Privacy Policy
Last Updated:
1. Introduction
Welcome to Caths Yoga.
We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Spanish data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, purchase products, book services, or contact us.
2. Data Controller
Business Name: [Your Business Name]
Business Address: [Business Address]
Email: [Your Contact Email]
If you have any questions regarding this Privacy Policy or your personal data, please contact us using the details above.
3. Information We Collect
Depending on how you use our website, we may collect:
Name
Email address
Billing and shipping address
Telephone number (if provided)
Payment information (processed securely by third-party payment providers)
Order information
Booking information for yoga classes or private sessions
Communications you send us
Technical information such as IP address, browser type, operating system, and website usage information.
4. How We Use Your Information
We process your personal data to:
Provide our yoga courses and private lessons
Process and fulfill orders
Respond to inquiries
Send service-related communications
Improve our website and services
Comply with legal obligations
Prevent fraud and misuse
We only process personal data where we have a lawful basis under the GDPR, including contract performance, legal obligations, legitimate interests, or your consent where required.
5. Print-on-Demand Orders
Our online store uses Printify as our print-on-demand fulfillment provider.
When you place an order for physical products, the information necessary to produce and deliver your order (such as your name, shipping address, and order details) is securely shared with Printify and its printing partners solely for order fulfillment purposes. Printify processes personal data as part of its fulfillment services and maintains its own Privacy Policy and Data Processing Terms.
6. Payment Providers
Payments are processed by secure third-party payment providers.
We do not store or have access to your complete payment card information.
7. Cookies
Our website may use cookies and similar technologies to improve user experience, remember preferences, analyse website traffic, and ensure proper website functionality.
Where legally required, we request your consent before placing non-essential cookies.
Please refer to our separate Cookie Policy for additional information.
8. Data Retention
We retain personal information only for as long as necessary to:
provide our services;
fulfill contractual obligations;
comply with legal and tax requirements;
resolve disputes;
enforce our legal rights.
9. Your Rights Under GDPR
If you are located within the European Economic Area (EEA), you have the right to:
access your personal data;
correct inaccurate information;
request deletion of your personal data;
restrict processing;
object to processing;
request data portability;
withdraw consent at any time where processing is based on consent.
You also have the right to lodge a complaint with your local data protection authority.
10. International Transfers
Some service providers may process personal information outside the European Economic Area.
Where this occurs, appropriate safeguards are implemented in accordance with the GDPR, including Standard Contractual Clauses where applicable.
11. Data Security
We implement appropriate technical and organisational measures designed to protect your personal information against unauthorised access, loss, misuse, alteration, or disclosure.
12. Third-Party Services
Our website may use third-party service providers, including but not limited to:
Printify (print-on-demand fulfillment)
Payment processors
Website hosting providers
Email service providers
Booking software (if applicable)
Each provider processes personal information according to its own privacy policies and applicable data protection laws.
13. Children's Privacy
Our services are intended for adults and are not directed toward children under the age of 16.
We do not knowingly collect personal information from children.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will always be published on this page together with the revision date.
15. Contact
If you have questions regarding this Privacy Policy or wish to exercise your GDPR rights, please contact:
[Your Business Name]
Email: [Your Contact Email]