Privacy Policy

Shanti Yoga Mobile App


This Privacy Notice sets out how we, SHANTI YOGA SCHOOL & HOLISTIC CENTER, a registered business name belonging to Irene Michaelides (ID Card. No. 638182), responsible for the operation and management of a Yoga Studio situated at 1B Lordou Vyronos, 1046 Nicosia, Cyprus (the "Yoga Studio," "we," "us," or "our"), collect and process personal data of customers/ members of the Yoga Studio who use the mobile application “SHANTI YOGA APP” for the purpose of booking their weekly Yoga classes (“you”/ “your”).


This Privacy Notice includes all the information the Yoga Studio must provide to you as “data subject” under the GDPR and applicable law, in relation to the collection, use and disclosure of your personal data by the Yoga Studio for the purpose of using the “SHANTI YOGA APP” by explaining:


  1. Who we are

  2. What personal data we collect about you

  3. How we Collect your personal data

  4. Purposes of processing personal data

  5. How we store your personal data

  6. Who can access your personal data

  7. Retention periods

  8. Transfers to third countries

  9. Your rights

  10. Cookies

  11. Changes to Privacy Notice


This Privacy Notice applies only where and to the extent that the Yoga Studio may be considered as “controller” in relation to the processing of your personal data under the provisions of Regulation (EU) 2016/679 (“GDPR”) and applicable law, including Law 125(I)/2018 and any relevant guidelines issued by the Office of the Commissioner for Personal Data Protection in Cyprus.


Please note that the Yoga Studio has no control over and is not responsible for any third-party websites, plug-ins or applications which may be accessible through links from our application. Clicking on those links may allow third parties to collect or share data about you. Third party websites are responsible for providing their own privacy policies and notices which you will need to consider before you submit any personal data to such third-party websites.


By using our SHANTI YOGA APP and providing your personal data to us, you agree to the processing of your personal data in accordance with this Privacy Notice.


  1. Who we are


SHANTI YOGA SCHOOL & HOLISTIC CENTER is a Yoga studio offering yoga classes on a subscription basis. We are based in Nicosia and our offices are situated at 1B Lordou Vyronos, 1046 Nicosia, Cyprus.

We recognise and value the trust that individuals place in us when they provide us with their personal data, and we are committed to ensuring the confidentiality and protection of any personal data entrusted to us. All our partners, associates and employees are provided with the appropriate training for handling personal data securely and in accordance with the law. We also ensure that all business partners and external service providers we work with comply with their respective legal obligations and apply the same high standards when it comes to the protection of personal data and privacy.

  1. What personal data we collect about you


We collect the following personal data that is necessary for the purpose of allowing you to create a user’s account and book your classes through our SHANTI YOGA APP. These include:


  1. Basic personal details such as your full name,


  1. Contact information such as email address, etc,


  1. Profile picture (if you sign in using social media)


  1. Payment information, such as bank account and/ or credit card number, etc


  1. Other information relevant to the use of your device, such as crash reports


  1. Basic analytics data using Google Analytics



We will process all your personal information lawfully, fairly and in a transparent manner at all times.


We do not take any decisions concerning you based solely on automated decision-making processes or profiling.

  1. How we collect your personal data


We collect or receive your personal data in the following ways:


  1. Directly from you, when registering as a user of the SHANTI YOGA APP.

  1. By monitoring use of, or interactions with, the SHANTI YOGA APP,

  1. How we use your personal data


We collect and process your personal data only for the purposes that we are permitted to do so by applicable law and in particular (depending on our relationship with you):


  1. To comply with our contractual obligations towards you:


To allow you to book and pay for your weekly classes through the SHANTI YOGA APP


  1. To comply with legal obligations to which we are subject:


To monitor the number of participants per class to comply with any applicable legal limits or restrictions,


  1. Pursuing a legitimate interest:


Generally, to receive payment for our services, to ensure the security and health of our staff and premises, to monitor the App to ensure a smooth and seamless operation and that any software issues will be resolved, etc.


  1. Any other purpose specified by you and/ or with your consent:


Where your prior consent is required under applicable law, you will be presented with a relevant consent form in relation to any such use and you may withdraw your consent at any time.


