PPP !

Privacy Policy Last updated: March 2026 Samskara Lifestyle & Health is committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible way. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, participate in classes, purchase services, or interact with our business. 1. Data Controller The data controller responsible for your personal information is: Samskara Lifestyle & Health Owner: Samantha Scott Location: Witney, Oxfordshire, United Kingdom Email: [email protected] Phone: +44 7555 465468 Website: www.samskaralifestyleandhealth.com 2. What Data We Collect We may collect the following personal data: Name Email address Phone number Billing information Payment details (processed securely via third-party payment processors) IP address Website usage data Information you provide when contacting us Information provided when purchasing services, classes, workshops, retreats, or online courses We only collect personal data that is necessary to provide our services and operate our business. 3. How We Collect Your Data We collect personal data when you: Register for yoga classes, workshops, retreats, or online courses Purchase products or services Subscribe to our newsletter or mailing list Download free resources Contact us via email or website forms Interact with our website through cookies or analytics tools We may also collect limited data automatically through website analytics tools when you visit our website. 4. How We Use Your Data We use your personal data to: Provide yoga classes, workshops, retreats, and online courses Process payments and manage bookings Respond to enquiries and customer support requests Send newsletters and relevant updates about services Send promotional information about classes, workshops, and courses Deliver automated welcome emails or onboarding communications Improve our website and services Comply with legal and financial obligations We will never sell or rent your personal data to third parties. 5. Legal Basis for Processing Under UK GDPR, we rely on the following legal bases for processing your data: Contract Processing is necessary to deliver services you have purchased or requested. Consent When you opt in to receive marketing communications. Legitimate Interest To operate and improve our website, services, and customer experience. Legal Obligation To comply with tax, accounting, and legal requirements. 6. Marketing Communications If you opt in to receive communications from us, we may send newsletters, updates, and information about relevant services, classes, and events. You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by contacting us directly. 7. Third-Party Services We use trusted third-party providers to help operate our website and services. These providers may process personal data on our behalf in accordance with data protection laws. These may include: Squarespace – website hosting and website services Mailchimp – email marketing and newsletters Impact Studio / Impact Academy – online course platform Stripe – payment processing Google Analytics – website analytics and visitor insights Google Meet – online classes and meetings These companies may store or process data outside the United Kingdom but operate under appropriate safeguards required by UK data protection law. 8. How We Store Your Data Your personal data is stored securely through trusted service providers used to operate our website, courses, and communications. We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, or alteration. Access to personal data is limited to those who need it to operate the business. 9. Data Retention We retain personal data only as long as necessary for the purposes outlined in this policy. Typical retention periods include: Email marketing data: until you unsubscribe Customer purchase records: up to 6 years for tax and accounting purposes Website analytics data: typically up to 26 months After this period, data may be deleted or anonymised. 10. Your Data Protection Rights Under UK GDPR, you have the right to: Request access to your personal data Request correction of inaccurate information Request deletion of your data (right to be forgotten) Request restriction of processing Object to processing Request transfer of your data to another organisation (data portability) If you wish to exercise any of these rights, please contact us at: [email protected] We will respond to requests within one month. 11. Cookies Cookies are small text files placed on your device when you visit a website. They help us understand how visitors use our site and improve the user experience. We use cookies to: Understand how visitors use our website Improve website performance Provide a smoother browsing experience You can control or disable cookies through your browser settings. However, disabling cookies may affect the functionality of parts of the website. For more information about cookies, visit: www.allaboutcookies.org 12. External Links Our website may contain links to external websites. This privacy policy applies only to our website, so if you follow a link to another website you should review their privacy policy separately. 13. Changes to This Privacy Policy We keep this privacy policy under regular review and may update it from time to time. Updates will be posted on this page. 14. How to Contact Us If you have questions about this privacy policy or the data we hold about you, please contact: Email: [email protected] Phone: +44 7555 465468 Location: Witney, Oxfordshire, United Kingdom 15. How to Contact the Supervisory Authority If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK’s supervisory authority: Information Commissioner’s Office (ICO) https://ico.org.uk