Privacy Policy
Last Modified: 9/14/23
Purpose
YAFA Yoga Accessible for All (hereinafter “we,” “our,” “us”) is committed to protecting your privacy and maintaining a quality online experience for our website users.
This Privacy Policy describes the type of personal information we may collect from you or that you may provide when you visit yafayoga.org (hereinafter “Website”) and our practices for handling, storing, and protecting that information as well as your rights in relation to your personal information and how you can contact us and supervisory authorities in the event you have questions about how we handle your personal information.
Privacy Policy Consent
Please read this Privacy Policy carefully and in its entirety before using our Website. If you do not agree with our policies and practices regarding your personal information and how we will treat it, your choice is to not use our Website. Your use of our Website constitutes your voluntary acceptance to be bound by this Privacy Policy, whether you have read it or have had the opportunity to read it and have chosen not to.
This Privacy Policy applies to the information we collect:
On this Website.
In email, text, and other electronic messages between you and this Website.
When you interact with our advertising on third party websites and services, if that advertising includes links to this Privacy Policy.
It does not apply to information that is collected by:
Us offline or through any other means, including on any other website operated by any third party (including our affiliates).
Any third party (including our affiliates) through any content (including advertising) that may link to or be accessible from (or on) the Website.
Children’s Online Privacy Protection Act (COPPA)
This Website and any products and services offered herein are not intended for persons under the age of 18.
We prohibit children under the age of 18 from using any and all interactive portions of this Website, including leaving any comments, filling out forms, or otherwise submitting information. A child’s parent or guardian should contact us if we have inadvertently collected any information or content from that child without the parent or guardian’s authorization, so that we may delete that information from our records.
CAN-SPAM Act of 2003
We have taken the necessary steps to ensure that we are in compliance with the Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM) Act of 2003 and will not send misleading information.
Personal Information We Collect
The type of personal information we collect depends on how you are interacting with us. We generally collect the following categories of personal information:
Contact information, such as first and last name, email address, postal address, phone number, and other similar contact data;
Records and copies of your correspondence (including email address) if you contact us;
Details of transactions you carry out through our Website and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website and we will use a third-party payment processor to process the payment. We do not collect your credit card or debit card number, expiration date, or pin number;
Comments, feedback, questions and other information you provide to us;
Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website;
Information about your computer and internet connection, including your IP address, operating system, and browser type.
Sources of Personal Information
You provide personal information to us when you:
Subscribe to or purchase our products and/or services;
Complete a contact or information request form;
Complete any quizzes
We automatically collect personal information when you:
Visit, interact with, or use our Website;
Access, use, or download content from us; and
Open emails or click links in emails from us; and
Interact with our sales cart; and
Interact on our Facebook groups; and
Interact on any social media involving us.
We collect personal information for third party advertisers that use cookies on our Website to provide online behavior advertising. See the Interest Based Advertising section below.
How We Use the Information/Lawful Bases
How We Use Your Information. We will use Information collected to further the purposes for which you provided it, which may include purchasing our services and signing up for communications. We will also use Information collected to contact you regarding our services, to schedule appointments, to process payments, provide you with information which may interest you, notify you of new services or sales, manage our services, and improve your experience as a user of our services and our Website, and to carry out our obligations and enforce our rights arising from any contracts entered into between you and ss. Lastly, we may use Information to review your, and other Users,’ status or activity. We may aggregate information to better understand how Users use our services and to improve services or our Website.
We will use your non-personal information to help improve your enjoyment of our Website. We may use cookies or web beacons to remember your address or other non-personal information when you request in-formation or services on our Website and identify the pages that are most popular to you. We also use non-personal information collected for business purposes such as website analytics.
We process personal information to:
Process and fulfill an order, download, subscription, or other transaction;
Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
Respond to your requests, inquiries, comments, and concerns;
Notify you about changes to our Website or any products or services we offer or provide through it;
Send marketing emails;
Inform you of and administer promotions, contests, sweepstakes or surveys;
Help us address problems with and improve our Website;
Protect the security and integrity of our Website;
Contact you for other business reasons, if necessary; and
Provide online behavioral advertising.
