top of page

Privacy Policy

Privacy Policy

Last updated: October 5, 2026

Bodystory Lifestyle LLC

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit [www.bodystoryyoga.com], purchase a product, book or attend a class or session, complete an intake form, join our mailing list, contact us, or otherwise interact with us online or offline.

​

For purposes of applicable data-protection law, the controller of your personal information is:

Bodystory Lifestyle LLC


Trading as: Body Story Yoga 
Email: info@bodystoryyoga.com

​

Nothing in this Privacy Policy limits rights you may have under applicable privacy or consumer-protection law.

1. Scope

This Privacy Policy applies to personal information we process in connection with:

  • Our websites, online store, booking and scheduling pages

  • Online and in-person yoga classes, private sessions, wellness sessions, and yoga-therapy-related services

  • Digital products, journals, guides, videos, programs, and other digital content

  • Customer support, email communications, newsletters, and social-media communications

  • Forms, questionnaires, wellness or health-intake forms, and assessments

  • Payments, purchases, returns, refunds, subscriptions, and bookings

This policy does not apply to third-party websites, payment processors, social-media platforms, booking platforms, or other services that have their own privacy policies. We encourage you to read their policies before submitting personal information to them.

2. Personal Information We Collect

We collect personal information directly from you, automatically through your use of our website, and from service providers that help us operate our business.

​

Information you provide: 

Depending on how you interact with Body Story, we may collect:

  • Identity and contact information, including your name, email address, telephone number, mailing address, and social-media handle where you contact us through social media

  • Account, booking, and transaction information, including products or services purchased, class bookings, appointment details, order history, payment status, refund or return requests, and communications with us

  • Communications and support information, including messages, emails, feedback, survey responses, and customer-service requests

  • Preferences and marketing information, including your newsletter preferences, consent choices, and interests you choose to share

  • Wellness and intake information, including information you choose to provide about your health history, injuries, mobility, physical condition, wellness goals, practice history, contraindications, or other relevant information necessary to tailor or safely deliver a requested session or program

  • Other information you choose to provide voluntarily

Please do not provide medical information or other sensitive personal information unless we specifically ask for it in connection with a service you have requested.

​

Payment information:

Payments are processed by third-party payment providers, such as [list the payment providers you actually use, for example Stripe and PayPal]. We do not intentionally store full payment-card numbers, card security codes, or comparable payment credentials. We may receive limited payment-related information, such as payment status, transaction ID, billing country, or the last four digits of a payment card, from our payment providers.

​

Information collected automatically: 

When you visit our website, we or our service providers may collect:

  • Internet protocol address and approximate location derived from your IP address

  • Device, browser, operating system, and language settings

  • Pages viewed, links selected, referring website, date and time of access, and interactions with our website

  • Cookie identifiers and similar online identifiers

  • Website performance, security, and diagnostic information

For more detail, see the Cookies and Similar Technologies section below.

​

3. How We Use Personal Information
​

We use personal information for the following purposes:

​

PurposeCategories of informationMain legal basis where GDPR/UK GDPR applies

Provide, manage, and deliver a purchased class, session, booking, product, or programContact, booking, transaction, communications, and relevant intake informationPerformance of a contract; steps taken at your request before entering a contract

Process payments, prevent fraud, manage returns, and maintain financial recordsContact, transaction, payment-status, and order informationPerformance of a contract; legal obligation; legitimate interests in fraud prevention and business administration

Respond to enquiries and provide customer supportContact and communications informationLegitimate interests; contract where relevant

Personalize or safely deliver requested wellness servicesRelevant wellness and intake informationYour explicit consent for health or other special-category data; contract where applicable

Send newsletters, promotions, and marketing communicationsContact information, marketing preferences, and engagement dataYour consent where required; otherwise legitimate interests where permitted by law

Operate, secure, troubleshoot, and improve our website and servicesTechnical, usage, and cookie informationLegitimate interests; consent for non-essential cookies where required

Meet legal, regulatory, tax, accounting, insurance, or dispute-resolution obligationsInformation relevant to the obligationLegal obligation; establishment, exercise, or defence of legal claims

Protect Body Story, users, and the public from fraud, misuse, or security threatsRelevant contact, technical, booking, and transaction informationLegitimate interests; legal obligation where applicable

Where we rely on legitimate interests, we balance those interests against your rights and reasonable expectations. You may object to processing based on legitimate interests where applicable.

We do not use your personal information for solely automated decisions that produce legal or similarly significant effects on you.

​

4. Wellness and Health Information
​

Information about your health, injury history, physical condition, mobility, wellness goals, or similar matters may be treated as sensitive personal information or special-category personal data under applicable law.

