Privacy Policy

World Yoga Alliance ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by World Yoga Alliance.

This Privacy Policy applies to our website, https://worldyogaalliance.org/, and its associated subdomains (collectively, our "Service") alongside our application, World Yoga Alliance. By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, they are strictly defined as:

• Cookie: small amount of data generated by a website and saved by your web browser. It is used to identify your browser, provide analytics, and remember information such as your language preference or login information.
• Company: when this policy mentions "Company," "we," "us," or "our," it refers to World Yoga Alliance, H.N. 376 Village No. 7 Phahonyothin Rd, Tambon Nang Lae, Amphoe Mueang, Chiang Rai 57100, Thailand.
• Country: where World Yoga Alliance or its owners/founders are based, in this case Thailand.
• Customer: the company, organization or person that signs up to use the World Yoga Alliance Service to manage relationships with consumers or service users.
• Device: any internet-connected device such as a phone, tablet, computer or any other device that can be used to visit World Yoga Alliance and use the services.
• IP address: every device connected to the Internet is assigned a number known as an Internet protocol (IP) address.
• Personnel: those individuals who are employed by World Yoga Alliance or are under contract to perform a service on behalf of one of the parties.
• Personal Data: any information that directly, indirectly, or in connection with other information allows for the identification or identifiability of a natural person.
• Service: the service provided by World Yoga Alliance as described in the relative terms and on this platform.
• Third-party service: advertisers, contest sponsors, promotional and marketing partners, and others who provide our content or whose products or services we think may interest you.
• Website: World Yoga Alliance's site, which can be accessed via this URL: https://worldyogaalliance.org/.
• You: a person or entity that is registered with World Yoga Alliance to use the Services.

We collect information from you when you visit our service, register, place an order, subscribe to our newsletter, respond to a survey or fill out a form.

• Name / Username
• Phone Numbers
• Email Addresses
• Mailing Addresses
• Job Titles
• Billing Addresses
• Password

Any of the information we collect from you may be used in one of the following ways:

• To personalize your experience.
• To improve our service based on the information and feedback we receive from you.
• To improve customer service and respond to customer service requests and support needs.
• To process transactions.
• To administer a contest, promotion, survey or other site feature.
• To send periodic emails.

We receive some information from third parties when you contact us. For example, when you submit your email address to show interest in becoming our customer, we receive information from a third party that provides automated fraud detection services. We also occasionally collect information made publicly available on social media websites. You can control how much information social media websites make public by changing your privacy settings.

We may share information that we collect, both personal and non-personal, with advertisers, contest sponsors, promotional and marketing partners, and others who provide our content or whose products or services we think may interest you. We may also share it with affiliated companies and business partners, and if we are involved in a merger, asset sale or other business reorganization, we may share or transfer your information to successors-in-interest.

We may engage trusted third-party service providers to perform functions and provide services such as hosting and maintaining servers, database storage and management, email management, marketing, credit card processing, customer service and fulfilling orders. We may share personal information, and possibly some non-personal information, with these third parties to enable them to perform these services.

We may share portions of log file data, including IP addresses, for analytics purposes with web analytics partners, application developers and ad networks. They may aggregate information about our advertising and what you see on the service and provide auditing, research and reporting.

We may disclose personal and non-personal information to government or law enforcement officials or private parties as we believe necessary to respond to claims or legal process, protect rights and interests, protect the safety of the public or any person, prevent illegal activity, or comply with applicable court orders, laws, rules and regulations.

We will collect personal information that you submit to us. We may also receive personal information about you from third parties as described above.

By submitting your email address on our service, you agree to receive emails from us. You can cancel your participation in any email list at any time by clicking the opt-out link or unsubscribe option included in the respective email. We only send emails to people who have authorized us to contact them. By submitting your email address, you also agree to allow us to use it for customer audience targeting on sites such as Facebook where we display custom advertising to people who opted in to receive communications. Email addresses submitted only through the order processing page are used for information and updates pertaining to your order. If you would like to unsubscribe from future emails, detailed instructions are included at the bottom of each email.