We will not sell or share your personal information and have not done so in the last 12 months.
We may transfer your personal information to a third party in the event of a bankruptcy, dissolution, merger, sale, acquisition, or change of control.
We may transfer your personal information to a third party if we need to comply with our legal obligations, resolve disputes, and/or enforce our agreements.
Cookie Policy
Effective Date: 12/22/23 Last Updated: 12/22/23
What are cookies?
This Cookie Policy explains what cookies are and how we use them, the types of cookies we use i.e, the information we collect using cookies and how that information is used, and how to manage the cookie settings.
Cookies are small text files that are used to store small pieces of information. They are stored on your device when the website is loaded on your browser. These cookies help us make the website function properly, make it more secure, provide better user experience, and understand how the website performs and to analyze what works and where it needs improvement.
How do we use cookies?
As most of the online services, our website uses first-party and third-party cookies for several purposes. First-party cookies are mostly necessary for the website to function the right way, and they do not collect any of your personally identifiable data.
The third-party cookies used on our website are mainly for understanding how the website performs, how you interact with our website, keeping our services secure, providing advertisements that are relevant to you, and all in all providing you with a better and improved user experience and help speed up your future interactions with our website.
Types of Cookies we use
Functional and required cookies
| Cookie | Purpose, type, and duration |
|---|---|
| _acloggedin | Supports login by Scheduling client if the client has an account Cookie January 1, 2025 |
| _client_acloggedin | Supports login by Scheduling client if the client has an account Cookie January 1, 2025 |
| _dd_cookie_test | Tests if cookies are supported Cookie Expires Instantly |
| _dd_s | Tracks Browser errors Cookie Four hours |
| _dd_site_test | Tests if cookies are supported Cookie Expires instantly |
| _grecaptcha | Helps reduce spam Local storage No expiry |
| CART | Shows when a visitor adds a product to their cart Cookie Two Weeks |
| CHECKOUT_WEBSITE | Identifies the correct site for checkout when checkout on your domain is disabled Cookie Session |
| client_username | Remembers a logged in Scheduling client's username between visits Cookie One Year |
| Commerce-checkout-state | Stores state of checkout while the visitor is completing their order in PayPal Session Storage Session |
| Crumb | Prevents cross-site request forgery (CSRF) Cookie Session |
| hasCart | Tells Squarespace that the visitor has a cart Cookie Two Weeks |
| Locked | Prevents the password-protected screen from displaying if a visitor enters the correct site-wide password. Cookie Session |
| orderStatusSessionToken | Authenticates a visitor who logs into an order status page Cookie One Year |
| PHPSESSID | Securely authenticates a visitor during their checkout in Scheduling Cookie One Month |
| RecentRedirect | Prevents redirect loops if a site has custom URL redirects. Redirect loops are bad for SEO. Cookie 30 Minutes |
| remember_client | Remembers Scheduling client’s login details if they have an account Cookie 365 Days |
| siteUserCrumb | Prevents cross-site request forgery (CSRF) for logged in site users Cookie 3 Years |
| SiteUserInfo | Identifies a visitor who logs into a customer account Cookie Three Years |
| SiteUserSecureAuthToken | Authenticates a visitor who logs into a customer account Cookie Three Years |
| squarespace-announcement-bar | Prevents the announcement bar from displaying if a visitor dismisses it Local Storage Persistent |
| squarespace-likes | Shows when you've already "liked" a blog post Local Storage Persistent |
| squarespace-popup-overlay | Prevents the promotional pop-up from displaying if a visitor dismisses it Local Storage Persistent |
| squarespace-video-player-options | Remembers video player selected preferences ( volume, playback speed, and quality) for videos uploaded directly to Squarespace Local Storage Persistent |
| ss_cookieAllowed | Remembers if a visitor agreed to placing analytics cookies on their browser if a site is restricting the placement of cookies Cookie 30 Days |
| ss_sd | Ensures that visitors on the Squarespace 5 platform remain authenticated during their sessions Cookie Session |
| Test | nvestigates if the browser supports cookies and prevents errors Cookie Session |
| TZ | Enables a Scheduling client’s appointments to display correctly based on their time zone preferences. Local Storage Persistent |
Analystics and performance cookies
| Cookie Name | Duration | Purpose |
|---|---|---|
| ss_cid | Two years | Identifies unique visitors and tracks a visitor’s sessions on a site |
| ss_cpvisit | Two years | Identifies unique visitors and tracks a visitor’s sessions on a site |
| ss_cvisit | 30 minutes | Identifies unique visitors and tracks a visitor’s sessions on a site |
| ss_cvr | Two years | Identifies unique visitors and tracks a visitor’s sessions on a site |
| ss_cvt | 30 minutes | Identifies unique visitors and tracks a visitor’s sessions on a site |
Review which cookies are active in your browser’s settings. Clear cookies from your browser or device, either globally or from a specific website. For help locating cookies on your device, visit your browser's documentation: Chrome, Firefox, Safari, Microsoft Edge
Automated Decision-Making
We use the personal information that we collect for automated decision-making (i.e., making a decision solely by automated means without any human involvement) if it is authorized by legislation, if you have provided explicit consent, or if it is necessary for entering into or performance of a contract.
