Yoga Bible · Legal
Privacy Policy
We take the protection of your personal data seriously. Here you can read how we collect, process, and protect your data in compliance with GDPR and Danish legislation.
Here we explain how we process your personal data when you use our websites, sign up for trainings/courses, attend classes, purchase digital services, or work with us. Namasté Online and Namasté Offline have their own privacy policy.
1) What are personal data?
Personal data is information that can identify you directly or indirectly. This can include name, email, phone, IP address, purchase history, class attendance, video/photo where you can be recognized, etc.
2) Who does this privacy policy apply to?
The policy applies to all our brands/services when Hot Yoga Copenhagen ApS is the data controller — including YogaBible.dk and YogaBible.com as well as our sub-brands (Hot Yoga Copenhagen and Vibro Yoga). Namasté Online and Namasté Offline have their own privacy policy at namasteonline.com/privacy and namasteoffline.com/privacy, which alone covers Namasté class broadcasts and their recordings.
If a third party (e.g. an external partner) is the data controller for a specific activity, you will be informed separately.
3) What data do we collect?
A) Contact and account information
- Name, email, phone
- Address (if relevant for invoice/contract)
- Login/account details (if you have access to a platform)
B) Purchase and payment
- Purchase history, invoice details, payment status, installment plans and fees
- We typically do not receive your full card details — they are handled by the payment provider
C) Participation, training and certification
- Sign-ups, attendance, class/workshop participation
- Training progression, assignments, feedback, certificate status
- Information necessary to issue certificates and documentation (incl. Yoga Alliance-related documentation where applicable)
D) Communication
- Emails, messages, form submissions and customer service history
- Marketing opt-in/opt-out (newsletters, campaigns)
E) Photo, video and audio (if relevant)
- Recordings from classes and events (see section 5)
- Photo production (Yoga Photography): images, deliveries and any selection/approval workflow
F) Technical data (website)
- IP address, device/browser, sessions, error logs
- Cookies and similar technologies (see section 10)
4) Purposes & legal basis (why and on what grounds?)
We typically process data for these purposes
- To deliver services (classes, courses, YTT, mentorship, digital products) — basis: contract.
- Administration (bookings, attendance, program flow, certification, support) — basis: contract and legitimate interest.
- Payment, invoicing and accounting — basis: contract and legal obligation.
- Communication (practical info, changes, service messages) — basis: contract/legitimate interest.
- Marketing (newsletter, offers) — basis: consent or legitimate interest where lawful, always with easy unsubscribe.
- Security and abuse prevention — basis: legitimate interest.
- Service improvement (quality, feedback, statistics) — basis: legitimate interest and/or consent depending on method.
- Recruitment (Careers) — basis: legitimate interest and/or consent (see also section 8 on retention).
5) Recordings, photo & live stream (our standard)
Standard: In our environment, photo/video/audio recordings may occur in connection with teaching, training, and events. This means you may be visible or audible in material.
Why do we record?
- Teaching and development of training material
- Documentation and quality assurance
- Marketing and sales of future trainings/courses
Namasté Online and Namasté Offline
- This section does not apply to Namasté class broadcasts. They and their recordings are covered by Namasté's own privacy policy (namasteonline.com/privacy).
- You may not record, copy, re-upload or redistribute our stream or teaching material.
If you do not wish to be included
- Give early notice: Write to info@yogabible.dk (preferably ≥ 24 hours before).
- We try to accommodate: "Camera-free" placement / angle adjustments.
- Limitation: In group activities, we cannot always guarantee full exclusion from all angles.
6) Data sharing & data processors (vendors)
We only share your data when necessary to deliver our services, comply with legal requirements, or protect our legitimate interests. When we use vendors (data processors), we ensure appropriate agreements where required.
Our typical systems and vendors (examples)
- Booking/membership/payment (studio): our booking system (for handling bookings, memberships, attendance and related operations).
