1. Introduction

Suswasthya Yoga & Wellness Center (“we”, “us”, “our”) offers yoga, meditation, pranayama and mudra classes, singing bowl meditation, holistic therapy, wellness counselling, natural diet guidance, special education support and physical therapy. We deliver these online, at home, in group and community settings, at corporate venues and at our studios in Kolkata, India.

This Privacy Policy explains how we collect, use, share, store and protect your personal data when you visit suswasthyayogikwellness.com (the “Website”), contact us, or use our services. By using the Website or sharing your data with us, you acknowledge this Policy. Where the law requires consent, we will ask for it separately.

2. Who We Are

Our registered office is Flat-C1, 4th Floor, 6 Satyen Park, Joka, Kolkata 700104, India. We operate studios at Thakurpukur (Joka) and AV Road (Jadavpur) in Kolkata. For privacy purposes, we act as the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), and as the “controller” under the GDPR and UK GDPR, where applicable.

3. Information We Collect

The data we collect depends on how you interact with us. It may include:

Identity and contact details: your name, phone number, email address, postal or home address (for at-home sessions), and preferred communication channel.

Enquiry and communication data: the content of messages you send through the Website, by phone, email, WhatsApp or social media, including call and message history where applicable.

Booking and membership data: the classes, programmes, events, retreats or camps you enquire about or join, your schedule preferences, attendance and membership status.

Wellness and health-related information: details you choose to share so we can tailor sessions safely, such as physical conditions, injuries, pain, stress or mental well-being concerns, dietary habits or therapy needs. This may be sensitive. We ask only for what is reasonably needed and encourage you to share only what you are comfortable with.

Payment information: records of fees paid and transaction references. Where payments are handled by a bank, UPI service or other payment provider, that provider processes your payment details under its own privacy terms. We do not intend to store full card or banking credentials.

Technical and usage data: IP address, device and browser type, pages visited, referring pages and approximate location, collected through cookies and similar technologies where applicable.

Photos, video and testimonials: reviews or feedback you submit, and images or recordings of classes or events, only with your permission where required.

Career applications: if you apply through our Career page, the details and documents you submit.

4. How We Collect Your Information

We collect data directly from you (forms, calls, messages, in-person registration), automatically through the Website, and, where applicable, from third-party platforms you use to contact us, such as WhatsApp, Facebook, Instagram or YouTube. If you share another person’s data with us, such as a family member’s, you confirm you have the authority to do so.

5. How We Use Your Information

We use personal data to:

• respond to enquiries and provide information about our services;
• register you, schedule sessions and manage memberships and attendance;
• deliver yoga, meditation, counselling, therapy and related services safely, and adapt them to your needs;
• send reminders, schedule changes and service updates;
• process payments and maintain accounting records;
• publish events, blog content and promotional material, with your consent where required;
• improve the Website, our services and user experience;
• protect against misuse, fraud and security risks; and
• comply with legal, tax and regulatory obligations.

We do not sell your personal data.

6. Legal Bases for Processing

India (DPDP Act 2023): we process personal data based on your consent, or for other “legitimate uses” the Act permits, such as complying with law or responding to a request you have made. You may withdraw consent at any time.

EEA and UK (GDPR/UK GDPR), where applicable: we rely on one or more of the following:

• Consent, for example for marketing messages, non-essential cookies and health-related information.
• Contract, where processing is needed to provide services you have requested.
• Legitimate interests, such as running and securing our services and improving them, balanced against your rights.
• Legal obligation, such as tax and accounting duties.

Where we process health-related information, we do so with your explicit consent where required by law.

7. Wellness and Health-Related Information

Yoga, counselling and therapy services are personal, and we treat wellness information with particular care. We collect it only to provide safe, appropriate guidance, limit access to the personnel who need it, and do not use it for advertising. Providing it is voluntary, but without it we may be unable to personalise or safely deliver certain services.

Our Website and blog offer general wellness information only. They do not replace professional medical advice, diagnosis or treatment. Please consult a qualified healthcare provider about any medical concern.

8. Cookies and Analytics

Our Website is built on WordPress and may use cookies and similar technologies to make pages work properly, remember preferences, understand usage and improve performance. Cookies may be:

• Essential, needed for the Website to function;
• Functional, to remember your choices; and
• Analytics or marketing, only where applicable and, where required by law, with your consent.

You can manage or delete cookies through your browser settings. Disabling some cookies may affect how the Website works. We may update this section if we introduce specific analytics or advertising tools.

9. Marketing Communications

With your consent, where required, we may contact you by phone, SMS, WhatsApp or email about classes, events, retreats, offers and wellness content. You may opt out at any time by following the unsubscribe instructions in a message or by contacting us. We will still send essential service messages, such as booking or schedule updates.

