Privacy policy

Version 1.25

Effective date: 30 October 2026

This policy explains what personal information yogaguide.us collects, why, what we do with it, how long we keep it, and what rights you have. It is written to be read, not filed.

1. The short version

This summary is here to help you. The detailed sections below are the ones that count.

• We collect what the service needs. Browsing and classified listings need no account. Class reservations, teacher schedules and the study guide use an email-verified account, with no password. We have no analytics or advertising cookies of our own.
• Our host adds its own measurement. GoDaddy, which hosts the site, puts its own script on pages. Where it can run, it sets cookies, including one that identifies your browser for about a year, and reports page views to GoDaddy. Class and sign-in pages block these measurement scripts while allowing the configured Cloudflare bot check. We don't receive or use GoDaddy's data. Section 10 explains it, and how to block it elsewhere.
• We count visits without cookies. From 15 October 2026 we may count visits to public pages with Cloudflare Web Analytics. It stores nothing in your browser, doesn't follow you to other sites, and never runs on sign-in, booking, dashboard or manage pages. You can switch it off, and browsers that send a Global Privacy Control or Do Not Track signal are never counted. Section 11 explains it.
• Teachers and posters see how many people viewed their page. We count views of each teacher page and listing ourselves, and of a teacher's classes shown on their own website, and keep only the totals, so the teacher or poster can see them. No cookie is set, the same signals and switch stop it, and nobody can see who looked. Section 11 explains it.
• If you post a listing, we collect your email address (never published), your name (published), optionally your phone number (published only if you ask us to), your listing text, photos, city and price, and the IP address you posted from.
• Your listing is public. It can be read by anyone and indexed by Google and other search engines.
• Past events stay up only if their poster asks. Whoever posts an event, retreat or training can tick a box to keep it, with its photos, on our past events page once it's over. It stays public, with no way to reply, until they untick the box or delete it.
• Learn keeps your progress in your account. The āsana study guide needs a Yoga Guide account. What you have finished, your review cards, XP and streak are kept in your account, so they are there on any device where you sign in. Only you can see them.
• Sorting by distance is yours to start. Type a ZIP, or press “use my location” and let your browser ask you. The point is rounded to about a kilometer and travels in the address of the page, which means it reaches the server logs; nothing is stored about you.
• If you reply to a listing, we pass your message and your email address to the poster and we do not store either of them.
• Service email includes listing notices, requested sign-in links, and class confirmations, changes, cancellations and reminders. These messages support the service you requested.
• Marketing email goes only to people who ticked the separate optional box. Accepting the Terms does not opt you in.
• Photos are optional. A teacher's photos are public on their schedule page. A student's photo is shown only to the teachers that student books with, never to the public. Both are stripped of hidden location data when uploaded, and you can remove them at any time.
• We do not sell your personal information. When you reserve a class, the teacher can see your name, email address, bookings and attendance, and any feedback you choose to send them after class, and can email you about your classes. They can send you news about their other classes only if you say yes, and you can switch that off in My bookings.
• Following a teacher is up to you. If you follow a teacher, we email you when they add new classes, at most once a day, and the teacher sees your name and email address and can send you their news. Unfollow at any time in My bookings, or from the link in any of those emails, which works without signing in.
• Data is hosted in the United States.
• You have rights over your information, wherever you live. Section 18 onwards explains them. Email connect@yogaguide.us to use them.

Class schedules and reservations

To manage a schedule or reserve a place, you sign in through a private link sent to your email. We store your name, verified email address, class reservations, cancellation status and attendance. For an online class, you are recorded as attended when you use your own join link to go in; your teacher can change that. A teacher can set a cancellation policy, such as cancelling at least 12 hours before class. Each booking keeps the policy shown when you booked, and if you cancel inside it, we note that the cancellation was late; you see that too. Once a class has started, the teacher can mark a booking as a no-show. That mark is the teacher's own record, like attendance. Teachers see the students booked into their own classes, and a My students list of everyone who has booked with them or follows them: names, email addresses, bookings, attendance, and whether each one follows them or wants their news. They can copy those addresses or download the list to email students from their own email account. Other students and public visitors cannot see the attendance list or student email addresses.

Class confirmation, reminder, change and cancellation emails include the teacher's verified email address as the reply address. Students can reply directly to their teacher. These emails are sent through Yoga Guide's email delivery provider (section 13); we do not connect to a teacher's personal inbox.

Following a teacher, and their news. You can follow a teacher from their schedule page, from a follow link they share (on a flyer, say), or by ticking the box when you book one of their classes. It is optional and off unless you choose it. When you follow a teacher, we email you when they add new classes, at most once a day, and only about classes added after you started following. The teacher sees you in their My students list, with your name and email address, even if you have never booked with them, and can email you news about their classes and events. We keep a record of your yes: when you gave it, the IP address it came from and the words you saw. You can unfollow in My bookings, on the teacher's follow page, or from the link in any of our new-class emails, which works without signing in; the teacher's list changes straight away. Unfollowing also ends their news. If you said yes to a teacher's news before following existed, that yes stays as it was: their news, and no emails from us about their new classes. Teachers send news from their own email account, not through us, so if a teacher keeps writing after you have said no, tell them, and let us know at connect@yogaguide.us.

Waitlists. When a class is full, you can join its waitlist. We keep a record that you are waiting, when you joined and your place in line. If a spot opens before the waitlist closes, 2 hours before the class starts, we book it for the people waiting in the order they joined, and email each of them the class details, just like any booking. The teacher sees who is waiting, with names and email addresses, on the class list. Other students may see how many people are waiting, but not who. You can leave a waitlist in My bookings at any time. A class's waitlist, including any places people have left, is deleted once the class has started.

Booking every session. When a class repeats, you can book every session of it in one go. We keep a record that you do, when you started or stopped, and whether you want a reminder email before each class. We book you into each upcoming date that has room, and into new dates as the teacher's schedule adds them, until you stop in My bookings; stopping cancels your upcoming spots in that class. Each date booked this way is a reservation like any other, and the teacher can see on their class list that you book every session. Instead of an email for every date, we send one when you start, listing your dates, and one when you stop. A reminder before each class is on unless you switch it off for that class in My bookings. For an online class, you get one join link that opens whichever of your classes in it is next.

Class passes. A teacher can keep a record of the class passes their students buy from them: the kind of pass (a number of classes, or unlimited classes up to a last day), its last day, and a short note such as how it was paid. The teacher records it against your email address, so it can be there before you have an account; it joins your account when you sign in with that address. Booking one of that teacher's classes uses a class from your pass, and cancelling gives it back, unless the teacher's cancellation policy says a late cancellation uses the class; the teacher sees which of your bookings used it, and you see your passes and what is left in My bookings. A teacher can set a class to need a pass, and then you can book it only with a pass that covers it. No money passes through us: a pass is the teacher's own record of what you arranged with them, and questions about one are for your teacher.

Prices and payments. A teacher can list their prices on their schedule page, for everyone to see. A teacher can also keep their own record of what students have paid them, for a class, a class pass or a private session: the amount, the currency, how it was paid (cash, card, a payment app, a bank transfer or other) and when they marked it. The teacher sees the records they keep; you see your own in My bookings; other students don't. No money passes through us: the record is the teacher's own note of what you paid them, it holds no card or bank details, and it isn't a receipt from us. Questions about one are for your teacher.

Feedback after class. For a week after a class you booked, you can tell its teacher how it went, in My bookings: loved it, it was fine or not for me, with a line of your own if you like. It is optional, and nobody is emailed about it. Only that teacher sees your answer, with your name; it is never public, and other students don't see it. You see your own in My bookings. You can change it during that week, while the teacher is still asking, and remove it at any time. We keep your answer, the line you wrote, the class it is about, and when you sent or changed it. A teacher can stop asking for feedback, and a student a teacher has blocked can't send them any. Please keep health details out of the line.

Waivers. A teacher can ask students to agree to their own waiver before their first booking with them. To agree, you read it, type your name and tick a box, in the booking form or on the teacher's waiver page. We keep the exact words you agreed to, the name you typed, when you agreed and the IP address it came from. The teacher sees your name and email address, the name you typed, when you agreed and the words you agreed to; the IP address is seen only by the site operator, who may use it to show that an agreement came from your account. You can see a copy of each waiver you've agreed to in My bookings. When a teacher changes their waiver, you agree to the new words at your next booking with them, and the earlier agreement is kept. A waiver is the teacher's own: we don't write it or advise on it, and teachers are asked to keep health questions out of it.

Classes on teachers' own websites. A teacher can show their upcoming classes on their own website. That list comes from our site: like any page from us, loading it sends us your network address and your browser's name, and from 13 November 2026 we count the view for the teacher (section 11). It sets no cookies, stores nothing in your browser and loads nothing from anyone else, Cloudflare's visit counting included. The website around it is the teacher's, and its own privacy terms apply there. Booking happens on our site, as described above.

