Giyoga OÜ Privacy Policy

This Privacy Policy explains how Giyoga OÜ (hereafter “Giyoga”, registry code 14862521) collects, uses, stores, and protects the personal data of its clients and website users.
Giyoga is committed to protecting your privacy and ensuring transparency in accordance with the EU General Data Protection Regulation (GDPR) and the laws of the Republic of Estonia.
This Privacy Policy applies to all Giyoga services, classes, workshops, events, booking systems, and the use of the website www.gistuudio.ee.
If you have any questions regarding personal data processing, please contact us at hello@gistuudio.ee.

1. Definitions

• User – any person who visits the website, communicates with us, or uses our services

• Client – a person who books or participates in Giyoga classes, workshops, or events

• Services – all services offered by Giyoga, including classes, memberships, workshops, events, and digital materials

• Personal Data – information that identifies a person directly or indirectly (e.g. name, email address, phone number, booking and payment data)

• Processing – any operation performed on personal data, including collection, storage, use, modification, or deletion
   

2. What Personal Data We Collect
Giyoga collects only the personal data necessary to provide services and operate efficiently.
We may collect the following data:

• Name

• Email address

• Phone number

• Booking and attendance history

• Payment and invoice information

• Communication history (emails, messages, feedback)

Personal data is collected when you:

• Register or book a class via the Mindbody booking system

• Purchase a package, ticket, or membership

• Subscribe to newsletters or marketing communications

• Contact us via email or the website

• Participate in classes, workshops, or events
   

3. Purpose of Data Processing
We process personal data for the following purposes:

• Managing class bookings, memberships, and attendance

• Providing customer support and communication

• Processing payments and fulfilling accounting obligations

• Sending service-related notifications and updates

• Sending marketing communications (only with consent)

• Improving services, website functionality, and user experience

Personal data is never processed for purposes incompatible with the original reason for collection.

4. Legal Basis for Processing
Personal data is processed based on one or more of the following legal grounds:

• Performance of a contract (e.g. class bookings, memberships)

• Consent (e.g. newsletters, marketing communications)

• Legal obligation (e.g. accounting and tax requirements)

• Legitimate interest (e.g. improving services and security)
   

5. Marketing Communication
Marketing messages (newsletters, promotions, event updates) are sent only with the user’s consent.
Users can withdraw consent at any time by:

• Clicking the unsubscribe link in emails

• Contacting hello@gistuudio.ee

Withdrawal of consent does not affect the lawfulness of prior processing.

6. Sharing Personal Data with Third Parties
Giyoga shares personal data only when necessary and only with trusted service providers, including:

• Mindbody – booking and payment management

• Zone – domain and hosting services

• Squarespace or similar platforms – website and email delivery

• Google – analytics and website performance

• Meta (Facebook & Instagram) – advertising and analytics

All partners process data in accordance with GDPR and only under Giyoga’s instructions.

7. Data Retention
Personal data is retained only for as long as necessary:

• Booking and client data – while services are active

• Accounting data – as required by law

• Marketing data – until consent is withdrawn

Once data is no longer needed, it is securely deleted or anonymised.

8. Data Security
Giyoga applies appropriate technical and organisational measures to protect personal data from:

• Unauthorised access

• Accidental loss

• Misuse, alteration, or disclosure

Access to personal data is limited to authorised personnel only.

9. User Rights
Under GDPR, users have the right to:

• Access their personal data

• Request correction of inaccurate data

• Request deletion of data (“right to be forgotten”)

• Restrict or object to data processing

• Withdraw consent at any time

• File a complaint with the Estonian Data Protection Inspectorate

Requests related to personal data can be sent to hello@gistuudio.ee.

10. Use of Cookies and Analytics
Giyoga uses cookies and similar technologies in accordance with its Cookie Policy.
Cookies are used to:

• Ensure website functionality

• Analyse usage and performance

• Support marketing and advertising activities

Detailed information is available on the Cookie Policy page.

11. Changes to This Privacy Policy
Giyoga OÜ reserves the right to update this Privacy Policy when necessary to reflect legal or operational changes.
The latest version is always available on www.gistuudio.ee.

12. Contact Information
Giyoga OÜ
Registry code: 14862521
Website: www.gistuudio.ee
Email: hello@gistuudio.ee