We are incorporated in Thailand. Information collected via our website, direct interactions with you, or help services may be transferred to offices, personnel or third parties located throughout the world, and may be viewed and hosted anywhere in the world, including countries that may not have laws regulating the use and transfer of such data. To the fullest extent allowed by applicable law, by using the above you voluntarily consent to the trans-border transfer and hosting of such information.

We take precautions to protect the security of your information. We have physical, electronic, and managerial procedures to help safeguard, prevent unauthorized access, maintain data security, and correctly use your information. However, neither people nor security systems are foolproof, including encryption systems. While we use reasonable efforts to protect your personal information, we cannot guarantee its absolute security.

The rights you have to request updates or corrections depend on your relationship with us. You can contact us to update or correct personally identifiable information, change communication preferences, or delete personally identifiable information maintained about you by cancelling your account. To protect your privacy and security, we may take reasonable steps to verify your identity before granting profile access or making corrections. You are responsible for maintaining the secrecy of your password and account information. It is not technologically possible to remove every record from our systems, and backup copies may exist in a non-erasable form. If you are an end user and wish to update, delete, or receive information we have about you, contact the organization of which you are a customer.

If you are one of our workers or applicants, we collect information you voluntarily provide. We use it for Human Resources purposes to administer benefits and screen applicants. You may contact us to update or correct information, change communication preferences, or receive a record of information we have relating to you.

We reserve the right to transfer information to a third party in the event of a sale, merger or other transfer of all or substantially all assets, or if we discontinue our business or enter bankruptcy, provided that the third party agrees to adhere to this Privacy Policy.

We may disclose information, including personal information, to our Corporate Affiliates. Corporate Affiliate means any person or entity which directly or indirectly controls, is controlled by or is under common control with us. Information provided to our Corporate Affiliates will be treated in accordance with this Privacy Policy.

We keep your information only so long as we need it to provide service and fulfill the purposes described in this policy. When we no longer need to use your information and have no legal or regulatory obligation to keep it, we will remove it from our systems or depersonalize it.

We implement security measures when you place an order or enter, submit, or access personal information. We offer a secure server. Supplied sensitive or credit information is transmitted via Secure Socket Layer technology and encrypted into our payment gateway providers' database, accessible only by authorized users with special access rights. After a transaction, private financial information is never kept on file. We cannot ensure absolute security or guarantee that information on the Service may not be accessed, disclosed, altered, or destroyed by a breach of safeguards.

The laws of Thailand, excluding its conflicts of law rules, shall govern this Agreement and your use of our service. Your use of our service may also be subject to other local, state, national, or international laws.

By using our service, registering an account, or making a purchase, you consent to this Privacy Policy.

This Privacy Policy applies only to the Services. The Services may contain links to other websites not operated or controlled by us. We are not responsible for content, accuracy or opinions expressed on those websites. When you use a link to go from the Services to another website, our Privacy Policy is no longer in effect. Your browsing and interaction on another website is subject to that website's own rules and policies.

We use "Cookies" to identify areas of our website that you have visited. A Cookie is a small piece of data stored on your computer or mobile device by your web browser. We use Cookies to personalize Content. Most web browsers can be set to disable cookies, but if you disable them, you may not be able to access functionality on our website correctly. We never place Personally Identifiable Information in Cookies.

We use remarketing services. In digital marketing, remarketing or retargeting is the practice of serving ads across the internet to people who have already visited your website. It allows your company to seem like it is following people around the internet by serving ads on the websites and platforms they use most.

In respect to any credit card or other payment processing details you have provided us, we commit that this confidential information will be stored in the most secure manner possible.

We collect information from kids under the age of 13 just to better our services. If you are a parent or guardian and are aware that your child has provided us with Personal Data without your permission, please contact us. If we become aware that we have collected Personal Data from anyone under 13 without verification of parental consent, we take steps to remove that information from our servers.

If we decide to change our privacy policy, we will post those changes on this page and/or update the Privacy Policy modification date below.