You do not have an obligation to provide us with your personal data. If, however, you do not do so we may not be able to provide you with our relevant services.

  1. How we protect your personal data


We use third parties who provide Information Technology services to us which are relevant to the electronic storage of and access of your data to the extent this is necessary for the purpose of allowing us to provide our relevant services to you and generally to ensure that our legitimate interests are duly protected.


While we recognise that the storage and transmission of information, especially over the internet, cannot be guaranteed to be secure from intrusion by third parties, for the storage and security of your personal data the Company takes all the necessary physical, technical and organisational measures to protect personal data from unauthorised access, use, disclosure, alteration or destruction and to ensure that the processing is carried out in accordance with the law and the GDPR (access control, antivirus, firewalls, encryption, etc).


Information stored on our service providers’ servers is only accessed and used subject to strict security policies and standards agreed with them, to ensure the confidentiality of personal data.

  1. Who can access your personal data


Within the Yoga Studio, your personal data is accessible only to those who need to access it for the purposes specified in paragraph 4 above, with a duty of confidentiality.

Outside the Yoga Studio, recipients of your personal data may include subcontractors, agents and third-party service providers, including business partners and organisations who provide professional services to us such as:

  1. Payment services providers (i.e. Stripe)

  2. Information Technology and related service providers who provide technical services such as software development, installation and maintenance, cloud storage services, file backup, recovery and continuity, etc


For the purposes of compliance with our legal or regulatory requirements external recipients of your personal data may also include regulatory authorities or law enforcement agencies in connection with enquiries, proceedings, or investigations anywhere in the world.


We choose our associates and external service providers very carefully, after carrying out all necessary checks and obtaining sufficient guarantees to implement appropriate technical and organisational measures in such a manner that the processing will meet the requirements of this GDPR and applicable law.


To the extent any other third parties are considered “controllers” under the GDPR any processing of your personal data carried out by them is not under our control and we are not responsible for and do not endorse or monitor their content or privacy policies (if any).

  1. Retention periods


We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected or any other relevant permitted purpose (subject to legitimate interest or regulatory requirements), or-in the case of consent-until you withdraw your consent.


After this period, your personal data will be irreparably destroyed.

  1. Transfers to third countries


If your personal data will be transferred to entities or other third parties whose headquarters or place of business is not located in the European Union (EU) or the European Economic Area (EEA), we ensure before forwarding the data, that outside of legally permitted exceptional cases pertaining to the recipient (reasons of public interest or recipient’s consent), an appropriate level of data protection exists (e.g. through an adequacy decision of the European Commission or through the use of Standard Contractual Clauses approved by the European Commission for these purposes, after due assessment of the law and the practice of the third country).


  1. Your rights


In accordance with the GDPR and applicable data protection laws, you may have the following rights in relation to the personal data that we hold about you:

  1. Right of Access: the right to require further details from us on how we use your personal data and a copy of any personal information in our possession,

  1. Rectification: the right to require us to update or correct any personal data in our possession,

  1. Erasure: the right to require us to delete any personal data in our possession, subject to any legitimate interest of statutory obligations we may have,

  1. Restriction: the right to require us to restrict the processing of your personal data and limit the way we use it in certain circumstances and for a particular reason (such as contesting the accuracy of the information, the lawfulness of the purpose, etc),

  1. Right to Object: the right to object to any processing on grounds relating to your particular situation, unless we have legitimate grounds which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims,

  1. Withdrawal of Consent: Where processing is based on consent, you have the right to withdraw your consent so that we stop carrying out such processing.

You may exercise any of the above rights by contacting us by email at shantiyogaschoolholistic@gmail.com or by calling us at +357 70 087676


If you wish to complain about the way we may have handled your personal information, you may contact us at the above email address and telephone number. We will examine your complaint and contact you to try and resolve the matter.


If you still fee that your personal information has not been handled appropriately according to the law, you can submit your complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.

  1. Changes to Privacy Notice


We may change and update our Privacy notice and Cookie Policy from time to time in the future. You are encouraged and advised to review them when you visit our website to stay informed of how we are collecting and using your personal data.

This Privacy notice was last updated in July 2021.