Private sessions. A teacher can offer open times for one-to-one sessions. When you ask for one, we keep the time you asked for, when you asked, the note you add if you add one, and what became of the request: confirmed, declined, lapsed or cancelled, with the teacher's note if they write one. The teacher sees your name, your email address and your note; other students don't. Please keep health details out of the note. We email the teacher when you ask, withdraw or cancel, and email you when the teacher answers, when a request lapses or when a session is canceled. If the teacher has a cancellation policy, a confirmed session keeps the policy in place when it was confirmed, and if you cancel later than it asks, we note that the cancellation was late; the teacher sees that. A confirmed session more than a day away gets a reminder the day before, for both of you, and it shows in your calendar link if you use one, and in the teacher's with your name.

Class recordings. After a class has started, its teacher can share a link to a recording of it. We don't record classes or keep videos. We keep only the link, and it leads to wherever the teacher keeps the video, such as YouTube, Vimeo or Google Drive, under that service's own terms and privacy policy. The teacher chooses whether the link is for the students booked into that class, who see it on the class page and in My bookings, or for anyone, on the public class page, and can email it to the students booked in. If you would rather not appear in a recording, tell your teacher before class.

Your classes in your calendar. You can add a class you've booked to your calendar from its page, and your booking confirmation email has a link to its calendar file. You can also add your own calendar link from My bookings: it lists the classes you've booked, with each one's title, time, place, teacher and a link to its page, and your calendar app keeps it up to date. Anyone who has that link can see those classes, so keep it to yourself; making a new link in My bookings stops the old one working. We keep a random value with your account to make the link. If you add a class or your link to an online calendar such as Google Calendar, those details go to that calendar service, under its own terms. Confirmed private sessions are in it too: the ones you asked for, and for a teacher, the ones they give, with the student's name.

Teachers can receive grouped booking and cancellation updates containing their own students' names, email addresses and class details. They can choose frequent updates, a daily summary or no teacher update emails. Teachers may remove a reservation or block an account from their classes, which also ends that account's follow; the site operator may block an account from booking across the site. We keep the related account identifiers and block dates to enforce these controls. When configured, the same Cloudflare Turnstile check used for listing forms also protects class sign-in and reservations.

A teacher's name, bio, chosen city, schedule, public venue/address and optional price are public, and so are the styles and lineage they choose and any Instagram, Facebook, TikTok or YouTube names they add. While a teacher has a class coming up, or had one in the last 60 days, they are listed in the teacher directory for their city, or on the online teachers page, with their name, town, profile photo, styles and next class, whether or not they also post a directory listing. The teacher's payment link and arrival instructions are shown to the teacher and students with an eligible confirmed reservation, and included in their class emails. For an online class, each of those students gets their own join link instead of the teacher's video link: it works only for their reservation, opens 15 minutes before class, and takes them to the teacher's video room. Canceled or blocked students lose access to these private details through the site, but we cannot recall emails already delivered. Blocking does not hide a teacher's public profile or schedule.

Profile photos. They are optional. A teacher can add a photo of themselves and up to six more photos to their schedule page; those are public, like the rest of the page. A student can add one photo of themselves in My bookings. It is shown only to the teachers that student has booked with or is waiting for, on their class lists and their My students pages, so a teacher can put a face to a name. Other students, visitors and search engines cannot see it, and it is served only to those teachers, to you and to the site operator. Every photo is re-encoded when it is uploaded, which strips its embedded metadata (EXIF), including any GPS location. Remove a photo yourself at any time from the page where you added it; the files go at once. The operator can remove a photo that breaks the content rules in our Terms.

A payment link opens the teacher's chosen external service. That service handles payment information under its own terms and privacy policy. Yoga Guide does not collect card or bank details, take payments or issue refunds. A teacher can keep their own record of what you have paid them (see Prices and payments, above). A class pass a teacher records is their own note of what you arranged with them; we don't sell passes or take payment for them. We do not collect health information for bookings. Please keep health and payment-account details out of class descriptions.

We use this information to provide the schedule and booking service you request. Booking confirmations, changes, cancellations and reminders are service messages. Booking a class does not subscribe you to marketing from us, and a teacher can send you news only if you say yes. Sections 6.7 and 16 describe the account records, email queue and security records we keep, including their cleanup periods.

Booking and attendance records stay available for you and the relevant teacher while needed for the service and the retention purposes in section 16. To request a copy, correction or deletion, email connect@yogaguide.us from the address you use for bookings. Teachers may keep their own records outside Yoga Guide; contact them about those copies.

Learn

Learn, the āsana study guide, teaches the yoga postures lesson by lesson. It needs a Yoga Guide account, with the same email sign-in link used for classes. You start it by signing in from the study guide, or, if you are already signed in for classes, by choosing start the study guide; nothing is kept for Learn until you do.

From then on we keep a record of your progress in your account: the lessons you have finished, your review cards and when each is next due, the XP you have earned, the days you practised, your achievements and your daily goal. It is there on any device where you sign in, and while a change is on its way to us, a copy waits in your browser. Only you can see it: teachers, other students and the public cannot. We use it only to show you your progress. Erase progress, on Learn's Progress tab, clears it.

2. Who we are

The controller of your personal information — the operator that decides why and how it is used — is:

YogaGuide.us
200 Main Street
Verona, MS 38879
United States of America

Email: connect@yogaguide.us

There is no data protection officer, because we are not required to appoint one. Email goes to a human who reads it.

Where this policy uses "we", "us" and "our", it means YogaGuide.us.

3. What this policy covers

This policy covers yogaguide.us and the email we send in connection with it.

It does not cover:

• other websites you reach by following a link in a listing or on our pages;
• the studios, teachers, employers, sellers and retreat organizers who post here — once they have your details, they are responsible for them under their own privacy practices; or
• anything you arrange with another person off the site.

Read the other party's own privacy policy before giving them information.

4. Your listing is public

If you post a listing, it is published on a public website. That means:

• Anyone can read it — no account or login is needed.
• The name you enter is shown on the listing. You do not have to use a full legal name; a first name or a business name is fine.
• Your phone number is shown only if you tick the box to show it. If you do, it is public.
• Your email address is never shown. It is not displayed, and we do not pass it to readers. People contact you through the reply form.
• Photographs are published. They are re-encoded on upload and their embedded metadata (EXIF, which can include GPS coordinates, camera details and timestamps) is stripped. That protects your location data. It does not change what is visible in the picture.
• Search engines index listings. Your listing may appear in Google, Bing and other search results, and may be cached, copied or archived by services we do not control.
• Anything you type into the listing body is public, including any contact details you choose to put there.

When a listing expires or is deleted, it stops being shown on our site. The one exception is your choice: an event, retreat or training whose poster ticked the box to keep it in past events stays public once it's over, at its own address and on the past events page, marked as over and with no reply form, until the poster unticks the box or deletes the listing. If a teacher with a schedule page is shown as running it, it is listed there too. We cannot remove it from search engine caches, archives or copies other people have made. Those are outside our control, and you may need to ask the search engine directly.

Please think about this before you post. Do not put anything in a listing that you would not want a stranger, an employer or a search engine to see.

5. A note on sensitive information

Please do not put health information, medical history, injuries, religious or political views, or other sensitive details about yourself or anyone else into a listing or a reply — yours or theirs.

We do not ask for it, we do not want it, and once it is in a public listing it is out of our hands. If you send it to us anyway, we treat it with care and delete it where we can, but the best protection is not to send it.

6. What we collect, why, and our legal basis

The sections below describe the information used for classified listings, browsing, class accounts and Learn. Account, booking and Learn records are listed in section 6.7.

The "legal basis" column is the ground we rely on under the UK GDPR and the EU GDPR. If you are not in the UK or the EEA, you can read it as an explanation of why we think the collection is fair and necessary.

