Yivara Yoga — Privacy Statement
Last updated: 20 August 2026
This statement explains what personal information Yivara Yoga collects, why it is collected, how it is used, and what rights you have in relation to it. It is written to meet the requirements of the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.
---
1. Who I am
Yivara Yoga is a registered business name of Yvonne Halpin, sole trader, Drumcondra, Dublin 3, Ireland.
I am the data controller for the personal information described in this statement, which means I decide what information is collected and how it is used.
Contact: hello@yivarayoga.ie
---
2. What information I collect
When you book a class
- Your name
- Your email address
- Your phone number
- The classes you have booked and attended
When you pay
- Payment is processed by a third-party payment provider. I receive confirmation that a payment has been made, together with the amount and date. I do not receive or store your full card details at any time.
If you choose to tell me about your health
- I do not ask you to complete a health form and I do not routinely collect health information. However, the Terms and Conditions ask you to let me know about anything that may affect your ability to practise safely, and you may choose to do so — for example by replying to a booking confirmation, or by speaking to me before class. Section 4 explains how anything you share is handled.
When you contact me
- Your name, email address, and the content of your message.
When you visit the website
- Standard technical information such as your IP address, browser type, device type, and the pages you visit. This is collected through cookies and similar technologies — see Section 7.
If you sign up for updates
- Your name and email address.
---
3. Why I collect it, and my lawful basis
| What | Why | Lawful basis |
|---|---|---|
| Name, email, phone | To administer your booking and contact you about classes you have booked | Performance of a contract |
| Booking and attendance history | To manage class places and class packs | Performance of a contract |
| Payment confirmations | To take payment and keep accurate financial records | Contract, and legal obligation (Revenue) |
| Health information you volunteer | So that I can teach you safely and adapt the practice to you | Your explicit consent (Article 9(2)(a)) |
| Enquiry messages | To respond to you | Legitimate interests |
| Marketing emails | To send you news about classes, if you have asked for them | Your consent |
| Photographs of you | For the website and social media, if you have agreed | Your consent |
| Website analytics | To understand how the site is used and improve it | Your consent |
---
4. Health information — special protection
I do not ask you to complete a health questionnaire, and I do not keep health records about my students.
The Terms and Conditions do ask you to tell me about anything that may affect your ability to practise safely — injuries, blood pressure, pregnancy, recent surgery, and so on. I would strongly encourage you to do so, but how you tell me is up to you.
Wherever possible, please tell me in person, by arriving a few minutes early and having a quiet word before we begin. Nothing said to me in conversation is written down or stored.
If you choose instead to tell me in writing — for example by email or by replying to a booking confirmation — then that information becomes special category personal data under Article 9 of the GDPR, which is given a higher level of protection in law. Where that happens:
- It is processed only on the basis of your explicit consent, which you give by choosing to share it with me.
- It is used for one purpose only: so that I can teach you safely and offer you appropriate options in class.
- It is never shared with anyone else, except where disclosure to emergency medical services is necessary to protect your life or someone else's.
- It is deleted once it is no longer needed, and in any event within 2 years of your last class.
- You may withdraw your consent at any time by emailing hello@yivarayoga.ie, and I will delete it.
You are never obliged to share anything about your health in writing, and you will never be refused a class for declining to do so.
---
5. Who else has access to your information
I use a small number of trusted service providers to run the business. Each acts as a data processor on my behalf, under contract, and may only use your information to provide their service to me.
| Provider | What it does | Information involved |
|---|---|---|
| Squarespace | Hosts the website | Technical and browsing data |
| Setmore | Runs the class booking system | Name, email, phone, booking history |
| Stripe | Processes online card payments | Payment details (handled directly by Stripe) |
| SumUp | Processes in-person card payments | Payment details (handled directly by SumUp) |
| Google Workspace | Email and file storage | Anything contained in emails to and from me |
Some of these providers are based outside the European Economic Area, or use servers outside it. Where that is the case, transfers are protected by appropriate safeguards recognised under GDPR, such as Standard Contractual Clauses or the EU–US Data Privacy Framework.
I do not sell your personal information, and I never share it with third parties for their own marketing purposes.
I may disclose your information where I am required to do so by law, or where it is necessary to establish, exercise or defend a legal claim — for example, in the event of an insurance claim.
---
6. How long I keep it
| Information | Retention period |
|---|---|
| Booking and contact details | While you are attending classes, and for 6 years after your last class |
| Health information you have volunteered in writing | Deleted once no longer needed, and in any event within 6 years of your last class |
| Financial and payment records | 6 years, as required by Revenue |
| Enquiry emails | 2 years from the date of the enquiry |
| Marketing list | Until you unsubscribe |
| Records relating to an incident or insurance claim | For as long as necessary to deal with the claim, and any applicable limitation period |
At the end of the relevant period, information is securely deleted or destroyed.
---
7. Cookies
The website uses cookies — small files stored on your device.
Essential cookies are necessary for the site and booking system to function, and cannot be switched off.
Analytics and other non-essential cookies are only set if you consent to them. You can accept, reject, or change your preferences using the cookie banner when you first visit the site, and you can change your mind at any time through your browser settings.
The booking system provided by Setmore, and any embedded content such as Instagram, may also set their own cookies. Please see their respective privacy policies for details.
---
8. Your rights
Under GDPR you have the right to:
- Be informed about how your information is used — which is the purpose of this statement
- Access the information I hold about you, and receive a copy of it
- Rectification — have inaccurate or incomplete information corrected
- Erasure — ask me to delete your information, where there is no overriding reason to keep it
- Restrict processing — ask me to pause the use of your information in certain circumstances
- Data portability — receive your information in a portable format, or have it transferred to another provider
- Object to processing carried out on the basis of legitimate interests
- Withdraw consent at any time, where processing is based on consent — including for health information, marketing, and photographs
To exercise any of these rights, email hello@yivarayoga.ie. I will respond within one month. There is no charge.
You will never be treated differently, or refused a class, for exercising your rights.
---
9. Marketing
I will only send you marketing emails if you have specifically asked to receive them. Every email includes an unsubscribe link, and you can also unsubscribe at any time by emailing hello@yivarayoga.ie.
Booking confirmations, class reminders, and messages about a class you have booked are not marketing, and you will continue to receive these while you have an active booking.
---
10. Keeping your information secure
I take reasonable and appropriate steps to protect your information, including:
- Storing records on password-protected, access-controlled accounts
- Using reputable service providers with their own security standards
- Limiting access to your information to myself only
- Not keeping information for longer than necessary
No system can be guaranteed completely secure, but I take the protection of your information seriously — particularly anything relating to your health.
---
11. Children
Classes are intended for adults. Anyone under 18 may only attend with the consent of a parent or guardian, and I will collect the parent or guardian's contact details in that case.
---
12. Complaints
If you have a concern about how your information has been handled, please contact me first at hello@yivarayoga.ie — I would much rather hear from you directly and put things right.
You also have the right to lodge a complaint with the Irish supervisory authority:
Data Protection Commission
6 Pembroke Row, Dublin 2, D02 X963
Telephone: +353 1 765 0100 / 1800 437 737
Website: dataprotection.ie
---
13. Changes to this statement
I may update this statement from time to time. The version published on this website is the one currently in force, and the date at the top shows when it was last revised.
---
14. Questions
If anything here is unclear, or you would like to know more about how your information is handled, please email hello@yivarayoga.ie. I am always happy to explain.