When using automated decision-making, we will provide you with further information about the logic involved, your right to obtain human intervention, the potential consequences of the processing, and your right to contest the automated decision.
Profiling
We use the personal information that we collect for profiling (i.e., automated processing of the information to evaluate certain personal aspects of a natural person to predict their behavior and make decisions regarding it) if it is authorized by legislation, if you have provided explicit consent, or if it is necessary for entering into or performance of a contract.
When profiling, we will provide you with further information about the logic involved, your right to obtain human intervention, the potential consequences of the processing, and your right to contest the automated profile.
“Do Not Track” (DNT) Signals
Some browsers transmit Do Not Track (DNT) signals to websites. We respect the active DNT of your browser and avoid placing any tracking cookies even if you have given your consent to use the cookies on the website.
How the Information is Shared
Depending on how you interact with us, we share information with our third-party service providers, agents and representatives, including, but not limited to, eCommerce platform providers, payment processing providers, email service providers, IT service providers, security and software service providers, in order to process the information as necessary to complete a transaction, fulfill your request, or otherwise on our behalf based on our instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures.
We also will disclose your personal information if we have a good faith belief that such disclosure is necessary to:
meet any applicable law, regulation, legal process or other legal obligation;
detect, investigate and help prevent security, fraud or technical issues; and/or
protect the rights, property, or safety of us, our Website, our users, employees, or others.
Our current third-party service providers include:
Squarespace (web hosting), Venmo, Facebook, Instagram, Zoom,
Information Retention
We retain your personal information for as long as necessary to fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements, or until such time as you let us know you would like for us to delete it or unsubscribe from our marketing contacts.
Passwords
Certain features of our Website or our course platform require the creation of a username and password. You are responsible for keeping your username and password confidential. We ask that you not share your username or password with anyone. We cannot and will not be liable for any loss or damage arising from your failure to protect your username or password.
You agree to notify us immediately of any unauthorized use of your username or password or any other breach of security.
Information Protection and Security
Our Website uses commercially acceptable security measures to prevent your personal information from being lost, used, or accessed in an unauthorized way. We use a Secure Sockets Layer (SSL) certificate never transmit your credit card information via email. If you receive an email from us that appears to be a request for personal information, do not respond because it may be a phishing scam designed to steal your personal information.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk.
Should there be a data breach, we will notify you when we are legally required to do so.
Your Rights to Control Your Information
You can unsubscribe from our email newsletters or updates at any time through the unsubscribe links found in the communications you receive from us.
Local data protection laws may give you rights with respect to personal information if you are located in or a resident of that country, state, or territory.
THESE RIGHTS ARE NOT GUARANTEED
AND IT IS IMPORTANT FOR YOU TO CONSULT YOUR LOCAL DATA PROTECTION LAWS TO DETERMINE WHAT RIGHTS MAY BE AVAILABLE TO YOU.