6.1 When you post a listing

What	Where it comes from	Why we need it	Legal basis (UK/EU GDPR)
Email address (required, never published)	You, on the post form	To send you the manage link, and the service email described in section 8.1; to contact you about moderation; to recognize repeat abuse	Contract (Art. 6(1)(b)) — we cannot run your listing without it. Legitimate interests (Art. 6(1)(f)) for abuse prevention
Your name (published)	You	To display on the listing, so readers know who they are dealing with	Contract (Art. 6(1)(b))
Phone number (optional, published only if you tick the box)	You	To display on the listing if, and only if, you ask us to	Consent (Art. 6(1)(a)) — you tick the box, and you can remove it at any time with your manage link
Listing text, photographs, city, price and currency, and any website or social media names you add	You	To publish the listing you asked us to publish	Contract (Art. 6(1)(b))
Whether to keep an event in past events (optional; events, retreats and trainings only)	You, on the post or edit form	To keep the listing and its photos public once the event is over, on the past events page and at its own address, with no reply form	Consent (Art. 6(1)(a)) — you tick the box, and you can untick it, or delete the listing, at any time with your manage link
ZIP code (optional; US studios, teachers and venues only. The area it covers is published, never the exact address unless you put one in the listing text)	You, on the post form, or read from the street address you typed	To place the listing on the map well enough that someone searching nearby finds it	Contract (Art. 6(1)(b)) — it is part of the listing you asked us to publish
IP address at the time of posting	Automatically, from your connection	Abuse prevention, spam detection, rate limiting, enforcing blocks, investigating misuse	Legitimate interests (Art. 6(1)(f)) — keeping the site usable and safe
Manage link token (a long random string)	Generated by us	So you can edit, renew, close or delete your listing without an account	Contract (Art. 6(1)(b))
Terms acceptance record: date and time, the version of the Terms you were shown, and your IP address	The required tick box on the post form	To have a record of what you agreed to and when, so that neither of us has to guess later	Contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)) — establishing and defending legal claims
Marketing consent record: whether you ticked the optional box, the date and time, the wording you were shown, and your IP address	The optional tick box on the post form	To prove we have your consent before we ever send you marketing, and to prove we did not if you did not tick it	Legal obligation (Art. 6(1)(c)) — we are required to be able to demonstrate consent (Art. 7(1)) — and legitimate interests (Art. 6(1)(f))

6.2 When you reply to a listing

What	Where it comes from	Why we need it	Legal basis
Your name, your email address, your message	You, on the reply form	To email your message to the poster, with your address as the reply-to, so they can answer you	Legitimate interests (Art. 6(1)(f)) — you asked us to pass the message on, and the poster expects to receive it
IP address	Automatically	Rate limiting and abuse prevention on the reply form	Legitimate interests (Art. 6(1)(f))

We do not store the message or your email address. We pass the message to the poster and that is the end of it. Our email provider necessarily processes the message in order to deliver it, and it may appear briefly in that provider's delivery logs, as with any email. Once the poster has your address, what happens next is between you and them.

6.3 When you flag a listing

What	Where it comes from	Why we need it	Legal basis
Which listing you flagged, the time, and your IP address	The flag button	To count flags (in a listing's first week, three flags hide it pending review), to stop one person flagging repeatedly, and to review the listing	Legitimate interests (Art. 6(1)(f)) — moderation and abuse prevention

Flagging is anonymous to the poster. We do not tell them who flagged their listing.

6.4 When you just browse

What	Where it comes from	Why	Legal basis
Distance units (mi/km), display currency, and whether to count your visits	Stored in your browser's local storage, only when you choose a preference	To remember your choice on your next visit	Storage that is strictly necessary to provide something you explicitly asked for (ePrivacy Directive Art. 5(3) exemption). These values stay in your browser and are not sent to us as a record about you
A copy of your Learn progress, while a change is on its way to your account	Stored in your browser's local storage as you use the study guide	So that a dropped connection or a closed tab loses nothing: lessons finished, review cards, XP, streak and daily goal	Storage that is strictly necessary to provide something you explicitly asked for (ePrivacy Directive Art. 5(3) exemption). It is removed once your account has the change. If you are signed out before then, it stays in this browser until you sign in here again or clear this site's data (section 6.7)
A session cookie	Set when you use a form, open a class booking page, or sign in as a student, teacher, learner or site operator	To keep your sign-in working, make forms work and protect them against cross-site request forgery	Strictly necessary — exempt from the consent requirement
Standard server logs kept by our hosting provider, which include IP addresses and requested pages	Automatically	Running, securing and debugging the site	Legitimate interests (Art. 6(1)(f))
Bot check data: see section 11	Your browser, sent directly to Cloudflare	To keep spam bots off listing, reply, class sign-in and reservation forms	Legitimate interests (Art. 6(1)(f)): network and information security
Visit counts, from 15 October 2026: see section 11	Your browser, sent directly to Cloudflare, on public pages only, unless your browser sends a privacy signal or you switch counting off	To see which pages people use and how quickly they load	Legitimate interests (Art. 6(1)(f)): understanding and improving the site. You can object at any time with your browser's privacy signal or the switch in section 11
Page view counts for teacher pages and listings: see section 11	Your browser tells our server when you open a teacher page or a listing, unless your browser sends a privacy signal or you switch counting off. We keep only the number of views per page per day	To show each teacher and poster how many people viewed their page, and how many came from the teacher's QR code or saw it on the teacher's own website	Legitimate interests (Art. 6(1)(f)): letting teachers and posters see whether their page reaches people. You can object at any time with your browser's privacy signal or the switch in section 11
Page-view measurement by our hosting provider — see section 10	A script GoDaddy inserts into every page, which sends to GoDaddy directly	GoDaddy's own purposes: measuring how its hosting network performs	Carried out by GoDaddy for its own purposes, not ours. We do not receive the data. Section 10 explains how to block it
A rough idea of where you are, only when you ask for it	The ZIP code you type into the “what’s near me” box, or — if you press “use my location” and your browser agrees — your device’s position, rounded to about a kilometer by the page before it goes anywhere	To put the closest listings at the top	Consent (Art. 6(1)(a)) — nothing is asked for and nothing is sent until you type a code or press the button

One thing about that last row is worth saying plainly, because it is not obvious. Sorting by distance works by putting the point in the address of the page — you can see it there, as a ZIP code or a pair of rounded coordinates. Addresses are written to the ordinary server logs described above, so a rough location you have asked us to sort by will sit in those logs for as long as the logs are kept, next to the IP address the request came from. That is why the page rounds the reading from your device to about a kilometer before it is used: a kilometer is enough to sort a list of studios sensibly, and not enough to say which building you are in. Nothing is recorded in the database, nothing is attached to your listings or replies, and clearing the box removes it from the address. If you would rather it never appeared at all, type the name of your town instead — that works just as well for finding a city, and it tells us nothing we do not already publish.

6.5 Moderation and blocking

What	Why	Legal basis
Blocked email addresses and blocked IP addresses	So that someone we have blocked stays blocked	Legitimate interests (Art. 6(1)(f))
Notes about a moderation decision (which listing, what we did, why)	So we can apply our rules consistently, answer appeals, and defend ourselves if a decision is challenged	Legitimate interests (Art. 6(1)(f))

6.6 Unsubscribes

What	Why	Legal basis
Suppression list — the email address of anyone who has unsubscribed or asked us to stop marketing, plus the date	So that we do not send you marketing again, including if you later post another listing or book a class	Legal obligation (Art. 6(1)(c)) — we are required to honor opt-outs — and legitimate interests (Art. 6(1)(f))

This record protects your marketing opt-out. It does not stop the service emails described in section 8.1. See section 16.