We collect this information only when you choose to provide it or when it is reasonably necessary for a service you request. We use it only to:

  • Review relevant information before a requested class, private session, wellness session, or yoga-therapy-related service

  • Tailor the requested service to the information you provide

  • Identify potential practice limitations or contraindications you disclose

  • Communicate with you about the requested service

  • Maintain records where reasonably necessary for service administration, safety, or legal claims

Where GDPR or UK GDPR applies, we process health or special-category information only with your explicit consent, unless another lawful condition clearly applies. You may withdraw consent at any time by contacting us at info@bodystoryyoga.com. Withdrawal does not affect processing that took place before consent was withdrawn, and may mean that we cannot provide or continue a service that requires the information.

Body Story provides wellness education, movement, yoga, and related services. Unless expressly stated otherwise in writing, our services are not a substitute for medical advice, diagnosis, treatment, or emergency care.

​

5. When We Share Information
​

We do not sell personal information for money.

We may disclose personal information to the following categories of recipients, only as necessary for the purposes described in this policy:

  • Payment processors, to process transactions and manage payment-related issues

  • Website, ecommerce, hosting, storage, security, and technology providers

  • Booking, scheduling, video-conferencing, and customer-support platforms

  • Email, newsletter, and marketing-platform providers, where you have subscribed or where otherwise permitted by law

  • Analytics and cookie providers, subject to your applicable consent choices

  • Professional advisers, insurers, banks, auditors, and legal advisers

  • Government, regulatory, law-enforcement, or other authorities where required or permitted by law

  • A buyer, successor, or other party involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, subject to applicable law

We require service providers to handle personal information only on our instructions and to protect it appropriately.

We do not knowingly sell or share personal information for cross-context behavioural advertising. If this changes, we will update this policy and provide any opt-out mechanism required by law.

​

6. International Transfers
​

Body Story operates from DE, USA and may use service providers or infrastructure located in other countries. Your personal information may therefore be transferred to, stored in, or accessed from countries outside your country of residence.

Where required, we use appropriate safeguards for international transfers, such as:

  • An adequacy decision recognized by applicable law

  • Standard Contractual Clauses or the UK International Data Transfer Addendum

  • Other valid transfer mechanisms recognized under applicable data-protection law

You may contact us at info@bodystoryyoga.com for more information about applicable transfer safeguards.

​

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, meet legal obligations, resolve disputes, enforce agreements, and protect our rights.

Our general retention approach is:

  • Booking, order, transaction, and customer-service records: for the duration of our relationship with you, plus [insert retention period based on your tax/accounting rules—commonly 5–7 years]

  • Wellness and health-intake information: for the duration necessary to provide the requested service, plus [insert defined safety/claims retention period], unless a longer period is required or permitted by law

  • Marketing-consent records: while you remain subscribed and for a reasonable period afterward to maintain a record of your consent or objection

  • Website and analytics information: according to the retention settings of the relevant tool and the period disclosed in our cookie settings

  • Communications and enquiry records: for as long as needed to respond to and manage the matter, generally no longer than [insert period], unless needed for legal claims or another lawful purpose

We may retain information longer where required by law, necessary to establish, exercise, or defend legal claims, or reasonably necessary to protect the security and integrity of our services. When information is no longer needed, we will delete it, anonymize it, or securely isolate it in accordance with applicable law.

​

8. Your Privacy Rights
​

Depending on where you live and applicable law, you may have rights to:

  • Request access to personal information we hold about you

  • Request correction of inaccurate or incomplete information

  • Request deletion of personal information

  • Request restriction of processing

  • Object to processing based on legitimate interests or direct marketing

  • Request portability of certain information

  • Withdraw consent at any time, where processing is based on consent

  • Object to or opt out of certain targeted advertising, sale, sharing, or profiling activities where applicable

  • Lodge a complaint with a relevant data-protection authority

To exercise a privacy right, email info@bodystoryyoga.com with the subject line “Privacy Request.” Please state your name, country or state of residence, the right you want to exercise, and enough information for us to verify your identity and locate the relevant data.

We may need to request additional information to verify your identity before completing a request. We will not discriminate against you for exercising a privacy right.

If you are in the European Economic Area or United Kingdom, you may also complain to the data-protection authority in your habitual residence, workplace, or the place of an alleged infringement. In the UK, this is the Information Commissioner’s Office.

​

9. Additional Information for Taiwan
​

If Taiwan’s Personal Data Protection Act applies, Bodystory Lifestyle LLC provides the following notice concerning personal-data collection, processing, and use.

Required notice itemBody Story’s information

Data collector Bodystory Lifestyle LLC, trading as Body Story Yoga. 