10. Sharing Your Information

We share personal data only where necessary and with appropriate safeguards. Recipients may include:

• Our instructors, therapists, counsellors and administrative staff, who access data only as needed for their role;
• Service providers, such as website hosting and maintenance providers, communication platforms, video-conferencing tools for online classes, and payment or banking providers, where applicable;
• Social media and messaging platforms you choose to use to contact us;
• Professional advisers, such as accountants or legal advisers; and
• Authorities, where required by law, court order or to protect rights, safety or property.

We do not allow service providers to use your data for their own unrelated purposes. If our business is reorganised or transferred, your data may be transferred to the successor, who must honour this Policy.

11. Third-Party Services and Links

Our Website links to or embeds third-party services, including Facebook, Instagram, YouTube, WhatsApp and Google Maps. These services have their own privacy practices and may collect data directly from you, including through cookies. We do not control and are not responsible for their content or policies, and we encourage you to review them before use.

12. International Transfers

We are based in India, and your data will generally be processed there. Some of our service providers, platforms or online-class tools may process data in other countries. Where required, we take reasonable steps to ensure appropriate protection for international transfers, such as contractual safeguards, in line with the DPDP Act, GDPR and UK GDPR where applicable. Transfers under the DPDP Act are subject to any restrictions the Government of India may notify.

13. Data Retention

We keep personal data only as long as needed for the purposes described in this Policy, to meet legal, tax and accounting requirements, to resolve disputes, and to enforce our agreements. When data is no longer needed, we delete or anonymise it, subject to legal retention duties. Enquiry data, membership records and wellness information may be kept for different periods depending on their purpose, and you may request earlier deletion where applicable.

14. Data Security

We use reasonable technical and organisational security measures to protect personal data against unauthorised access, loss, misuse or alteration. These include restricted access to sensitive information and the use of reputable service providers. However, no online system, website or method of electronic transmission is completely secure, and we cannot guarantee absolute security. Please take care when sharing information online and keep your own devices and accounts secure.

If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authorities where required by law.

15. Children’s Privacy

Our services are primarily intended for adults. We may provide services such as special education support or family yoga for children, but only with the verifiable consent of a parent or lawful guardian. Under the DPDP Act, a child is a person under 18. Under the GDPR, the age at which a child can consent to online services varies by country, and the UK GDPR sets it at 13. We do not knowingly collect children’s data through the Website without appropriate consent, and we do not track or target children with advertising. If you believe a child has provided data to us without consent, please contact us and we will take steps to delete it.

16. Your Privacy Rights

Depending on where you live and the law that applies, you may have some or all of the following rights:

• Access: to know what personal data we hold about you and how we use it.
• Correction: to have inaccurate or incomplete data corrected or updated.
• Deletion: to request erasure of your data, subject to legal retention requirements.
• Withdrawal of consent: to withdraw consent at any time, without affecting processing already carried out lawfully.
• Objection and restriction: to object to, or ask us to limit, certain processing, including direct marketing.
• Portability: to receive your data in a commonly used format, where applicable.
• Grievance redressal and nomination: under the DPDP Act, to have your grievances addressed and, where applicable, to nominate another person to exercise your rights in the event of death or incapacity.
• Complaint: to contact us first about any concern, and to complain to a supervisory authority where applicable, such as the Data Protection Board of India, a data protection authority in the EEA, or the UK Information Commissioner’s Office.

California residents (CCPA/CPRA), where applicable: you may have the right to know what personal information we collect, use and disclose; to request deletion or correction; to opt out of the sale or sharing of personal information; and to limit the use of sensitive personal information. We do not sell personal information, and we will not discriminate against you for exercising your rights.

To exercise any right, contact us using the details below. We may need to verify your identity before acting and will respond within the timeframe required by applicable law. Some rights are subject to legal exceptions.

17. Changes to This Policy

We may update this Policy from time to time to reflect changes in our services or legal requirements. The updated version will be posted on this page with a revised “Last Updated” date. Where required, we will notify you of material changes. Please review this page periodically.

18. Contact Us

If you have questions about this Privacy Policy, or wish to exercise your privacy rights or raise a concern, please contact:

Suswasthya Yoga & Wellness Center
Registered Office: Flat-C1, 4th Floor, 6 Satyen Park, Joka, Kolkata 700104, India
Phone: +91 9883382672 / 7980718380
Email: suswasthya.yoga.wellness@gmail.com
Website: https://suswasthyayogikwellness.com/

We aim to respond to all privacy enquiries promptly and within the time required by applicable law.