At BYLU we take your privacy very seriously.
We therefore only collect from you the information strictly necessary to become a member, register on our website and signup online.
Our Commitment to Privacy
BYLU complies with the terms of the EU General Data Protection Regulation n° 2016/679 (the “GDPR”).
THE PERSONAL INFORMATION WE COLLECT
We may collect Your name, address, telephone numbers, email, age, gender and health or financial information when You browse this Site.
We will collect Your Personal Information when:
You create an account on the Site,
You purchase yoga courses or products on the Site or at the studio,
You book a yoga course,
You attend a class,
You redeem a gift card,
You engage with BYLU on social media,
You answer to a customer survey or give us your feedback, and
You contact us with queries.
Personal Information about health are special categories of data requiring additional protection under GDPR. Generally, we try to limit the circumstances where we collect and process sensitive personal data. We may collect them when You have sought clearance from us to attend a yoga class or to enable us to ensure Your suitability to attend a yoga class.
WHAT IS OUR LEGAL BASIS TO USE YOUR PERSONAL INFORMATION?
We will collect Your Personal Information only for one of the following reasons:
Contract – Your Personal Information is processed in order to fulfil a contractual arrangement e.g. to place an order or book a yoga class.
Consent – where You agree to us using Your Personal Information in this way.
Legitimate Interests – this means the interests of BYLU in managing our business to allow us to provide You with our services.
Legal Obligation – where there is statutory or other legal requirement to process Your Personal Information.
HOW DO WE USE YOUR PERSONAL INFORMATION?
The main purposes for which we use Your Personal Information are:
to process Your orders, bookings and payments,
to send You updates such as changes to pricing and schedules, new services or special events,
to contact You to request feedback and undertake customer satisfaction surveys,
for health and safety reasons (for instance minimum age or health condition requirements to attend hot yoga courses)
to manage Your contract,
to keep our records up-to-date,
to improve customer experience and interaction with our Site, and
in case of legal proceedings.
WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?
We use MindBody Online, California USA for web scheduling, registration, order processing and online payments. MindBody Online, acting as data processor, will process some or all of Your Personal Information.
MindBody Online stores all data in servers and backup servers located in the United States. MINDBODY has Privacy Shield certification which complies with GDPR regulations related to transferring and storage data outside of the EU
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
We will keep Your Personal Information for as long as we need it for the length of time we have an ongoing relationship with You, whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period before we can delete them) or whether retention is advisable in light of our legal position.
OUR COMMITMENT TO DATA INTEGRITY AND SECURITY
BYLU is committed to protecting Your privacy. BYLU processes Your Personal Information only in ways compatible with the purpose for which it was collected. To the extent necessary for such purposes, we take reasonable steps to make sure that the information is accurate, complete, current and otherwise reliable with regard to its intended use. However, BYLU expects that You will update Your Personal Information as necessary.
BYLU takes reasonable and appropriate measures to maintain the confidentiality and integrity, and prevent the unauthorized use or disclosure, of information. This includes maintaining a system of appropriate administrative, physical and technical safeguards to secure such information.
YOUR RIGHTS REGARDING YOUR PERSONAL INFORMATION
If You have created an online profile with us You can update Your profile by logging in and following the prompts to update Your Personal Information.
You can also request access to Your Personal Information that we collect online and maintain, and update or correct that information.
You also have the right to request from us erasure of Your Personal Information or restriction of processing or to object to processing as well as the right to data portability.
You may send any request related to the processing of Your Personal Information to the following address firstname.lastname@example.org. To protect Your privacy and security, we may take reasonable steps to verify Your identity before granting access or making corrections.
You may lodge a complaint with the Commission Nationale pour la Protection des Données which is the data protection supervisory authority in Luxembourg.
By continuing to browse our Site, you consent to our placing cookies on your computer (unless you have chosen to disable them via your browser). Certain features of our Site depend on cookies to function. You may still block these cookies by changing your internet browser’s settings but please be aware that our Site may not work properly if you do so.
REVISIONS AND CONTACT INFORMATION