Last Updated: October 24, 2026

At Hannah Duncalf Yoga (operating as Tadasana Yoga & Well-Being), accessible via https://www.hannahduncalfyoga.com (the "Site") and through our mobile application Tadasana Yoga (the "App"), we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, use the Tadasana Yoga App, book classes or massages, participate in retreats, or otherwise interact with our services.

1. Data Controller

For the purposes of applicable data protection laws (including the EU GDPR), the Data Controller responsible for your personal data is:

Business Name: Hannah Duncalf Yoga / Tadasana Yoga & Well-Being
Location: Tignes / Sainte Foy Tarentaise, Savoie, France
Email: hello@hannahduncalfyoga.com

2. Information We Collect

We collect information directly from you when you provide it to us, automatically as you navigate through the Site or App, and from third-party services.

A. Information You Provide to Us

Account & Contact Data: Name, email address, phone number, and mailing address when you register an account on the Site or App, subscribe to newsletters, or inquire about classes and retreats.
Booking & Payment Information: Details required to process transactions for yoga sessions, retreat deposits, massage bookings, or app subscriptions. Payments are handled through secure third-party payment gateways (e.g., Stripe, PayPal, Apple App Store, Google Play Store); we do not store full credit card details on our servers.
Health & Fitness Disclosures: Voluntary information regarding your health, medical history, physical injuries, or pregnancy provided during booking or class intake forms to ensure your safe participation in yoga and massage practices.

B. Information Collected Automatically

Device & Usage Data (Site & App): IP address, operating system, browser type, device type, unique device identifiers, time spent on pages or app screens, and navigation paths.
Cookies & Tracking Technologies: Standard cookies, web beacons, and local storage on our website to ensure site functionality, save user preferences, and analyze web traffic.

C. Mobile App-Specific Data (Tadasana Yoga App)

App Performance Data: Crash logs, performance metrics, and app interaction logs to improve app stability and feature design.
Push Notifications: With your explicit permission, we may send push notifications regarding class updates, live sessions, or app reminders. You can opt out via your mobile device settings at any time.

3. How We Use Your Information

We use your personal data for the following legitimate purposes:

To Provide & Manage Services: Fulfilling bookings, providing access to the Tadasana Yoga App, organizing retreats, and conducting safe yoga/massage sessions tailored to your needs.
Communication: Sending booking confirmations, class updates, app updates, customer service responses, and administrative notices.
Marketing: Providing newsletters, promotions, and retreat announcements (you may opt out or unsubscribe at any time).
Safety & Customization: Assessing health questionnaires to tailor safe movements and massage treatments during in-person or online classes.
App Optimization: Maintaining, troubleshooting, and improving the features and user experience of the Site and the Tadasana Yoga App.
Legal & Compliance: Complying with accounting, tax, and legal obligations under local (French/EU) law.

4. Legal Basis for Processing (GDPR)

If you are located within the European Economic Area (EEA), our legal grounds for processing your personal data include:

Consent: Where you have explicitly opted in (e.g., subscribing to newsletters, agreeing to push notifications, or submitting health disclosures).
Contractual Necessity: Processing required to fulfill an agreement with you (e.g., class bookings, app subscriptions, or retreat registration).
Legitimate Interests: Operations reasonably expected as part of running our business, improving our App, preventing fraud, and securing our services.
Legal Obligation: Compliance with statutory obligations under Applicable Law.

5. Sharing and Disclosure of Data

We do not sell, rent, or trade your personal information. We only share your data with trusted third-party service providers who assist us in operating our business:

App & Website Infrastructure: Web hosting platforms (e.g., Wix), app development platforms, and database providers.
Payment Processors: Apple Pay, Google Pay, Stripe, or PayPal for secure financial transactions.
Communication Tools: Email service providers (e.g., Mailchimp) for newsletters and transactional emails.
Legal Requirements: When required by law, court order, or governmental authority to protect our rights or the safety of our users.

6. International Data Transfers

Your information may be processed and stored on servers located outside the European Economic Area (EEA), such as in the United States or Canada, depending on where our service providers host their infrastructure. Whenever data is transferred outside the EEA, we ensure appropriate safeguards are applied (such as standard contractual clauses) to protect your rights.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law (e.g., tax or legal accounting reasons). When data is no longer needed, it is securely deleted or anonymized.

8. Your Data Rights (EEA & International Users)

Under applicable regulations (such as the GDPR), you have the following rights regarding your data:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request corrections to incomplete or inaccurate data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention obligations.
Right to Restrict or Object: Limit or object to our processing of your personal data.
Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format.
Right to Withdraw Consent: Revoke consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at hello@hannahduncalfyoga.com.

9. Cookies & Tracking

Our Site uses cookies to analyze website performance, improve user experience, and manage user sessions. You can control cookie settings directly in your web browser settings. Please note that disabling cookies may affect website performance or limit functionality.

10. Children’s Privacy

Our Site and the Tadasana Yoga App are not intended for individuals under the age of 16 without parental consent. We do not knowingly collect personal information from children without proper authorization.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Updates will be posted directly on this page with an updated "Last Updated" date.

12. Contact Us

If you have questions, feedback, or complaints regarding this Privacy Policy or our data practices, please contact us:

Email: hello@hannahduncalfyoga.com
Website: https://www.hannahduncalfyoga.com
Location: Tignes / Sainte Foy Tarentaise, Savoie, 73320, France