Privacy

Last updated: 29 October 2026

This Privacy Notice sets out the basis on which we will process the personally identifying information (‘Personal Data’) that we collect and receive from and about users of our website www.cottonyoga.co.uk (“the Site”) and customers who book our classes, retreats and events.

Our privacy commitments

  • We will only collect, keep, use and share Personal Data for legitimate business purposes that we explain here below, or if we’re legally required to do so.
  • We will be as clear and open as we can with you on what Personal Data we collect and how it will be processed.
  • For as long as we maintain records of your Personal Data, we will keep it up to date and protect it with appropriate safety measures.

What we collect through the Site

  • When you contact us using the contact form: your name, email address, phone number and message. Our legal basis is answering your enquiry and, if you go on to book, providing the class, retreat or event you book.
  • When you create an account to watch the online videos: your name, email address and password (stored scrambled, so nobody can read it). We also record which videos you watch, how far through you get and which you like, so you can pick up where you left off, and the time and IP address of each sign-in, to keep your account secure. Our legal basis is providing the account you asked for.
  • Automatically when you use the Site: your browser sends your IP address, the date and time of the visit, the pages accessed, the access status/HTTP status code, your browser, your operating system and interface, and the language and version of the browser software. Our legal basis is being able to operate the Site, keep it secure and give you access to the pages you wish to access.

Data Uses

We use your Personal Data:

  • To answer your enquiries, administer your bookings and contact you about them.
  • To provide your account and the online videos.
  • To contact you by email or WhatsApp, including to ask for your feedback.

Cookies

Cookies are small text files that the Site stores in your browser. We only use the cookies the Site needs in order to work:

  • Session cookie (cottonyoga_session): keeps you signed in and remembers what you have typed into a form. It expires 120 minutes after you stop using the Site.
  • Security cookie (XSRF-TOKEN): protects our forms against forged submissions.
  • “Remember me” cookie: only set if you tick “Remember me” when you sign in, so that you stay signed in between visits.

We do not use advertising, tracking or analytics cookies. The contact and registration forms use Cloudflare Turnstile to check that a person, not a bot, is filling them in. You can block or delete cookies in your browser settings, but you will not be able to sign in without them.

Website statistics

We count visits with Fathom Analytics, which does not use cookies and does not collect Personal Data. It tells us how many people visit the Site, which pages they view and which of our buttons and links get clicked, all as anonymous totals, without identifying anyone.

Data Sharing

CottonYoga will not sell your information. We will not share your information with any third party except as stated in this Privacy Notice or as required to operate the site, provide our services to you and administer your account.

WEBSITE VISITORS Data Collection

When you visit the Site we receive the technical information described above: your IP address, the date and time of the visit, the pages accessed and your browser and device details. The legal basis for collecting and processing this personal data is our legitimate interest in operating the Site, keeping it secure and giving you access to the pages you wish to access.

Data Uses

We use this Personal Data:

  • to run the Site and keep it secure
  • to collect site statistics (see “Website statistics” above)

Data Sharing

CottonYoga will not sell your information. We will not share your information with any third party except as stated in this Privacy Notice or as required to operate the site, provide our services to you and administer your account or otherwise as required or permitted by law.

Data Processors

We use third party processors to collect, export, process and store Personal Data on our behalf. The processors we use currently are the following (each name links to its privacy policy):

Data Security

  • We maintain technical and physical safeguards that are designed to protect the security and integrity of your Personal Data, and to guard it against accidental or unauthorised access, use, alteration or disclosure to unauthorised third parties. These measures include device encryption, firewalls and virus checking procedures.
  • Where we keep Personal Data files on local devices these devices are protected and accessible only to authorised employees.
  • We regularly review our security systems to ensure that your Personal Data remains safe and secure.

Duration of Storage

We will maintain records of your Personal Data for as long as you remain:
  • an active user of our site

Your Rights in Relation to Personal Data

  • You have the right to update and correct the personal information on your account. You also have the right to request from us all personal information that we hold that relates to you, to request restriction of the processing of that data and to request that we delete that data. Where allowed by applicable law there may be an administrative charge for supply of copies of data and we may also require you to provide us with appropriate identification before we comply with this request. You also have the right to object to our continued processing of your personal data. You may also have the right to data portability. If you have a complaint about the way in which we use your personal information you have the right to complain to the Information Commissioner: ico.org.uk.
  • You can contact us with questions about the personal information we hold about you using the contact page.

Changes to our Privacy Notice

We will update this Privacy Notice from time to time to reflect changes in our business. All such changes will be posted to the site and if we consider it to be appropriate we will notify subscribers of any material changes by email.