These rights may include the following:
| Right | May Apply To |
|---|---|
| Right to disclosure/access (to know the personal information collected about you and request a copy) | Residents of California, Colorado, Utah, Virginia, Australia, Canada, the European Union and/or the European Economic Area, and the United Kingdom |
| Right to correct/rectification (to have your inaccurate personal information corrected) | Residents of California, Colorado, Connecticut, Canada, Australia, the European Union and/or the European Economic Area, and the United Kingdom |
| Right to erasure/deletion (to have all or some of your personal information deleted upon a verifiable request) | Residents of California, Colorado, Connecticut, Utah, Virginia, the European Union and/or the European Economic Area, and the United Kingdom |
| Right to nondiscrimination (the right to equal service and price even if you exercise your rights) | Residents of California and Virginia |
| Right to opt out of use of personal information for the purposes of targeted advertising | Residents of Colorado, Connecticut, Utah, and Virginia |
| Right to opt of use of personal information for profiling | Residents of Connecticut |
| Right to limit use and disclosure of sensitive personal information | Residents of California |
| Right to data portability (to have your personal information transferred to you or a third party in machine-readable format, where technically feasible) | Residents of Quebec, the European Union and/or the European Economic Area, and the United Kingdom |
| Right to data portability (to have your personal information transferred to you in a readily-usable format that lets you transmit that information to a third party) | Residents of California, Colorado, Utah, and Virginia |
| Right to data portability (to have your personal information transferred to you in a readily-usable format that lets you transmit that information to a third party where processing is carried out by automated means) | Residents of Connecticut |
| Right to withdraw consent (to withdraw your consent that we handle your personal information at any time. The withdrawal of your consent shall not affect the lawfulness of processing based on your consent before its withdrawal) | Residents of Canada, the European Union and/or the European Economic Area, and the United Kingdom |
| Right to not identify yourself or of using a pseudonym | Residents of Australia |
| Right to restriction of processing (to limit the purposes that your personal information may be used for) | Residents of the European Union and/or the European Economic Area, and the United Kingdom |
| Right to object (to object to the processing of your personal information in cases where our processing is based on direct marketing) | Residents of the European Union and/or the European Economic Area, and the United Kingdom |
| Right to stop unwanted direct marketing | Residents of the European Union and/or the European Economic Area, and Australia |
| Right to complain (to lodge a complaint with competent authorities in the proper jurisdiction if you are not content with how we collect, share, and process your personal information) | Residents of Canada, Australia, the European Union and/or the European Economic Area, and the United Kingdom |
These rights are not absolute and they do not always apply in all cases. We will honor your rights under applicable data protection laws.
Exercising Your Rights
If you wish to exercise any of the rights specified above, please submit a request via email to: admin@yafayoga.org
Please be sure to specify which right you want to exercise and provide us with enough information to verify your identity. If we cannot verify your identity, we may not be able to fulfill your request.
We will respond to your request within 30-45 calendar days of receipt, depending on where you reside. We will notify you in writing via email if we need more time to respond.
We may deny your request if certain exceptions in the law apply. We will provide you the reason(s) for denial in writing via email.
Use and Transfer of Your Information Out of the European Economic Area (EEA) or Canada
This Website is operated in the United States and the third parties with whom we might share your personal information (as explained above) are also located in the United States or other countries located outside the EEA and Canada.
If you are located outside of the United States, please be aware that any information you provide will be transferred to the United States. By using this Website and/or providing your information, you consent to this transfer.
Contact Us
If you have any questions, comments, complaints, or suggestions in relation to this Privacy Policy or our privacy practices, please contact us by email: admin@yafayoga.org
Data protection officer: Angela Tolsma
Changes to this Privacy Policy
The date this Privacy Policy was last revised is identified at the top of the page. It is our policy to post any changes we make to our Privacy Policy on this page. If we make any material changes to how we treat our Website users’ personal information, we will notify you of any such changes by email (if you have provided your email to us) and/or by a prominent notice displayed on our Website’s home page and updating the revised date of our Privacy Policy. We recommend that you check this Privacy Policy when you visit our Website to be sure that you are aware of our most current policy.
Please also read our Terms and Conditions of Use.