Privacy Policy

1. Introduction

YogZen LLC, doing business as Prasad Yoga Wellness ("we," "our," or "us"), operates the website prasadyogawellness.com (the "Website"). We are committed to protecting your privacy and handling your personal information with transparency and care.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. This policy describes our practices; it does not replace any consent that applicable law requires us to obtain separately.

YogZen LLC is a limited liability company registered in the State of California, United States.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you interact with our Website:

Contact Form

• Full name
• Email address
• Message content

Group Class Inquiry Form

• First name and last name
• Email address
• Phone number and country code
• Class interest (automatically recorded based on the class you are inquiring about)

Class Registration Form

When you register for a paid class, we collect additional information required for legal and safety purposes:

• Full legal name (as it appears on your government-issued ID)
• Date of birth and age
• Gender
• Residential address (street address, city, state or region where applicable, postal code where applicable, country)
• Email address
• Phone number (optional)
• Waiver acceptance status, timestamp, and the accepted waiver version when recorded
• Enrollment and payment status may be maintained administratively. Payments are arranged outside this Website; our forms do not collect payment card numbers, bank account details, or payment credentials.

Sunday Class Registration Form

• First name and last name
• Email address

Administrative Follow-Up Records

Authorized administrators can view registrations and inquiries in a private website manager. When an administrator marks an entry as replied, we store the submission identifier, the administrator's account identifier, and the time of that action. This is a manual follow-up record, not confirmation that an email was sent or delivered. Inquiry messages remain in Netlify Forms; the reply record does not copy those messages into Supabase.

2.2 Information Collected Automatically

When you visit our Website, certain information may be collected automatically by our hosting provider and third-party services:

• Log data: Your IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and time spent on pages. This data is collected by our hosting provider, Netlify.
• Device information: General information about the device you use to access the Website, including device type and screen resolution.
• Performance monitoring: Our hosting provider, Netlify, may collect anonymized real-user performance metrics (such as page load times and Core Web Vitals) to help us monitor and improve Website performance. This data is not used to identify you or to track you across other websites.

2.3 Cookies and Similar Technologies

Our Website does not set first-party cookies for tracking or advertising purposes. However, third-party services that we use may set cookies or use similar technologies:

• Google Fonts: When our Website loads fonts from Google's servers, Google may collect your IP address and browser information. Google's privacy policy governs this data collection.
• CDN Providers (jsDelivr, Cloudflare): Our Website loads CSS frameworks and icon libraries from content delivery networks. These providers may collect limited technical data (such as IP addresses) for performance and security purposes.
• Supabase: We use Supabase for class registrations, website content, administrative authentication, and reply-status records. Administrative sign-in uses browser local storage for session credentials. The website manager does not persist visitor inbox entries in browser local storage.
• Website preferences: We store your cookie-banner choice in browser local storage. Declining non-essential cookies does not prevent necessary hosting, font/CDN requests, or form processing.

2.4 Information We Do Not Collect

We do not knowingly collect:

• Credit card numbers, bank account details, or payment credentials through our Website forms
• Social Security numbers or government-issued identification numbers
• Detailed health or medical information through dedicated fields. Please do not include sensitive medical details or payment credentials in free-text messages.
• Information from individuals under the age of 21 for class registration (see Section 9)
• Precise geolocation data

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your inquiries: When you submit a contact form or class inquiry, we use your name and email address to respond to your message and provide the information you requested.
• To facilitate class registration: We use your contact information, including your email address and phone number, to communicate class details, schedules, and logistics.
• To process class registrations: We collect your personal details, address, and age to verify eligibility (minimum age 21) and process your waiver acceptance. Registrations are stored in Supabase. Our notification process attempts to forward a summary to our administrative inbox via an email-relay service (FormSubmit.co) so that we can respond promptly, finalize enrollment, arrange payment, and send you class access details including Zoom links. The Website also attempts to submit a backup notification summary to Netlify Forms. Notifications and backups can be delayed or unavailable without changing a confirmed database registration. These summaries contain your name, email, optional phone number, class, and waiver acceptance timestamp; your birth date, age, gender, and residential address remain in Supabase and are not included in new notification summaries.
• To maintain legal records: We retain your signed waiver acceptance and registration details as required for legal and liability purposes related to your participation in yoga classes.
• To operate and maintain the Website: We use automatically collected data to ensure the Website functions properly, monitor performance, and address technical issues.
• To manage the Website and follow up: Authorized administrators manage Substack blog cards, classes, prices, and page content, review registrations and inquiries, and record manual reply status. The inbox's email links open an administrator's email application; the dashboard does not automatically send replies or subscribe you to marketing.
• To comply with legal obligations: We may use your information as necessary to comply with applicable laws, regulations, or legal processes.

