PRIVACY POLICY

Last Updated: November 15, 2025

1. Introduction

OC Yogi ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ocyogi.com, use our services, purchase our products, or interact with us.

Please read this policy carefully. By accessing our Site and using our Services, you consent to the practices described herein. If you do not agree with this policy, please do not use our Services.

2. Information We Collect

We collect several types of information from and about users of our Services:

A. Personal Information: This is data that can be used to identify you personally. We collect it in the following ways:

  • Directly from You: When you create an account, book a service, purchase a product, or contact us. This may include:

    • Identity Data: Name, username.

    • Contact Data: Billing and delivery address, email address, telephone number.

    • Financial Data: Payment card details or other payment information. Note: We do not store full credit card numbers. All payments are processed by our secure third-party payment processors (e.g., Squarespace, Stripe, PayPal, Venmo, Zelle, Patreon).

    • Profile Data: Username and password, purchases or orders, your interests, preferences, and health information you voluntarily provide (e.g., for tailoring a yoga session).

    • Technical and Usage Data: Through automated technologies as you interact with our Site (see below).

B. Automatically Collected Information: When you use our Site, we may automatically collect:
* Usage Data: Information about how you use our Site, products, and services.
* Technical Data: Your IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
* Cookies and Similar Technologies: Our Site uses cookies (small text files stored on your device) to distinguish you from other users. This helps us provide a better experience and improve our Site. You can set your browser to refuse all or some cookies, but this may impair Site functionality.

3. How We Use Your Information

We use the information we collect for the following business purposes:

  • To Fulfill Your Orders and Contracts: To process and deliver your purchases (including digital products), manage your payments, and provide the services you request (e.g., private instruction, retreat booking).

  • To Manage Your Account: To manage your user registration and provide you with access to the Services, including your online membership.

  • To Communicate With You: To send you service-related communications (e.g., booking confirmations, policy changes), respond to your inquiries, and provide customer support.

  • For Marketing (with your consent): To inform you about new services, special offers, and events that we think may be of interest to you. You can opt-out of marketing communications at any time.

  • To Improve Our Services: To analyze data to understand how our Services are used, troubleshoot problems, and develop new features and content.

  • For Security and Legal Compliance: To maintain the safety and security of our Services, detect and prevent fraud, and comply with applicable laws and regulations.

4. Legal Basis for Processing (For EEA/UK Users)

If you are located in the European Economic Area (EEA) or the UK, we process your personal data based on the following legal grounds:

  • Performance of a Contract: To fulfill our obligations to you under our Terms of Service.

  • Consent: When you have given us clear consent, for example, for marketing communications.

  • Legitimate Interests: For our legitimate business interests, such as improving our Services and security, provided your fundamental rights are not overridden.

  • Legal Compliance: Where necessary to comply with a legal obligation.

5. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following limited circumstances:

  • Service Providers: We share data with trusted third parties who assist us in operating our website, conducting our business, and serving our users, such as payment processors, email marketing services, and analytics providers. These parties are bound by contract to use your data only for the services we request.

  • Legal Requirements: We may disclose information where required by law, such as to comply with a subpoena or similar legal process.

  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the new entity.

  • Protection of Rights: To investigate potential violations of our Terms of Service, or to protect the rights, property, and safety of ourselves, our users, or others.

6. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this policy, including to fulfill legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data and the potential risk of harm from unauthorized use or disclosure.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access and Data Portability: The right to request copies of the personal data we hold about you.

  • Correction: The right to request that we correct any inaccurate or incomplete data.

  • Erasure ("Right to be Forgotten"): The right to request that we delete your personal data, subject to certain exceptions.

  • Restriction of Processing: The right to request that we suspend the processing of your personal data.

  • Objection to Processing: The right to object to our processing of your personal data, particularly for direct marketing.

  • Withdraw Consent: Where we rely on consent, you have the right to withdraw it at any time.

  • Opt-Out of Sale/Sharing (CCPA/CPRA): The California Consumer Privacy Act (CCPA), as amended by the CPRA, gives California residents the right to opt-out of the "sale" or "sharing" of their personal information. We do not sell your personal information in the traditional sense. However, we use analytics and advertising services that may be considered a "sale" or "sharing" under the broad definition of the CCPA. You can opt-out by using the "Do Not Sell or Share My Personal Information" link in our website footer or by contacting us.

To exercise any of these rights, please contact us using the details in Section 11. We will respond in accordance with applicable law and may need to verify your identity before processing your request.

8. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete that information.

9. International Data Transfers

Our Services are operated in the United States. If you are located outside the U.S., please be aware that any information you provide to us will be transferred to and processed in the U.S. By using our Services, you consent to this transfer.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will indicate when it was revised. We will notify you of any material changes by posting the new policy on the Site. Your continued use of the Services after such changes constitutes your acceptance of the new policy.

11. Contact Us

If you have any questions about this Privacy Policy or your privacy rights, please contact us at:
James Afshar, E-RYT
jamesafsharyoga@gmail.com