Collection purposesService booking and delivery; customer management; ecommerce and payment administration; communications; newsletter and marketing where permitted or consented to; website operation and improvement; security; legal compliance; dispute resolution

Categories of personal dataIdentity and contact data; booking and transaction information; communications; technical and usage data; preferences; and, where voluntarily provided for a requested service, wellness or health-intake information

Period of useFor the duration necessary for the stated purposes and as described in Section 7, or as otherwise required by law

Territory of useTaiwan and other countries where Body Story or its service providers process data, subject to applicable safeguards

RecipientsBody Story personnel and contracted service providers, including payment, hosting, booking, communications, analytics, and professional-service providers, as necessary for the stated purposes

Method of useElectronic, paper, telephone, online, and other lawful means necessary to provide and administer our services

Your rightsYou may request to inquire about, review, copy, supplement, correct, stop collection, processing or use of, or delete your personal information, subject to applicable law

Consequence of refusalIf you do not provide information that is necessary for a booking, payment, requested service, or legal requirement, we may be unable to provide or complete that service

You may exercise these rights by contacting info@bodystoryyoga.com.

​

10. California Privacy Notice
​

This section applies only to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Body Story.

During the preceding 12 months, we may have collected the following categories of personal information:

  • Identifiers, such as name, email address, telephone number, IP address, and account or order identifiers

  • Customer and commercial information, such as booking, purchase, payment-status, and customer-support records

  • Internet or electronic network activity information, such as website interactions, browser information, cookie identifiers, and device information

  • Approximate geolocation information derived from IP address

  • Sensitive personal information, where voluntarily provided, such as health or wellness information relevant to a requested session or program

We collect this information from you, automatically from your device or browser, and from service providers involved in payments, bookings, website operation, analytics, communications, or customer support.

We use and disclose these categories for the business and commercial purposes described in this Privacy Policy, including providing services, processing transactions, communicating with customers, securing our services, complying with law, and improving our business.

We disclose personal information to service providers and other recipients described in Section 5. We do not knowingly sell personal information. We do not knowingly share personal information for cross-context behavioural advertising.

Subject to applicable exceptions and verification requirements, California residents may request to know, correct, or delete personal information, and may limit certain uses or disclosures of sensitive personal information where applicable. To submit a request, email info@bodystoryyoga.com with the subject line “California Privacy Request.”

If we ever sell or share personal information as defined under California law, we will provide required notice and a functional opt-out mechanism.

​

11. Cookies and Similar Technologies
​

We use cookies, pixels, local storage, and similar technologies to operate and secure our website, remember preferences, understand website use, and, where applicable, measure marketing performance.

Strictly necessary cookies

Some cookies are necessary for core website functions, security, shopping-cart features, payment processing, or remembering privacy choices. These cookies cannot always be disabled through our cookie banner because they are necessary to provide the service you request.

​

Analytics and marketing cookies

We use non-essential analytics or marketing technologies only where permitted by applicable law and, in the EU and UK, only after obtaining consent where consent is required.

When you first visit our website, you can manage non-essential cookies through our cookie banner or cookie settings. You may accept, reject, or change your preferences at any time through [insert “Cookie Settings” link or instructions].

You can also manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

For current details of the cookies and similar technologies used on our website—including provider, purpose, duration, and category.

​

12. Marketing Communications
​

Where required by law, we will send marketing emails only with your consent. You can unsubscribe at any time by using the unsubscribe link in a marketing email or contacting info@bodystoryyoga.com.

Even if you opt out of marketing, we may still send non-promotional messages related to your purchases, appointments, account, payments, security, or legal rights.

​

13. Children’s Privacy
​

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without legally required consent.

If you believe that a child has provided us with personal information without appropriate consent, contact us at info@bodystoryyoga.com. We will take appropriate steps to investigate and delete the information where required.

If you offer services to minors, obtain parent or legal-guardian authorization and implement age-appropriate privacy notices and consent processes before collecting any personal or health-related information.

​

14. Security
​

We use reasonable technical, administrative, and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption in transit, vendor due diligence, data-minimization practices, and secure account-management procedures.

No security measure is completely secure. You should use reasonable care when submitting information online and notify us promptly if you suspect unauthorized access to your information or account.

​

15. Changes to This Policy
​

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or privacy practices. We will post the updated version on our website and revise the “Last updated” date.

Where required by law, we will provide additional notice or obtain consent before making material changes that affect how we process personal information. Your continued use of our services after an updated policy becomes effective does not replace consent where consent is legally required.

​

16. Contact Us

For questions, concerns, or privacy requests, contact:

Bodystory Lifestyle LLC
Trading as: Body Story Yoga 
Email: info@bodystoryyoga.com
Website: www.bodystoryyoga.com
 

​
bottom of page