We do not use your personal information for automated decision-making or profiling. We do not sell your personal information to third parties.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

4.1 Service Providers

We use the following third-party service providers who may process your data on our behalf:

4.2 Legal Requirements

We may disclose your information if required to do so by law, in response to a valid legal process (such as a court order or subpoena), or to protect our rights, property, or safety, or the rights, property, or safety of others.

4.3 Business Transfers

If YogZen LLC is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Website of any change in ownership or use of your personal information.

5. Third-Party Websites and Services

Our Website contains links to third-party websites and services that are not operated by us. These include:

• Substack (prasadsaranjame.substack.com) — Blog articles
• Instagram (instagram.com/prasadyogawellness) — Social media
• Facebook (facebook.com) — Social media
• YouTube (youtube.com/@PrasadYogaWellness) — Social media
• Downtown Yoga Shala (downtownyogashala.com) — Class registration
• Google Forms (docs.google.com) — Class registration

When you click on a link to a third-party website, you leave our Website and are subject to the privacy policy and terms of that third-party site. We have no control over and assume no responsibility for the content, privacy practices, or policies of any third-party websites or services. We encourage you to review the privacy policy of every website you visit.

6. Data Security

We take reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• All data transmitted between your browser and our Website is encrypted using HTTPS/TLS.
• Form submissions are processed securely through Netlify's encrypted infrastructure.
• Visitor registration records and reply records require authorized administrative access, enforced by Supabase row-level security and database permissions.
• The inquiry endpoint validates the signed-in user and their administrative authorization before retrieving Netlify submissions. Its responses are marked private and not to be cached.
• Published blog images and website content are public. Editing and image uploads require administrative authorization.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:

• Contact form and class inquiry submissions: Retained in our Netlify dashboard for as long as needed to respond to your inquiry and for our records, typically no longer than 24 months. You may request earlier deletion at any time.
• Class registration and waiver records: Retained in our Supabase database (with backup copies in our Netlify Forms dashboard and administrative email inbox) for as long as necessary to administer your enrollment and thereafter for as long as required to preserve legal records of your waiver acceptance — generally at least four (4) years after your last participation, consistent with applicable statutes of limitation. You may request deletion of registration data that we are not legally required to retain.
• Blog content and images: Retained indefinitely or until removed by our administrative team.
• Server logs: Retained by our hosting provider (Netlify) in accordance with their data retention policies.
• Administrative account data: Retained for as long as the account is active in our Supabase authentication system.
• Reply-status records and follow-up emails: Retained to manage responses and related records. When an inquiry is deleted, associated reply records and email copies must also be reviewed for deletion unless retention is necessary for a legal obligation. Deleting a submission in one service does not automatically delete copies in other services.

8. Your Privacy Rights

8.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. Therefore, there is no need to opt out.

To exercise any of these rights, please contact us using the information provided in Section 12. We will respond to your request within 45 days, as required by law.

8.2 Rights for Users in the European Economic Area (EEA) and United Kingdom

If you are located in the EEA or UK and access our Website (for example, to participate in online yoga classes), you may have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate data.
• Right to Erasure: You can request deletion of your data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, commonly used format.
• Right to Object: You can object to the processing of your data in certain circumstances.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.

Our legal basis for processing your personal information includes: (a) your consent, when you voluntarily submit information through our forms; (b) our legitimate interests in operating our Website and business; and (c) compliance with legal obligations.

8.3 Exercising Your Rights

To exercise any of the rights described above, please contact us at prasadyogawellness@gmail.com. We may need to verify your identity before processing your request. We will respond to all legitimate requests within 30 days (or 45 days for CCPA requests).

9. Children's Privacy

Our Website is intended for individuals who are 18 years of age or older, and class registration is limited to individuals who are 21 years of age or older. We do not knowingly collect personal information from anyone under the age of 18, and we do not knowingly accept class registrations from anyone under the age of 21. If you are a parent or guardian and you become aware that your child has provided us with personal information, please contact us immediately at prasadyogawellness@gmail.com. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as promptly as possible.

10. International Data Transfers

Our Website is hosted in the United States, and our service providers (Netlify, Supabase, Google, Cloudflare) may process data in the United States and other countries. If you are accessing our Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Contact us at prasadyogawellness@gmail.com with questions about where your information is processed. Where applicable law requires safeguards or specific consent for a transfer, those requirements apply separately; simply visiting this Website does not provide that consent.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date at the top. We encourage you to review this Privacy Policy periodically for any changes. Where applicable law requires consent for a new use of information, we will request that consent separately.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• YogZen LLC (d/b/a Prasad Yoga Wellness)
• Email: prasadyogawellness@gmail.com
• Location: San Jose, California, United States
• Website: prasadyogawellness.com