We may display, include or make available third-party content, including data, information, applications and other products or services, or provide links to third-party websites or services.

You acknowledge and agree that we shall not be responsible for any Third-Party Services, including their accuracy, completeness, timeliness, validity, copyright compliance, legality, decency or quality.

Third-Party Services and links thereto are provided solely as a convenience and you access and use them entirely at your own risk and subject to third parties' terms and conditions.

Google Maps APIs

Google Maps API can be used to create custom maps, searchable maps, check-in functions, display live data synchronized with location, plan routes or create a mashup. Google Maps API may collect information from you and your device for security purposes, held in accordance with its Privacy Policy.

Cookies

We use Cookies to enhance performance and functionality. Without these cookies, certain functionality such as videos may become unavailable, or you may need to enter login details each time you visit because we could not remember that you had logged in.

Local Storage

Local Storage, sometimes known as DOM storage, provides web apps with methods and protocols for storing client-side data. It supports persistent data storage, similar to cookies but with greater capacity and no information stored in the HTTP request header.

Sessions

World Yoga Alliance uses Sessions to identify areas of our website that you have visited. A Session is a small piece of data stored on your computer or mobile device by your web browser.

We may be collecting and using information from you if you are from the European Economic Area (EEA). This section explains why this data is collected and how we protect it from being replicated or used in the wrong way.

GDPR is an EU-wide privacy and data protection law that regulates how EU residents' data is protected by companies and enhances the control EU residents have over their personal data.

Any data that relates to an identifiable or identified individual is personal data. GDPR covers a broad spectrum of information that could identify a person, alone or combined with other information. Personal data extends beyond a person's name or email address and can include financial information, political opinions, genetic data, biometric data, IP addresses, physical address, sexual orientation, and ethnicity.

• Personal data collected must be processed fairly, legally and transparently and used in a way a person would reasonably expect.
• Personal data should only be collected to fulfill a specific purpose and used for that purpose.
• Personal data should be held no longer than necessary to fulfill its purpose.
• People covered by GDPR have the right to access their personal data and request that it be updated, deleted, restricted or moved.

GDPR adds requirements regarding how companies protect personal data and raises the stakes for compliance by increasing enforcement and imposing greater fines for breaches. We believe data privacy is important and maintain security and privacy practices.

We are committed to helping our customers meet the data subject rights requirements of GDPR. World Yoga Alliance processes or stores personal data in vetted, DPA-compliant vendors. We store conversation and personal data for up to 6 years unless your account is deleted, in which case we dispose of data in accordance with our Terms of Service and Privacy Policy, but will not hold it longer than 60 days.

If you work with EU customers, you need to provide them the ability to access, update, retrieve and remove personal data. We are set up as self-service and have always given you access to your data and your customers' data. Our customer support team can answer questions about working with the API.

The California Consumer Privacy Act (CCPA) requires us to disclose categories of Personal Information we collect and how we use it, sources from whom we collect it, and third parties with whom we share it, as explained above.

You may exercise the following rights:

• Right to Know and Access: submit a verifiable request for categories of Personal Information, purposes, sources and specific pieces collected about you.
• Right to Equal Service: we will not discriminate against you if you exercise privacy rights.
• Right to Delete: submit a verifiable request to close your account and delete Personal Information collected about you.
• Request that a business that sells a consumer's personal data not sell that data.

If you make a request, we have one month to respond. We do not sell the Personal Information of our users.

CaIOPPA requires us to disclose categories of Personal Information we collect and how we use it, the sources from whom we collect it, and the third parties with whom we share it.

CaIOPPA users have the following rights:

• Right to Know and Access: submit a verifiable request for categories, purposes, sources and specific pieces of Personal Information collected about you.
• Right to Equal Service: we will not discriminate against you if you exercise privacy rights.
• Right to Delete: submit a verifiable request to close your account and delete Personal Information collected about you.
• Right to request that a business that sells a consumer's personal data not sell that data.

If you make a request, we have one month to respond. We do not sell the Personal Information of our users.

Don't hesitate to contact us if you have any questions.