6.7 Class accounts, teacher schedules and reservations

What	Where it comes from	How it is used
Account name, email address and account identifier	You, when requesting and using an email sign-in link; the identifier is generated by us	To provide your account and connect you with your reservations or teacher schedule. Your teachers see your name and email address, and can copy or download them to email you about your classes
Teacher profile and class details: name, bio, city, timezone, styles and lineage, the social media names a teacher chooses to add, description, dates, times, capacity, public venue/address, price notes, payment link, online joining link and private arrival instructions	The teacher	To publish the profile and schedule and manage available places. Payment links and private instructions are restricted to the owning teacher, eligible confirmed students and their class emails; students reach a teacher's video link only through their own join links. Payment links lead to the teacher's external payment service
Profile photos, if you add them: a teacher's photo of themselves and up to six more for their schedule page; a student's photo of themselves	You, in your teacher profile or in My bookings	A teacher's photos are published on their schedule page, to show students who they are and what their classes are like. A student's photo is shown only to the teachers that student has booked with or is waiting for, so they can recognise them; nobody else sees it. Photos are re-encoded and their metadata, including GPS location, is removed. The legal basis is your consent (Art. 6(1)(a)), which you withdraw by removing the photo
Reservations, cancellations and attendance, with dates and times, the teacher's cancellation policy at the time you booked, whether a cancellation was late, and no-shows	Your booking and cancellation actions, class changes by the teacher, attendance and no-shows marked by the teacher, and your use of your own join link for an online class	To reserve places, keep your booking history and give the owning teacher a class list. Other students and public visitors cannot see that list
Waitlist places: the class, when you joined, your place in line, and whether you left, were booked in or were taken off the list	You, when you join or leave a waitlist; the site, when it books you into a spot, or takes you off the list because you can't book that class (after a block, say, or when you already hold as many bookings as the site allows)	To book waiting students into spots that open, in the order they joined, and to show the owning teacher who is waiting. A spot booked from a waitlist becomes a reservation like any other. The legal basis is contract (Art. 6(1)(b)): you asked us to book you in if a spot opens
Every-session bookings: the class, when you started or stopped, and whether you want reminder emails for it	You, when you book every session of a class or change it in My bookings; the site, when a block ends it	To book you into each date of that class with room, including dates added later, until you stop, and to show the owning teacher that you book every session. Each date booked becomes a reservation like any other. The legal basis is contract (Art. 6(1)(b)): you asked us to keep booking you in
Class passes: the teacher, the student's email address and account, the kind of pass, the number of classes, its last day, the teacher's note, when it was recorded or changed, and which bookings used it	The teacher who sold the pass; your bookings with them	To show the teacher and you what is left on a pass, to use a class from it when you book one of that teacher's classes and give it back when you cancel (unless the teacher's cancellation policy keeps it for a late cancellation), and to let you book a class that needs a pass. You see your passes in My bookings; the teacher sees the ones they recorded. The legal basis is contract (Art. 6(1)(b)) for the classes you book with your pass, and the teacher's legitimate interest (Art. 6(1)(f)) in keeping an accurate record of what their students have bought from them
Payment records: the teacher, the student's email address and account, what the payment was for (a booking, a class pass or a private session), the amount and currency, how it was paid, and when it was marked or changed	The teacher, when they mark a payment	To let a teacher keep track of who has paid them, and to show you what they have marked as paid. You see your own in My bookings; the teacher sees the ones they marked. The legal basis is the teacher's legitimate interest (Art. 6(1)(f)) in keeping an accurate record of what their students have paid them
Feedback after class: how a class went (loved it, it was fine or not for me), the line you add if you add one, the class it is about, and when you sent or changed it	You, if you choose to send it	To let you tell a teacher how their class went, and to show it to them. Only that teacher sees it, with your name; you see your own in My bookings. The legal basis is your consent (Art. 6(1)(a)): sending it is your choice, and you can withdraw it by removing it yourself, at any time, in My bookings
Waivers and agreements: each version of a teacher's waiver, word for word; and, when you agree to one, the version, the name you typed, when, and the IP address it came from	The teacher, for the waiver; you, when you agree	To ask you to agree before booking with a teacher who wants that, and to keep a record of what you agreed to and when. The teacher and you can see the agreement and the words agreed to; the IP address is seen only by the site operator, to show that an agreement came from your account. The legal basis is contract (Art. 6(1)(b)): agreeing is part of booking with that teacher, and the teacher's and our legitimate interest (Art. 6(1)(f)) in being able to show what was agreed
Private session requests: the time asked for, when, your note if you add one, what became of the request, the teacher's note if they write one, and for a confirmed session, the teacher's cancellation policy at the time and whether a cancellation was late	You, when you ask for a time; the teacher, when they answer	To let you ask a teacher for a one-to-one session, tell each of you what happens, and remind you both before it. The teacher sees your name, email address and note. The legal basis is contract (Art. 6(1)(b)): it is the service you asked for
Class recording links: the link a teacher gives for a class's recording, when they gave it, and whether it is for the students booked into that class or for anyone	The class's teacher	To show the recording's link to the students booked into that class, or to anyone if the teacher chooses, and to email it to the students booked in when the teacher asks. The video itself stays with the service where the teacher keeps it. The legal basis is contract (Art. 6(1)(b)) for the students booked in, and the teacher's choice to publish for anyone else
Your calendar link's key: a random value kept with your account	Made by the site; a new one when you make a new link in My bookings	To make your own calendar link, and to stop an old one working. The legal basis is contract (Art. 6(1)(b)): you asked for your classes in your calendar
Your follows and news choices for each teacher: whether you follow them or want their news, when you said yes, the IP address it came from, the exact words you saw, and when you stopped	You, on a teacher's page or follow link, on the booking form, in My bookings, or with the unfollow link in our emails; the site, when a teacher blocks you	To email you when a teacher you follow adds new classes, to show the teacher who follows them or wants their news, and to keep a record of what you agreed to. The legal basis is your consent (Art. 6(1)(a)), which you can withdraw in My bookings or from the link in any new-class email
Learn progress, once you start the study guide: the lessons you have finished, your review cards and when each is next due, XP, the days you practised, achievements and your daily goal	You, as you use the lessons	To keep your progress and show it to you on any device where you sign in. Only you can see it. The legal basis is contract (Art. 6(1)(b)): it is how the study guide you asked for works
Terms acceptance record: verified email, account identifier, time, IP address, policy versions and the exact wording shown	Your final acceptance on the email verification page	To record what you accepted after verifying access to your email. A sign-in request alone does not create this record, and signing in does not give marketing consent
Sign-in tokens and session records	Generated by us	To verify access to your email and keep you signed in. Links are single-use and expire after 30 minutes. A sign-in lasts 30 days from your last visit on that device, or, if you said it is a shared or public computer, until the browser closes and seven days at most. If you sign out on all devices, we keep the time you did so with your account, so that every earlier sign-in ends
Service email queue: recipient, subject, message, timing, delivery attempts and status	Generated from sign-in requests and class bookings or changes	To send and retry sign-in and class notices. This queue is separate from the classified reply relay in section 9
Request counters using hashed email, IP or account identifiers	Sign-in and booking activity	To limit repeated requests and protect the service from abuse

7. What we do not collect

To be clear about the things a site like this often does, and we do not:

• No passwords to remember. Class reservations, teacher schedules and the study guide use verified email sign-in. Ordinary classified listings still use private manage links.
• No tracking analytics. We do not use Google Analytics or any analytics that follows you from site to site. From 15 October 2026 we may count visits to public pages with Cloudflare Web Analytics, which uses no cookies and builds no profile of you (section 11). We also count views of teacher pages and listings ourselves, as totals only, for their owners (section 11). Our hosting provider also measures page views for its own purposes. That is described in section 10, including how to block it.
• No advertising or tracking cookies of our own. No pixels, no ad tags, no ad networks, no retargeting, no social media trackers, no fingerprinting, no cross-site tracking. The one exception is not ours: GoDaddy's measurement script sets its own cookies (section 10).
• No payment information. Nothing is sold on the site, so no card numbers, no bank details, no billing addresses. A teacher's record of what you paid them holds only the amount, the currency and how it was paid.
• No recordings of classes. We don't record classes or store videos. A teacher who shares a recording gives us only a link to it.
• No location tracking. We never reach for your location on our own. A listing carries the city its poster chose and, for studios and teachers, the postcode they typed. If you press “use my location” to sort by distance, your browser asks your permission first and the page rounds the answer to about a kilometer before using it — a neighborhood, not a doorstep. Press it once and it applies to that page; it does not follow you, and if you never press it there is nothing to switch off.
• No behavioral profiles. We do not score you or infer things about you. A public teacher profile contains the information that teacher chooses to provide. Learn's record of your lessons is kept for you to see, not to assess you.
• No data brokers. We do not buy personal information, enrich it, or append data from outside sources.
• No special category data. We do not ask for information about your health, race, ethnicity, religion, politics, trade union membership, genetics, biometrics, sex life or sexual orientation. Please do not volunteer it — see section 5.
• No selling. See section 14.

If this changes — for example if we introduce advertising, as our Terms of Use allow — we will update this policy and tell you before the change takes effect, and we will ask for consent where the law requires it.

8. Email: two different things

This distinction matters, both legally and practically, and we keep it strictly.

8.1 Service email for listings and class accounts

When you post, you are asking us to run a listing for you. We cannot do that without emailing you. Service email is administrative. It is not advertising.

It includes:

• your manage link;
• requested sign-in links, booking confirmations, class changes, cancellations and reminders for class accounts, including a short note with your join link when an online class is about to start, and one email when you start or stop booking every session of a class, and the link to a class's recording when its teacher sends it;
• private session emails: to the teacher when someone asks for a time, withdraws or cancels, and to the student when the teacher answers, when a request lapses or when a session is canceled, with a reminder the day before for both;
• confirmations that a listing was published, edited, renewed, closed or deleted;
• expiry warnings and renewal reminders;
• moderation notices — held, edited, hidden, refused or removed, and why;
• replies sent to you through the reply form;
• security and abuse notices about your listing; and
• notices of changes to our Terms of Use or this Privacy Policy, and notices about the Service itself, such as a section or city closing.

We send listing service email on the basis that it is necessary to perform the contract you entered into when you posted (Art. 6(1)(b)), and, where relevant, our legitimate interests in running the Service and keeping it safe.

You cannot unsubscribe from listing service email while you have a live listing, because it is the mechanism of that part of the Service. If you do not want it, delete your listing using your manage link, or email connect@yogaguide.us and ask us to delete it. After that, we may still send you a notice required by law, or a notice of a change to these documents while we still hold a record relating to your listing.

Class service email is used to provide the sign-in or booking service you request. To stop reminders for an upcoming reservation, cancel it in My bookings; a cancellation notice may still follow. For a class you book every session of, you can also switch its reminders off there and keep your spots. Signing out or unsubscribing from marketing does not cancel a reservation. Teachers can cancel upcoming classes from their dashboard. Email connect@yogaguide.us about closing a class account or deleting its records.

Under Canada's anti-spam legislation, these messages are administrative messages about an ongoing relationship you started, not commercial electronic messages promoting anything. Under the UK's Privacy and Electronic Communications Regulations, the EU's ePrivacy rules and Australia's Spam Act, they are service messages, not direct marketing. We keep them that way: if a message is promoting something, it is marketing, and it goes in the next bucket.

8.2 Marketing email — only to people who ticked the optional box

Marketing email is anything promotional: news about the site, new features, anything advertising-related, anything about sponsors or sponsored placements, and anything about paid features if we ever add them.

