Last updated: 5 October 2026
The HY Yoga ("we", "us") respects your privacy. This policy explains what personal data we collect through thehyyoga.com and our classes, why we collect it, and your rights. It is written to meet India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Who we are
The HY Yoga is owned and operated by Prachi Malik (sole proprietor), Noida, Uttar Pradesh, India. She is the data fiduciary for your personal data. Contact: thehyyoga@gmail.com, +91 90841 63264.
2. What we collect
| Data | When | Why |
|---|---|---|
| Name, email, phone / WhatsApp number | Trial booking, enquiry, enrolment | To confirm bookings and contact you |
| Country and city | Booking and profile | To show the right plans, prices and timezone, and to check home-visit eligibility |
| Home address or society name | Home-visit bookings only | So our instructor can reach you |
| Your goals, and body and health details you choose to share (date of birth, gender, height, weight, health conditions, injuries, medicines), for you and for any family members you add with their permission | Booking form, your dashboard | To plan safe, personalised sessions. Only The HY Yoga team can see them, and you can edit or delete them any time |
| Anonymous visit statistics (page, the site you came from, campaign tags, device type and country) | When you browse the site | To understand which pages and campaigns help people. We use our own simple analytics: no cookies, no advertising trackers, and a random visit id that isn't linked to you |
| Who referred you, if you used a friend's link | When you book through a referral link | To thank the friend who referred you. They see only your first name and the status of the referral |
| Class feedback and questions | After classes | To improve your classes and answer your questions |
| A notification token for your device, if you turn on reminders | Your dashboard | To send class reminders to that device. Turn it off any time in your dashboard |
| Booking, attendance and plan history | While you are a student | To run your classes and renewals |
| Payment records (amount, date, status, payment ID) | When you pay | Accounting, refunds and support |
We do not see or store your card, UPI or bank details. Payments are handled entirely by Razorpay (India) and PayPal (international) under their own privacy policies.
3. How we use your data
- To book, run and remind you about your classes (email, browser notifications, WhatsApp, SMS or call)
- To process payments, renewals and refunds
- To answer your questions and support requests
- To improve our classes and website
- To meet legal and tax obligations
We use your data only for these purposes. We never sell your data or share it with advertisers.
4. Health information
Health details are optional and shared only with your consent. They are used only by your instructor to keep your practice safe. They are never shared with anyone else, and you can ask us to delete them at any time.
5. Service providers we use
We share only the data each service needs to do its job:
| Service | Purpose |
|---|---|
| Supabase | Secure database for bookings and student records (servers in Mumbai, India) |
| Netlify | Website hosting |
| Razorpay | Payments in India |
| PayPal | International payments |
| Google Meet | Live online classes |
| Email service | Booking confirmations and reminders |
| Messages you start with us |
Some of these providers may process data outside India. They are bound by their own privacy and security commitments.
6. Cookies and local storage
Our website uses a small number of essential cookies and browser storage:
- hy-country: remembers which country you are visiting from, so we show the right prices. Expires after 1 day.
- Your city choice: saved in your browser so you don't have to select it again.
We do not use advertising or tracking cookies.
7. Class recordings
We do not record live classes without telling you first. If a class is recorded, students can switch off their camera.
8. How long we keep data
- Student and booking records: for as long as you are a student, and 3 years after your last class
- Payment records: as long as Indian tax law requires (currently up to 8 years)
- Trial enquiries that don't become students: 12 months
9. Your rights
You can ask us to see a copy of the personal data we hold about you, correct or update it, delete it (unless we must keep it by law), stop sending you messages, or withdraw any consent you have given. Write to thehyyoga@gmail.com and we will respond within 30 days.
10. Security
We store data in a secure database with access limited to the owner and lead instructor. Our website runs on HTTPS. No system is perfectly secure, but we take reasonable steps to protect your information.
11. Children
Students under 18 may join only with a parent or guardian's consent, and the parent or guardian should make the booking.
12. Grievance officer
If you have a concern about your data, contact our grievance officer: Prachi Malik, The HY Yoga, Noida, Uttar Pradesh, India — thehyyoga@gmail.com — +91 90841 63264.
13. Changes to this policy
We may update this policy. The latest version will always be on this page with the date at the top.