Data Protection Policy

Yoga.in ("we", "us") is the Data Fiduciary for the personal data you share on this website and its services. This notice explains, in clear terms, what personal data we collect, why, how long we keep it, and the rights you have under the Digital Personal Data Protection (DPDP) Act, 2023.

• Account details: name, email address, mobile number, country and password (stored only in encrypted form). If you sign in with Google or Facebook, the name, email address and profile photo they share with us.
• Booking details: the courses, classes and add-ons you book, participant details you enter, and payment status. Card and bank details are handled by our payment partner and are not stored by us.
• Reviews and ratings you submit.
• For centres and teachers (partners): business and contact details, address, tax details such as GSTIN / PAN, and listing content.
• Security and consent records: your IP address, approximate location derived from it (city, region, country), the date and time, and your browser type, recorded when you register, log in, submit a review or give consent.

• To create and manage your account and let you log in securely.
• To process bookings, payments, cancellations and refunds, and to send you booking confirmations and service messages.
• To publish your reviews and ratings, and to onboard and list partners.
• To keep the platform secure, prevent fraud and misuse, and keep a record of your consent as required by law.
• To send you newsletters or offers only if you have separately opted in. You can unsubscribe at any time.

We process your personal data on the basis of the consent you give by ticking the consent box, and, where the law permits, for legitimate uses such as complying with legal obligations. We collect only the data needed for the purposes above.

• The centre or teacher you book with, to the extent needed to deliver your booking (for example your name, contact details and booking details).
• Service providers who help us run the platform, such as hosting, email and SMS delivery, payment processing and customer support or CRM tools. They may use your data only on our instructions.
• Government authorities or courts, when the law requires it.

We do not sell your personal data.

We keep your account data for as long as your account is active. When you close your account or withdraw consent, we delete or anonymise your personal data, except where we must keep it longer to meet legal, tax or accounting obligations or to resolve disputes. Security and consent records (IP address, approximate location, date and time) are kept for as long as needed to show that consent was given, and for no longer than the law allows.

Under the DPDP Act, 2023 you have the right to:

• Get a summary of the personal data we hold about you and how we use it.
• Have inaccurate or incomplete data corrected or completed.
• Have your personal data erased when it is no longer needed for the purpose it was collected for.
• Withdraw your consent at any time, as easily as you gave it.
• Have your grievances about our handling of your data addressed.
• Nominate another person to exercise these rights on your behalf in case of death or incapacity.

Email us at booking@yoga.in from the email address linked to your account, or from your registered mobile number details, and tell us what you would like us to do. You can also update most of your details in My Profile. Withdrawing consent does not affect processing done before you withdrew it, but we may no longer be able to provide services that need that data, such as your account or bookings.

If you have a concern about how we handle your personal data, contact our Grievance Officer at booking@yoga.in. We will acknowledge your request and respond within the time required by law. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

Our services are meant for adults. If you are under 18, you may use them only with the verifiable consent of a parent or lawful guardian.

If we change this notice in a way that affects how we use your personal data, we will update the version and date below and, where required, ask for your consent again.