We send it only to people who ticked the separate, optional, unticked-by-default box on the post form, and then confirmed it from a link we emailed to that address.

The confirmation step matters because anyone can type any address into the post form. Ticking the box only records a request. Nothing is sent until someone clicks the link in the email we send to that address and presses the confirm button — so the person who owns the address is the one who decides. If you get a confirmation request you didn't ask for, ignore it and nothing will happen.

• Accepting the Terms of Use does not opt you in. They are two different boxes and two different things.
• Posting a listing does not opt you in.
• Using the reply form does not opt you in — we do not even keep your address.
• There is no pre-ticked box, no bundling, and no "you can opt out later" trick.

The legal basis is your consent (Art. 6(1)(a)), and that consent is also the express consent required by PECR in the UK, the ePrivacy rules in the EEA, CASL in Canada and the Spam Act 2003 in Australia.

Every marketing email we send will:

• clearly identify YogaGuide.us as the sender;
• include our postal address; and
• include a working unsubscribe link, honored promptly and free of charge.

8.3 Withdrawing marketing consent

You can withdraw consent at any time:

• click unsubscribe in any marketing email; or
• email connect@yogaguide.us and ask us to stop.

When you do, we stop sending, and we add your address to our permanent suppression list so that you are not emailed again — including if you later post another listing and do not notice the box.

Withdrawing consent is free, has no effect on your listings or your use of the site, and does not make the processing we did before you withdrew unlawful. It does not stop service email under section 8.1, which is separate and necessary.

8.4 If we get it wrong

If you receive marketing from us that you did not consent to, that is a mistake and we want to know. Email connect@yogaguide.us and we will stop, suppress your address, and tell you what happened.

8.5 Emails about teachers you follow

When a teacher you follow adds new classes, we send you one email listing them, at most once a day for each teacher, with links to the classes and to the teacher's schedule. Replies go to the teacher. These emails go only to people who chose to follow that teacher, and that choice is your consent to them (Art. 6(1)(a)). Every one has a link to stop following, which works without signing in, and you can also unfollow in My bookings. Following a teacher does not put you on Yoga Guide's own marketing list, and unsubscribing from our marketing does not end a follow: unfollow to stop these emails.

9. The reply relay, in detail

When a reader uses the reply form:

1. They type their name, their email address and their message.
2. We email it to the poster, setting the reader's address as the reply-to so the poster can answer directly.
3. We do not store the message. We do not store the reader's email address.

Consequences worth understanding:

• The poster receives the reader's email address. That is the purpose. After that, the poster is responsible for it, and we have no control over what they do with it.
• We cannot retrieve a message for you later — not for you, not for the poster, not in a dispute, not in response to a data subject access request. It is not there.
• We cannot tell you whether a message was delivered, opened or read.
• If you would rather not give a poster your real email address, use an alias or a forwarding address.

10. Cookies and local storage

Our own site keeps this very simple. What it stores is below, and none of it needs your consent. Our hosting provider also adds cookies of its own, which are described separately under Cookies set by our hosting provider, because they are not ours and are not necessary for the site to work.

Local storage (in your browser). Up to three preferences, and only if you choose them, and a copy of your Learn progress while it is on its way to your account:

Key	What it holds	Set when	Sent to us?
Distance units	mi or km	You choose a unit	No
Display currency	A currency code, e.g. EUR	You choose a display currency	No
Visit counting	1, meaning "don't count my visits"	You switch visit counting off (section 11)	No
Learn progress	A copy of the lessons you have finished, review cards, XP, streak and daily goal, waiting to reach your account, marked with its account number	You use the study guide and a change hasn't reached us yet	Yes: that is what it waits for. It is removed once your account has it; if you are signed out first, it stays until you sign in here again or clear this site's data (section 6.7)

These are stored by your browser, on your device, so the site remembers your choice. They are strictly necessary to provide something you explicitly asked for, and they are not used to identify, profile or track you. You can clear them at any time through your browser settings, and the site will simply revert to its defaults.

Cookies. A session cookie is set when you use a form, open a class booking page, or sign in as a student, teacher, learner or site operator. It keeps your session working and protects forms against cross-site request forgery. The cookie contains a random session identifier. When you sign in, the cookie stays in that browser for 30 days from your last visit, so you stay signed in on that device as long as you come back within 30 days, until you sign out. Signing in is your request to stay signed in; nothing else is kept in the cookie. If you tick This is a shared or public computer when you ask for your link, the cookie ends when the browser closes, and the sign-in after seven days at most. You can sign out on the device you're using from the menu, the teacher dashboard or My bookings, and sign out on all your devices at once from the teacher dashboard or My bookings.

Bot check. When configured, Cloudflare's bot check runs on listing, reply, class sign-in and reservation forms. See section 11. Anything the check stores in your browser is for security only.

Visit counting. From 15 October 2026, public pages may load a small script from Cloudflare that counts the visit. It stores nothing in your browser: no cookies and no local storage. It doesn't load at all if your browser sends a Global Privacy Control or Do Not Track signal, or if you switch it off. See section 11.

Cookies set by our hosting provider. The site is hosted by GoDaddy, and GoDaddy inserts its own script into every page it serves. That script is not part of our code, and we don't control what it does. It sets these cookies on the yogaguide.us domain:

Cookie	What it holds	How long it lasts
_tccl_visitor	A random identifier for your browser	About a year
_tccl_visit	A random identifier for the current visit	Up to a day
_scc_session	A count of the pages you have viewed, and when	Until you close your browser

On pages where it can run, the script measures how the page loaded and sends that measurement to GoDaddy's servers, together with those identifiers, the page address, and details of your browser and screen. GoDaddy calls this its Real User Metrics program, says it uses the results to improve its hosting network, and says it doesn't collect user information through it. We do not receive this data, cannot see it, and do not use it for anything.

Class browsing, sign-in, booking, teacher dashboard and class administration pages send a browser security policy that allows scripts from this site's own address and, when configured, Cloudflare's bot-check address and, on public class pages once visit counting starts, Cloudflare's visit-counting script. This blocks GoDaddy's measurement scripts and inline measurement scripts on those pages.

GoDaddy's measurement cookies are not needed for the site to work, and they are set as soon as a page loads. You can block those cookies or scripts from wsimg.com and secureserver.net in your browser settings or with a content blocker. If you block all cookies for yogaguide.us, our session cookie will also be blocked, which prevents sign-in and protected forms from working.

Videos you choose to play. Our pages about yoga lineages include historical videos hosted on YouTube. Opening one of those pages loads nothing from YouTube or Google — each video sits on the page as a plain panel, served entirely by us. If you press play, your browser loads YouTube's player from its privacy-enhanced domain (youtube-nocookie.com), and from that moment YouTube may use storage in your browser and collect data under Google's privacy policy, exactly as it would on YouTube itself. If you'd rather it never load, don't press play — each panel also works as an ordinary link you can open on YouTube directly, or not at all.

No advertising cookies and no analytics cookies of our own. No tracking pixels. Apart from a video you choose to play (above), GoDaddy's measurement cookies are the only cookies on the site that we don't set ourselves.

Global Privacy Control and Do Not Track. We do not sell or share personal information, and we do not run cross-context behavioral advertising. If your browser sends either signal, we also don't count your visits (section 11). GoDaddy's measurement script does not read those signals, so to stop it, block it as described above.

11. The bot check, visit counting and page view counts

We may run Cloudflare Turnstile, a bot check, on listing, reply, class sign-in and reservation forms. It helps identify automated requests and reduce spam.

When the check runs:

• Your browser connects directly to Cloudflare, Inc.
• Cloudflare receives your IP address and technical information about your browser and device, and signals about how the page was interacted with, in order to assess whether the request is automated.
• Cloudflare returns a pass-or-fail result to us. That result is what we act on.
• Cloudflare may store a small amount of information in your browser strictly in order to record that the check was passed. This is a security measure, not tracking, and we do not use it for any other purpose.

We use this to keep automated spam off the classified posting and reply forms, which do not require an account. Our legal basis is legitimate interests (Art. 6(1)(f)) for network and information security.

Cloudflare acts as our processor for this, and is also an independent controller for its own security purposes. Cloudflare's privacy documentation is at cloudflare.com/privacypolicy.

If you cannot complete the bot check — for example because of an accessibility issue — email connect@yogaguide.us and we will help you post another way.

Counting visits (Cloudflare Web Analytics)

From 15 October 2026, we may count visits to public pages with Cloudflare Web Analytics. We use it to see which pages people find useful and how quickly they load, so we can improve the site.

When it runs:

• A small script from Cloudflare loads with the page and reports the visit to Cloudflare, Inc.: the page address, the site you came from, your browser and device type, the country your connection comes from, and how quickly the page loaded.
• It uses no cookies and stores nothing in your browser. Cloudflare says it doesn't fingerprint visitors or track them across other sites. We see only totals, such as page views per day and the most visited pages, never a record of you.
• Cloudflare receives your IP address as part of the connection, as any website you connect to does. The totals we see do not include it.
• It never runs on sign-in, booking, teacher dashboard, manage, confirmation, unsubscribe, account or admin pages, so private links and your own records never reach it.
• Content blockers often block it. That's fine: the site works the same without it.

