Privacy Policy

Effective date: 2025-10-29

1. Introduction

This policy explains how [Your Business Name] collects, uses, shares, retains, and protects personal information, and your rights and choices.

2. Controller and Contact

Controller: [Your Business Name], [Your Address]. Contact: privacy@example.com. If appointed, Data Protection Officer: dpo@example.com.

3. Information We Collect

• Identifiers and contact data: name, email, phone, address.
• Booking and payment details. Payment information is processed by our payment provider.
• Health disclosures relevant to safe participation, provided by you.
• Device and usage data: IP address, browser, cookies, and analytics events.

4. How We Use Information

• Provide and improve services and customer support.
• Process bookings, payments, cancellations, and refunds.
• Safety, risk management, and compliance.
• Communications about sessions and news, with marketing only where permitted or with consent.
• Analytics to improve our website and programs.

5. Legal Bases

We rely on consent, contract performance, legitimate interests, and legal obligations, as applicable to your location.

6. Sharing

We share information with service providers (payment, booking, analytics) under contract. We do not sell personal information. We may “share” for cross-context advertising only with your opt-out.

7. Your Rights

Subject to your location, you may request access, correction, deletion, portability, and object or restrict certain processing. You may opt out of sale or sharing where applicable and withdraw consent at any time.

8. Opt-Out and Preference Signals

Use our “Do Not Sell or Share My Personal Information” link and cookie settings. We honor browser-based Global Privacy Control signals where required.

9. Retention

We keep personal data only as long as needed for the purposes above or as required by law, then delete or anonymize it.

10. Security

We use safeguards such as encryption in transit and access controls. No method is completely secure.

11. Children

Our services are not directed to children under 16. If we learn we collected data from a child without proper consent, we will delete it.

12. International Transfers

When transferring data internationally, we use appropriate safeguards such as standard contractual clauses.

13. Automated Decision-Making

We do not use automated decisions that produce legal or similar significant effects without meaningful human involvement.

14. Complaints

You may contact us or lodge a complaint with your supervisory authority.

15. Changes

We will update this policy as practices or laws change and will post the new effective date.