- Invoicing/finance: e-conomic (invoicing and accounting).
- Payment link/terminal (physical payment): Zettle (payment and transaction management).
- Website/CMS & forms: Squarespace (operating YogaBible.dk and site features).
- Email operations: Google Workspace/Gmail (communication and customer service).
- Email campaigns (ad hoc): GMass and/or Squarespace email features (e.g. campaigns/bulk sends).
- Analytics: Google Analytics and Squarespace Analytics (traffic and performance measurement).
- Marketing tracking: Meta Pixel (measurement/advertising, depends on consent; see section 10).
7) Transfers outside EU/EEA
Some vendors (e.g. tech and analytics providers) may have operations or sub-processors outside the EU/EEA. If we transfer personal data outside the EU/EEA, we ensure a lawful transfer basis and appropriate safeguards (typically standard contractual clauses and supplementary measures where relevant).
8) Retention, deletion & retention periods
We retain personal data as long as necessary for the purpose, and delete or anonymize thereafter — unless we are obligated to retain data longer (e.g. accounting).
Typical retention periods (adjusted as needed)
- Accounting/invoicing/payment: typically 5 years from the end of the fiscal year (legal requirement).
- Training administration: as long as necessary to administer and document training/certification.
- Customer service and dialogue: typically 12–24 months depending on case type.
- Marketing list: until you unsubscribe, or if we no longer have a lawful basis.
- Careers (applicants): typically up to 6 months after completed recruitment, unless longer retention is agreed.
- Recordings: retained as long as relevant for the purpose (teaching/production/marketing) and with appropriate access control.
9) Your rights
You have rights under GDPR. Depending on the situation, you can request:
- Access to your data
- Rectification of incorrect data
- Erasure (where we have no legal requirement/basis for retention)
- Restriction of processing
- Data portability (in relevant cases)
- Objection to processing based on legitimate interest
- Withdrawal of consent (e.g. marketing)
Write to info@yogabible.dk with your request. For security purposes, we may ask for appropriate identification.
10) Cookies, analytics and marketing engagement
Necessary cookies support language, consent, sign-in and requested booking or payment functions. Optional statistics and marketing are off until you choose them. The schedule and booking functions remain available when you reject optional tracking.
We typically use
- Necessary: authentication, security and your cookie choice (yb_consent, up to 180 days).
- Statistics: Google Analytics and Microsoft Clarity measure site use, including interactions, only with statistics consent. Google Analytics activates only when you also allow marketing.
- Marketing: Meta Pixel and Google Ads measure advertising. With marketing consent we also store campaign attribution and use yb_vid (up to 90 days) or yb_lid (up to one year after an email click) to measure page views, time, scrolling and clicks. Visits to emailed schedules may be linked through the link identifier to your enquiry, interests and personalized follow-up. Pre-lead visits may be linked when you submit a form.
- Choice: first-party engagement events require marketing consent on both the website and its receiving endpoint. A token in an emailed link is not consent.
Consent
You can accept or reject statistics and marketing separately. Rejecting them does not prevent viewing schedules, submitting an enquiry, signing in or booking. Revised purposes require a new choice; an earlier cookie choice does not activate them.
11) Security
We protect your data with appropriate technical and organizational measures. This includes access control, need-to-know restrictions, system updates, and secure data handling with vendors.
No systems are 100% secure, but we work seriously and professionally with data security.
12) Contact, complaints & changes
Contact us
- Email: info@yogabible.dk
- Phone: +45 53 88 12 09
- Address: Torvegade 66, 1400 København K, Denmark
Complaints
If you are dissatisfied with our processing of your personal data, we would like to try to resolve it first. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet).
Changes
We may update this privacy policy as needed (e.g. changes in vendors or legislation). The latest version is always available on our website.
GDPR Request
Would you like to exercise your rights (access, deletion, rectification, etc.)? Write to us — we respond quickly and professionally.