Page view counts for teachers and posters

A teacher can see on their dashboard how many people viewed their schedule page, and how many of those came from their QR code or, from 13 November 2026, saw their classes on the teacher's own website. Someone who posts a listing can see the same on the listing's manage page. We count these ourselves; nothing goes to Cloudflare or anyone else.

• When a teacher page or a listing is on your screen, your browser tells our server which page it is and whether you opened it from a QR code. When a teacher's classes are on your screen on their own website, it says that instead. That's all it sends.
• We keep only totals: the number of views of each page on each day. Nobody, including us, the teacher and the poster, can see who looked.
• So that coming back to the same page on the same day counts once, our server makes a one-way code from your network address and your browser's name, mixed with a secret that is replaced every day. The code can't be turned back into your address, and it can't be matched with any other day. It is not stored with anything about you.
• No cookie is set and nothing is stored in your browser. Search engines and other programs are not counted, and neither are a teacher's or poster's visits to their own page here. On another website, a teacher's own visits to their classes can't be told apart from anyone else's, so they count.

You can switch counting off. Neither Cloudflare's counting nor ours runs for a browser that sends a Global Privacy Control or Do Not Track signal. You can also switch both off for the browser you're using with the button below. Your choice stays in that browser's local storage and is never sent to us. Browsers keep that choice separately for each website, so for a teacher's classes shown on another website, it is your browser's privacy signal that stops the counting. With JavaScript turned off, nothing is counted at all.

Our legal basis is legitimate interests (Art. 6(1)(f)): understanding how the site is used and keeping it fast, and letting teachers and posters see whether their pages reach people. You can object at any time with your browser's privacy signal or the switch above. Cloudflare acts as our processor for its visit counting.

12. Moderation, and automated decisions

Some moderation on this site is automated:

• Three flags from readers hide a listing in its first week automatically, pending human review. Flags on an older listing go to a person, and the listing stays up meanwhile.
• Listings that trip our spam rules are held automatically before publication.
• We may operate a period in which every listing requires approval before it appears.

These are blunt tools, and they sometimes get it wrong. They are not profiling you and they produce no legal or similarly significant effect on you — at worst a listing on a free classifieds site is delayed or hidden.

You can always ask a human to review a decision about your listing. Email connect@yogaguide.us with the listing URL and we will look at it ourselves within a reasonable time and tell you the outcome.

13. Who we share information with

We share personal information with a small number of service providers who need it to make the site work. They act as our processors: they may use it only to provide their service to us, on our instructions, and not for their own purposes.

Who	What they get	Why
Our web hosting provider	Everything stored by the site, including listings, class accounts, teacher schedules, reservations, attendance, email queue, IP addresses, acceptance and consent records, the suppression list, and standard server logs	It is the infrastructure the site runs on
Our email delivery provider	The recipient address and message content, including sign-in and manage links, class notices and joining links, reminders, emails about new classes from teachers you follow, moderation notices, relayed replies, and marketing email to people who opted in	It is how email leaves the site
Cloudflare, Inc.	For the bot check on listing, reply, class sign-in and reservation forms: your IP address and technical information about your browser and device. From 15 October 2026, for counting visits to public pages: the page address, the referring page, browser, device and page-load details, and your IP address as part of the connection (see section 11)	To keep spam bots off the forms, and to count visits
GoDaddy, through its own measurement script	Directly from your browser: page-load timings, the pages you view, browser and screen details, and the identifiers in its cookies (see section 10)	GoDaddy's own purposes. For this, GoDaddy acts on its own account, not as our processor — see below
YouTube (Google), only if you press play on a video	Your IP address and technical browser details, plus whatever the player collects while you watch (see section 10)	To play the video you asked for. Like GoDaddy, Google acts on its own account here, under its own privacy policy

We also fetch daily exchange rates from a third-party currency feed. That is an outbound request for public rate data. No personal information is sent to it. The conversion happens on our side and is an estimate only.

Beyond that, we may disclose personal information where we are legally obliged or genuinely need to:

• to comply with a law, court order, subpoena or lawful request from a public authority — we will tell you first where we are permitted to, and we will push back on requests that look overbroad or that we are not obliged to satisfy;
• to establish, exercise or defend legal claims, including to our lawyers, insurers and accountants under a duty of confidentiality;
• to prevent or investigate fraud, spam, abuse, security incidents or threats to anyone's safety; and
• to a buyer or successor if the Service is sold, merged or reorganized — in which case your information would move with it, the buyer would be bound by this policy until it lawfully changed it, and we would tell you.

The last two rows are the exception to what we said at the top of this section: those two collect data on their own account, not as our processors. GoDaddy's measurement script is something GoDaddy adds to the sites it hosts, for its own purposes. It collects the data itself, directly from your browser, and we never receive it. How GoDaddy handles it is governed by GoDaddy's privacy policy. The YouTube player works the same way in reverse: it loads only because you pressed play, and what it collects while you watch goes to Google, not to us.

Separately, a teacher you book with or follow can see your name, email address, reservations and attendance with them, and whether you follow them or want their news, and can download that list. They also see the class passes and payments they record for you, and any feedback you send them after class. If you join the waitlist for one of their classes, the teacher can see your name, email address and place in line on that class's list. When a teacher emails you from their own account, that email is their responsibility, and they must stop sending news if you ask. The teacher may keep their own records outside the site; contact them about those copies.

Those are the disclosures described by this policy. We do not share your information with advertisers, data brokers, marketing partners, list vendors or AI training data providers.

14. We do not sell or share your personal information

We have never sold personal information, we do not sell it, and we do not share it for cross-context behavioral advertising. We do not disclose it to anyone for money or for any other valuable consideration.

That statement is made specifically for the purposes of the California Consumer Privacy Act as amended by the CPRA, and for the equivalent provisions of the other US state privacy laws, and it is true generally.

We also do not sell or share the personal information of anyone we know to be under 16, because the site is not for under-18s at all.

If this ever changes, we would update this policy first, tell you, and provide the opt-out mechanisms the law requires before any such disclosure happened.

15. Where your information is held, and international transfers

The Service is hosted in the United States, and we are based in the United States. Our service providers are US-based.

If you are in the United Kingdom, the European Economic Area, Switzerland, Canada, Australia, or anywhere else outside the United States, using this site means your personal information is transferred to, stored in and processed in the United States. US law does not offer the same protections as the law where you live, and US public authorities may in some circumstances be able to access data held there.

For transfers from the UK and the EEA, we rely on:

• Article 49(1)(b) of the UK/EU GDPR — the transfer is necessary to perform the contract you entered into when you asked us to publish your listing, or to take steps at your request before it. We cannot publish your listing on a US-hosted site without transferring it to the US;
• Article 49(1)(a) — your explicit consent, for marketing email to people who opted in; and
• standard contractual clauses or equivalent safeguards where our service providers offer them, which we rely on in addition, not instead.

For transfers from Australia, we take reasonable steps to ensure that overseas recipients handle personal information consistently with the Australian Privacy Principles, as APP 8 requires.

You can ask us for more detail about the safeguards that apply: email connect@yogaguide.us.

If you do not want your information transferred to the United States, please do not use the site. There is no version of this service that avoids it.

16. How long we keep things

We keep personal information only for as long as we have a reason to, and then we delete it or irreversibly anonymise it.

Some technical booking records have the cleanup periods listed below. For other records there is no single fixed number of days or months: the right period depends on the item and what is happening with it. A listing that is the subject of a complaint cannot be handled on the same schedule as one that simply expired. The table describes the criteria we apply where a single period cannot sensibly be stated in advance. If you want to know what applies to your information specifically, ask us at connect@yogaguide.us and we will tell you.

