your subscription | Performance of a contract |
| To process payments and maintain billing records | Performance of a contract / Legal obligation |
| To communicate with you about your membership, class updates, schedule changes, and service news | Performance of a contract / Legitimate interests |
| To enforce our Terms and Conditions (e.g. discount code misuse) | Legitimate interests |
| To moderate the online community and ensure Member safety | Legitimate interests |
| To respond to your enquiries | Legitimate interests |
| To improve our services and content | Legitimate interests |
| To comply with legal or regulatory obligations | Legal obligation |
| To process any health information you voluntarily share (Special Category Data) | Explicit consent |
5. Who We Share Your Data With
We do not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of trusted third parties, solely as necessary to operate the Service:
- Payment processors — to securely process subscription payments (e.g. Stripe). These providers operate under their own privacy policies and applicable data protection law.
- Platform & hosting providers — to host the Service and deliver content.
- Email service providers — to send you service-related communications.
- Legal and regulatory authorities — where We are required to do so by law, court order, or regulatory requirement.
All third-party processors are required to handle your data in accordance with UK GDPR and are bound by appropriate data processing agreements.
6. How Long We Keep Your Data
- We will retain your personal data for as long as your membership is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements.
- Financial and transaction records are kept for a minimum of 6 years in accordance with UK tax and accounting legislation.
- If you request deletion of your account and data (see Section 8), we will delete or anonymise your data within 30 days, except where retention is required by law.
7. Cookies & Tracking Technologies
We may use cookies and similar tracking technologies to improve your experience on the platform, to understand how Members use the Service, and for essential operational purposes. You can control cookie settings through your browser settings; however, disabling certain cookies may affect the functionality of the Service.
8. Your Data Protection Rights
Under the UK GDPR you have the following rights in relation to your personal data:
- Right of Access — You can request a copy of the personal data we hold about you (a 'Subject Access Request').
- Right to Rectification — You can ask us to correct inaccurate or incomplete personal data.
- Right to Erasure — You can ask us to delete your personal data in certain circumstances ('right to be forgotten').
- Right to Restriction — You can ask us to restrict the processing of your data in certain circumstances.
- Right to Data Portability — You can ask us to provide your data in a structured, commonly used, machine-readable format.
- Right to Object — You can object to the processing of your data where we rely on legitimate interests as the lawful basis.
- Right to Withdraw Consent — Where processing is based on consent (e.g. Special Category health data), you can withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at intuitiveyogaandhealing@gmail.com. We will respond within 30 days. You will not be charged for making a request.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed. Website: www.ico.org.uk | Helpline: 0303 123 1113
9. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against accidental loss, unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee the absolute security of data transmitted to or from the Service. You are responsible for keeping your account credentials confidential.
10. Special Category (Health) Data
Health information constitutes Special Category Data under the UK GDPR and is afforded heightened protection. We only process health-related information that you voluntarily share with Us (for example, details of an injury or medical condition relevant to your yoga practice), and only with your explicit consent. Such information will be used solely to provide appropriate guidance and will never be shared with third parties without your express permission, except where legally required.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, best practice, or the way We operate the Service. We will notify you of any material changes by posting the updated policy on the platform or by email. We encourage you to review this policy periodically.
12. Contact & Data Controller Details
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us at:
Intuitive Yoga & Healing — The Edge
Email: intuitiveyogaandhealing@gmail.com
Your privacy matters to us. We will always handle your personal data with care, transparency, and respect.