Move Breathe Academy — 200-Hour Yoga Teacher Training

Home  →  Privacy Policy

Legal

Privacy Policy

Move Breathe Academy — GDPR-compliant data handling

Move Breathe Academy (“we”, “us”, “our”), based in the Netherlands, is committed to protecting your privacy in compliance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and Dutch data protection laws. This Privacy Policy explains how we collect, use, share, and protect your personal data when you enrol in our 200-Hour Hybrid Yoga Teacher Training (the “Training”) or use our Private Online Community platform (the “Platform”).

By enrolling, signing our Student Agreement, or using the Platform, you consent to this Policy.

On this page

  1. Who We Are (Data Controller)
  2. Personal Data We Collect
  3. How We Collect Data
  4. Purposes & Legal Bases
  5. Sharing Your Data
  6. Data Retention
  7. Your GDPR Rights
  8. Security
  9. Cookies & Tracking
  10. Children’s Privacy
  11. Changes to Policy
  12. Contact Us

1. Who We Are (Data Controller)

  • Company: Move Breathe Academy
  • Address: Wethouder Noijhof 19, 5121 TS Rijen, Netherlands
  • Email: [email protected]
  • Representative: Patrick van der Pol

We are the data controller for your personal data.

2. Personal Data We Collect

We collect only necessary data:

  • Identity: Name, date of birth, address (from enrolment form, signature)
  • Contact: Email, phone (from enrolment, communications)
  • Payment: Bank/credit card details (processed securely via e.g. Stripe; we do not store full details) — from deposits (€500), fees, €95/year Platform
  • Training-Specific: Fitness/health declaration (self-reported), attendance records, homework submissions (from training participation)
  • Platform Usage: IP address, login activity, posts/comments (pseudonymized where possible) (from platform logs)
  • Marketing: Preferences (opt-in only) (from consent forms)

No sensitive data (e.g., full medical history) unless voluntarily provided for support.

3. How We Collect Data

  • Directly: Enrolment forms, Student Agreement signatures, Platform registrations, emails/support tickets.
  • Automatically: Cookies (essential for login; analytics opt-in), device info.
  • Third-Parties: Payment processors, video platforms (e.g., Zoom for meetings), email tools (e.g., content creator, mailchimp — opt-in).

4. Purposes & Legal Bases (GDPR Art. 6)

We process data only for specified purposes:

  • Enrolment & Delivery: Contract performance (Art. 6(1)(b)) — access digital content, schedule in-person, Community free access
  • Payments & Refunds: Contract/Legitimate interest (Art. 6(1)(b)/(f)) — process €500 deposit, €95 renewals
  • Training Support: Contract (Art. 6(1)(b)) — grades, feedback, make-ups
  • Platform Management: Contract/Legitimate interest — moderation, security
  • Communications: Consent/Legitimate interest — updates, newsletters (unsubscribe anytime)
  • Compliance/Legal: Legal obligation (Art. 6(1)(c)) — tax records, disputes
  • Marketing: Consent (Art. 6(1)(a)) — promotions (opt-out easy)

5. Sharing Your Data

  • No selling. Shared only with:
  • Processors: Payment gateways (e.g., Stripe), hosting (e.g., cloudflare), email services (GDPR contracts in place).
  • Partners: In-person venue (attendance only).
  • Authorities: If legally required.

International transfers: EU-based only (or adequacy decisions/SCCs).

6. Data Retention

  • Training: Until fixed end date + 7 years (legal/tax).
  • Platform: Active membership + 1 year post-cancellation.
  • Marketing: Until opt-out.

Secure deletion thereafter.

7. Your GDPR Rights

Contact us to exercise:

  • Access (copy of data).
  • Rectification (correct inaccuracies).
  • Erasure (“right to be forgotten” – subject to contract/legal holds).
  • Restriction/Objection (e.g., marketing).
  • Portability (structured format).
  • Withdraw Consent (does not affect prior processing).

How: Email [email protected]. Response within 1 month. Complaints: Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Security

  • Encryption (HTTPS, data at rest).
  • Access controls, regular audits.
  • Breach notification: Within 72 hours (if required).

9. Cookies & Tracking

  • Essential: Login, security (always on).
  • Analytics: Google Analytics (opt-out via browser/settings).

10. Children’s Privacy

Training/Platform for 18+. No knowing collection from under-16s.

11. Changes to Policy

Updates posted here; continued use = acceptance. Major changes emailed.

12. Contact Us

Questions? [email protected]

This Policy aligns with GDPR, Dutch law, and our Student Agreement. We prioritize your trust.

Questions about your privacy? Email us at [email protected].