What	How long we keep it, and what decides that
Class accounts, teacher profiles, schedules, reservations and attendance	These are not automatically deleted when a class ends, a reservation is canceled or you sign out. They remain available for the service and the retention purposes in this section. Contact us to request a copy, correction or deletion
Class sign-in tokens	Links stop working after one use or 30 minutes. The scheduled cleanup removes token records once they have been expired for more than one day
Class service email queue	Pending messages remain while delivery is retried. Completed or skipped entries are removed after 30 days when scheduled cleanup runs. Sign-in link message bodies are cleared after sending; obsolete message bodies are cleared when skipped
Class request counters	The scheduled cleanup removes these short-lived security counters once they are more than a day old
Learn progress kept in your account	Kept while your account exists, and deleted with it. Erase progress, on Learn's Progress tab, clears it straight away
Your follows and news choices for teachers	Kept while your class account exists, including any you have stopped, so we can show what you agreed to and when you changed your mind. Deleted with your account
Waivers and agreements	Kept while the teacher's schedule exists, earlier versions and the agreements to them included, so the teacher and you have a record of what was agreed and when. A teacher who stops asking for a waiver keeps the agreements they have. Contact us to request a copy, correction or deletion
Private session requests	Kept while the teacher's schedule exists, like class bookings, so the teacher and you have a record of what was arranged. Contact us to request a copy, correction or deletion
Payment records	Kept while the teacher's schedule exists, like class bookings, so the teacher and you have a record of what was paid. A record the teacher takes off is deleted straight away, and so is one for a pass the teacher removes. Contact us to request a copy, correction or deletion
Feedback after class	Kept while the teacher's schedule exists, like class bookings, so the teacher can look back on how their classes went, unless you remove it first. You can remove yours at any time in My bookings, and it is deleted straight away. Contact us to request a copy or correction
Class passes	Kept while the teacher keeps them on their list, so the teacher and you can see what was used. A pass the teacher removes is deleted straight away; the bookings it covered stay, without it. Contact us to request a copy, correction or deletion
Waitlist places	Kept until the class starts, including places you have left, then deleted by scheduled cleanup. A spot we book for you from a waitlist becomes a reservation and is kept like any other
Teacher update records and preferences	Preferences remain until changed or the teacher account is deleted. Pending update records remain until processed; completed records are removed after 30 days by scheduled cleanup
Site email sending allowance records and deferred email	Sending-attempt counts, which do not contain recipient addresses or message bodies, are retained for up to two days before scheduled cleanup. Deferred messages remain while waiting or being retried; completed messages are removed after 30 days
Page view totals for teacher pages and listings	Kept as daily totals, which say nothing about who viewed. The one-way codes that recognise a repeat visit are deleted when the secret they were made with is replaced
A live listing and everything in it	Until it expires, or you delete it, or we remove it
An event kept in past events	Public until you untick the box or delete the listing, or we remove it. After that, as for an expired or deleted listing, below
An expired or deleted listing	Removed from public view immediately. Held for a limited period after that so it can be renewed, restored if you deleted it by mistake, or looked at if there is a complaint about it. The period is set by the renewal window for that kind of listing and by how long a complaint about it could realistically arrive. Then deleted
The email address used to post, linked to the listing	For as long as the listing exists, and for a period afterwards — long enough to recognize repeat posters, enforce blocks, investigate abuse, and deal with complaints or claims about the listing, and no longer
The IP address recorded with a post, reply or flag	Kept with that record, on the same schedule as the record it belongs to
Server logs kept by our hosting provider	On our hosting provider's own rotation schedule, which we do not set. They are overwritten, not archived
Terms acceptance records and marketing consent records (time, version, IP, what you were shown)	For as long as a dispute about what was agreed could realistically be brought, and for as long as we may need to demonstrate that consent was validly obtained — which is governed by the limitation periods that apply to such claims, not by a period we choose
Moderation records and blocklist entries (blocked email addresses and IP addresses)	For as long as the block is in force, and long enough afterwards that waiting it out is not a practical way around it
Marketing email list (people who opted in)	Until you withdraw consent, or until the list falls out of use — if we stop sending, we delete it rather than sit on it
Suppression list (people who unsubscribed)	Indefinitely. This is deliberate, and it exists to protect you — see below
Messages sent through the reply form, and the sender's address	Not stored at all
Emails you send us directly (support, complaints, rights requests)	Until the matter is closed and a reasonable period afterwards, or longer if we need it to defend a legal claim or comply with the law

Why the suppression list is permanent. When you unsubscribe from marketing, we remember your email address and the date so that we do not send marketing again. We check this list before sending marketing; it does not block requested sign-in links or other service notices. We do not market to the list, profile it or share it. If you ask us to erase your suppression record, we will explain that we would no longer have a record of that opt-out. It is your choice.

We may keep information for longer than the criteria above would suggest where we are required to by law, or where it is genuinely needed for an ongoing legal claim, investigation or regulatory matter. When we no longer need something, we delete it or irreversibly anonymise it.

17. Security, honestly

We take the security of your information seriously, and we want to describe it accurately rather than impressively.

What we do:

• The site is served over an encrypted connection (HTTPS).
• Student and teacher accounts use email sign-in links, not passwords. Each link works once and expires after 30 minutes. Classified listings use separate private manage links.
• Nothing is sold on the site, so we hold no card numbers or bank details. A teacher's record of what a student paid them holds only the amount, the currency and how it was paid.
• Manage links use long random tokens that are not guessable, and they are the only route to editing a listing.
• Photos are re-encoded and stripped of EXIF metadata on upload, so GPS coordinates and camera data do not get published. A student's photo is kept in a folder the web server never serves directly, and is handed out only after checking that the person asking is that student, one of their teachers, or the operator.
• A bot check protects listing, reply, class sign-in and reservation forms when configured.
• Access to the admin area is limited to the operator, and is protected by a sign-in.
• We collect as little as we can, which means there is less to lose.

What we cannot promise:

• No system is completely secure. We cannot guarantee that our defenses, or our providers' defenses, will never be breached, and we do not pretend otherwise.
• Email is not a secure channel. Sign-in links, manage links, class details and relayed replies can be intercepted, misdirected or read by anyone with access to the mailbox. Keep your sign-in links, manage links and private joining links to yourself.
• Once your listing is published, it is public. No amount of security on our side changes that.
• Once a poster has a reader's email address, or a reader has a poster's phone number, that information is out of our control.

If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours where the GDPR requires it, and we will tell affected people directly where the law requires it or where we think you would want to know.

If you find a security problem with the site, please tell us at connect@yogaguide.us. We will not take legal action against anyone who reports a vulnerability to us in good faith, gives us reasonable time to fix it, and does not access, alter or delete other people's data.

18. Your rights if you are in the UK, the EEA or Switzerland

Under the UK GDPR and the EU GDPR you have the following rights. They are free to exercise, and we will not treat you differently for using them.

Right	What it means here
Access	Ask us for a copy of the personal information we hold about you, and information about how we use it
Rectification	Ask us to correct information that is wrong or incomplete. For a live listing, you can usually do this yourself, faster, with your manage link
Erasure	Ask us to delete your information. For a listing, use your manage link, or ask us. Note the exceptions below
Restriction	Ask us to stop using your information while we look into a dispute about its accuracy or our legal basis
Objection	Object to processing we base on legitimate interests. We will stop unless we have compelling grounds that override your interests, or we need it for legal claims. You can object to direct marketing at any time, for any reason, and we will always stop
Portability	Ask for the information you gave us in a structured, commonly used, machine-readable format, or ask us to send it to someone else where that is technically feasible
Withdraw consent	Withdraw consent at any time, where consent is our basis — that is, marketing email, publishing your phone number, and news from a teacher (switch it off in My bookings). Withdrawal does not affect what we did lawfully beforehand
Automated decisions	We do not make decisions about you by purely automated means that have legal or similarly significant effects. You can still ask a human to review any moderation decision — see section 12
Complain	Complain to your data protection authority — see section 23

Limits, stated honestly. We cannot give you what we do not have. In particular, we cannot produce messages sent through the reply form, or the reader's email address, because we never stored them. We may refuse or limit a request where the law allows — for example where complying would disclose another person's personal information, where information is needed to establish or defend legal claims, or where a request is manifestly unfounded or excessive (in which case we will explain why, and you can complain).

Erasure and the suppression list. See section 16. Erasing your address from the suppression list would defeat its purpose, and we will explain that before acting on such a request.

Erasure and consent records. If you ask us to erase everything, we will normally retain the bare record that consent was given or withheld, and when, because we are required to be able to demonstrate that, and because deleting it would leave us unable to show we acted lawfully. We will tell you if we do this and why.

How to make a request: see section 22.

19. If you are in California

This section is for California residents, and uses the definitions in the California Consumer Privacy Act as amended by the California Privacy Rights Act.

We are a very small business and we may well fall below the thresholds at which the CCPA applies. We honor these rights anyway.

19.1 Categories of personal information we collect

CCPA category	Do we collect it?	What, specifically
Identifiers	Yes	Name, email address, optional phone number, IP address; and, collected by our hosting provider's measurement script rather than by us, a random browser identifier (section 10)
Personal information under Cal. Civ. Code § 1798.80	Yes	Name, phone number (the same items as above)
Protected classification characteristics	No	—
Commercial information	Yes, when you post or book	Items or services you advertise, prices, class reservations, cancellations and attendance, class passes a teacher records, what a teacher marks you as having paid them, the waivers you agree to, the private sessions you ask for, and the feedback you choose to send a teacher after class
Internet or network activity	Limited	Server logs of pages requested; bot check signals; local storage preferences that stay on your device; page views and load timings reported to our hosting provider by its own measurement script (section 10); from 15 October 2026, visit counts reported to Cloudflare Web Analytics (section 11); views of teacher pages and listings, kept as daily totals (section 11); and the record of your Learn lessons if you use the study guide (section 6.7)
Geolocation data	Coarse only	The city you selected from a list; the postcode on a studio or teacher listing; and, if you press “use my location” to sort by distance, a reading rounded to about a kilometer — far wider than the 1,850-foot radius the CCPA calls precise. We do not collect precise geolocation
Audio, electronic, visual information	Yes, if you upload one	Photographs you choose to publish in a listing or on a teacher schedule page, and a student's own photo, which only their teachers see
Professional or employment information	Yes, if you post one	Whatever you put in a teacher, studio or jobs listing
Education information	No	Unless you choose to type it into a listing
Inferences	No	We do not infer interests or build behavioral profiles. Teachers supply their own public profile details
Sensitive personal information	No	We do not collect it. The right to limit its use therefore does not arise

Sources, purposes, disclosures and retention are set out in sections 6, 13 and 16. Information comes from you, your device and, for class changes or attendance, the relevant teacher, as those sections describe.

19.2 Your California rights

• Right to know what personal information we have collected, the categories, the sources, the purposes, the categories of third parties we disclosed it to, and the specific pieces.
• Right to delete the personal information we hold about you, subject to the exceptions in the CCPA.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell or share personal information, so there is nothing to opt out of. We have no "Do Not Sell or Share My Personal Information" link because the law does not require one where nothing is sold or shared.
• Right to limit the use of sensitive personal information — we do not collect any, so this does not arise.
• Right not to be discriminated against for exercising any of these rights. We will not deny you the Service, charge you a different price, or give you a lower quality of service. We have no financial incentive programs.

We disclose the following categories to service providers for business purposes, and have done so for as long as the site has operated: identifiers, commercial information, internet or network activity, coarse geolocation, visual information and professional information — to our web host, our email delivery provider and Cloudflare, as described in section 13. We have sold nothing and shared nothing.

Authorised agents. You may use an authorized agent. We will ask for written proof of authorization, and we may contact you directly to confirm.

Shine the Light. California Civil Code § 1798.83 lets California residents ask about disclosures of personal information to third parties for their direct marketing purposes. We make no such disclosures.

How to make a request: see section 22.

20. If you are in another US state

If you live in a US state with a comprehensive privacy law — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky and Rhode Island — you generally have the right to:

• confirm whether we process your personal data and access it;
• correct inaccuracies;
• delete it;
• obtain a portable copy; and
• opt out of targeted advertising, sale, and profiling with legal or similarly significant effects.

We do none of the things in that last bullet, so there is nothing to opt out of.

Appeals. If we refuse your request, we will tell you why, and you may appeal by replying to our decision or emailing connect@yogaguide.us with "Appeal" in the subject line. We will respond within the time your state's law allows — usually 45 or 60 days — and if we still refuse, we will tell you how to complain to your state Attorney General.

We do not use personal data for targeted advertising or profiling, so no data protection assessment obligations arise for those activities.

21. If you are in Canada, Australia, or elsewhere

21.1 Canada

We handle personal information consistently with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, provincial equivalents in Quebec, Alberta and British Columbia. You may ask for access to, and correction of, your personal information at any time — see section 22.

CASL. Marketing email goes only to people who gave express consent by ticking the optional box, which we recorded with the date, the wording and the IP address. Every marketing message identifies us, gives our postal address, and carries an unsubscribe mechanism that we honor promptly and permanently. For classified listings, the service email described in section 8.1 consists of administrative messages about a listing you asked us to run, an ongoing relationship you started, and not messages promoting a product or service.

If you are unhappy with how we have handled your personal information, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or to your provincial commissioner.

21.2 Australia

We handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth). This policy is our APP 5 notice: it tells you what we collect, why, who we give it to, that it goes overseas to the United States (APP 8), and how to access and correct it and complain.

Spam Act 2003. Marketing email goes only to people who gave express consent by ticking the optional box. Every marketing message identifies YogaGuide.us, includes our contact details, and carries a functional unsubscribe facility that we honor within five working days and, in practice, immediately.

If you are unhappy with our response to a privacy complaint, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

21.3 Everywhere else

Wherever you live, you may ask us for a copy of your information, ask us to correct or delete it, object to how we use it, and complain. We will apply the rights in sections 18 to 20 to you as a matter of practice, whether or not your local law compels us to, and we will comply with any additional local requirement that does apply.

22. How to make a request, and what happens next

Email connect@yogaguide.us and tell us:

• what you want (access, correction, deletion, a copy, to stop marketing, to object);
• which listing or listings it concerns, with the URL if you have it; and
• enough for us to find your records.

Verification. For class accounts, email from the address you use to sign in. For classified listings, we verify requests in the following ways:

• Email from the address you used to post. That is normally enough.
• Or use your manage link, which proves you control the listing.
• If you cannot do either, we may ask for details only the right person would know — such as the date you posted, the city, and the wording of the listing. If we still cannot be satisfied, we will tell you, and we may have to refuse. We will not ask you for a copy of your passport or ID for a request about a free classified ad. Collecting more identity data to protect less would be the wrong trade.

Timescales. We respond within one month under the UK/EU GDPR, extendable by two further months for complex or numerous requests, in which case we will tell you within the first month and explain why. Under US state laws we respond within 45 days, extendable once by a further 45 days with notice. Under Australian and Canadian law we respond within 30 days. In practice, most requests on a site this size are handled in a few days.

Cost. Free, unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee based on our actual administrative cost, or refuse — and we will explain which and why, and how to complain.

Fastest routes. For most things you do not need us at all:

• Change or delete a listing: use your manage link.
• Cancel an upcoming reservation: use My bookings. Teachers can cancel an upcoming class from their dashboard. Cancellation does not delete the record.
• Unfollow a teacher, or stop their news: use My bookings, the teacher's follow page, or the link in any email about their new classes, which works without signing in. The teacher's list shows the change straight away.
• Take an event out of past events: use your manage link and untick the box, or delete the listing.
• Leave a waitlist: use My bookings or the class page.
• Stop booking every session of a class, or its reminders: use My bookings.
• Stop your calendar link working: make a new link in My bookings.
• Request deletion of a class account or booking records: email connect@yogaguide.us from your account address.
• Remove your phone number: use your manage link and untick the box.
• Stop marketing email: click unsubscribe.
• Erase your Learn progress: use Erase progress on Learn's Progress tab.
• Clear your stored preferences: clear site data in your browser.

23. Complaints

Please come to us first — email connect@yogaguide.us and we will take it seriously and reply.

You do not have to, and you can complain to a regulator at any time:

• United Kingdom: the Information Commissioner's Office — ico.org.uk, or 0303 123 1113.
• EEA: the data protection authority in the country where you live, where you work, or where you think the problem happened. The list is at edpb.europa.eu.
• Switzerland: the Federal Data Protection and Information Commissioner — edoeb.admin.ch.
• Canada: the Office of the Privacy Commissioner of Canada — priv.gc.ca — or your provincial commissioner.
• Australia: the Office of the Australian Information Commissioner — oaic.gov.au.
• California and other US states: your state Attorney General, and in California the California Privacy Protection Agency — cppa.ca.gov.

You also have the right to an effective judicial remedy where your law provides one.

24. Children

yogaguide.us is for adults. You must be 18 or older to use it. See section 4 of our Terms of Use.

We do not knowingly collect personal information from anyone under 18, and we do not direct the site to children. We do not knowingly sell or share the personal information of anyone under 16 — we do not sell or share anyone's.

Do not post a listing for or about a child, and do not include a child's name, photograph or contact details in a listing. The same goes for the photos on a teacher's schedule page: no identifiable children in them.

If you believe a child has given us personal information, or that a listing contains a child's personal information, email connect@yogaguide.us and we will delete it promptly.

25. Changes to this policy

We may change this policy. When we do, we will publish the new version on the site with a new version number and a new effective date, and keep the previous version available on request.

For material changes — new purposes, new categories of information, new recipients, anything that meaningfully affects your rights — we will give notice at least 14 days before they take effect, by email to the address on file for your active listing and/or by a prominent notice on the site. We may use either or both. The one exception is described in the next paragraph.

New features you choose to use are different. When we add an optional feature, and the only new information it handles comes from people who decide to use it, the feature can start on the day we publish the updated policy that describes it. It changes nothing about information you have already given us, and nothing is collected from you unless you use it. We announce it by publishing the new version of this policy, with its new version number and effective date. This exception never covers advertising or paid features, which the last paragraph of this section deals with.

Where a change requires your consent, we will ask for it, and we will not rely on silence or continued use as consent where the law does not allow that.

In particular: if we introduce advertising, sponsored placements or paid features, and that means we start collecting or using personal information in a new way, we will update this policy and tell you before it starts. Advertising would never, by itself, move you onto the marketing email list. Only ticking the optional box does that.

26. Contact

YogaGuide.us
200 Main Street
Verona, MS 38879
United States of America

connect@yogaguide.us

For copyright complaints, please use the DMCA process in section 31 of our Terms of Use.

This Privacy Policy should be read together with our Terms of Use.

Privacy Policy v1.25, effective 30 October 2026.