Privacy Policy
Last updated: 13 May 2026
Cork Lotus Yoga (“we”, “us”, “our”) respects the privacy of the users of our website, www.corklotusyoga.com, and the services provided through it (the “Site”). This Privacy Policy explains what information is gathered during a visit to the Site, how that information may be used, and the rights you have under applicable data-protection law — in particular, the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
Your use of our services and this Site is also governed by the terms of our underlying service providers, including WordPress, MemberPress (our membership and subscription platform) and Stripe (our payment processor). Please review their respective policies, which also apply to your use of this Site.
Data Controller
For the purposes of GDPR, the data controller is:
Cork Lotus Yoga Cork City, Ireland Email: [email protected] Phone: +353 85 712 7806
1. Use of Information
As a general policy, no personally identifying information — such as your name, address or email address, is automatically collected from a casual visit to the Site. However, certain non-personal information is recorded by the standard operation of our internet servers. Information such as the type of browser being used, its operating system, your approximate location and your IP address may be gathered in order to enhance your online experience, secure the Site, and produce aggregated analytics.
The Site’s various mailing lists, downloads, special offers, contests, registration forms, subscription sign-ups, contact forms and surveys may ask you to provide:
- contact information (e.g. name, postal and/or email address, phone number);
- billing information (processed directly by Stripe — see below);
- demographic information (e.g. age, location);
- account credentials (username, password — stored in hashed form);
- health and wellness information you choose to share (e.g. injuries, pregnancy status, medical conditions disclosed to your teacher);
- class preferences and practice history within the Video Library.
Information submitted will be used only as necessary for our legitimate business interests, including:
- delivering the classes, subscriptions, retreats and other services you have booked;
- responding to your queries;
- improving our products, services and the contents of the Site;
- sending you transactional communications related to your account and bookings;
- where you have opted in, sending you marketing communications about classes, workshops, retreats and other offerings.
We may share information with our business and service-delivery partners only to the extent necessary to provide our services (see Section 5 below). We never sell or lease personally identifiable information to any third parties. With your permission, we may use your contact information to send you information about our classes and offerings. You may always opt out of receiving future marketing as described below.
Payment information: We do not store any credit card or debit card information on our servers. All card payments are processed securely by Stripe, who hold the relevant card data in accordance with PCI-DSS standards.
Health information: Any health information you share with us (in person, by email, or through booking forms) is used only to provide a safe and appropriate practice for you and is treated with appropriate confidentiality. We rely on your explicit consent under Article 9(2)(a) GDPR to process such special-category data.
We may disclose user information in special cases where we believe in good faith that disclosure is necessary to identify, contact or bring legal action against someone who may be causing harm to or interference with our rights or property, other users of the Site, or anyone else who could be harmed by such activities. We may also be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law-enforcement requirements.
2. Legal Bases for Processing (GDPR)
Under GDPR, we process your personal data on one or more of the following legal bases:
- Contract — to provide the classes, subscriptions and other services you have booked and to administer your account.
- Legitimate interests — to improve and secure our Site and services, to communicate with you about your account, and to understand how our Site is used.
- Consent — where you have opted in to receive marketing communications, where you have agreed to cookies that are not strictly necessary, or where you have provided special-category data (such as health information).
- Legal obligation — to comply with our tax, accounting and other statutory obligations.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
3. Children Aged 16 and Under
We recognise the special obligation to protect personal information relating to children. The digital age of consent in Ireland is 16. If you are 16 years old or younger, we ask that you do not submit any personal information to the Site without the consent and supervision of a parent or guardian. If we discover that a child aged 16 or under has signed up to the Site or provided us with personal information without parental consent, we will delete that information from our records.
If your child attends a class with us in person, a parent or guardian will be asked to sign the booking and waiver on their behalf.
A few tips to help make a child’s online experience safer:
- Teach children never to give personal information unless supervised by a parent or responsible adult — this includes name, address, phone number, school, etc.
- Know which sites your children are visiting and which sites are appropriate.
- Look for website privacy policies. Know how your child’s information is treated.
4. Use of Cookies
Cookies are small pieces of information that a website transfers to your device for record-keeping purposes. Cookies make using our Site easier by, among other things, remembering your preferences and login state. Most browsers are initially set up to accept cookies. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent. If you disable cookies, some parts of the Site may not function properly or may run more slowly.
When you first visit the Site, you will see a cookie consent banner allowing you to accept all cookies, reject non-essential cookies, or configure your preferences by category. Your choice is stored for 11 months, after which you will be asked again.
The categories of cookies we use are:
| Category | Purpose |
|---|---|
| Necessary | Essential for the Site to function — e.g. login session, security, cookie-consent record. Cannot be disabled. |
| Functional | Enable features like social sharing, video playback preferences, and remembering form input. |
| Performance | Help us understand how visitors interact with the Site so we can improve it. |
| Analytics | Provide information on metrics such as visitor numbers, bounce rate and traffic source (e.g. Google Analytics). |
| Advertisement | Used to deliver relevant ads and measure the performance of marketing campaigns. |
| Others | Cookies that are being analysed and have not yet been classified. |
Specific cookies set when you log in, subscribe or check out include those used by MemberPress (to maintain your member session) and Stripe (to detect fraudulent transactions). You can view the full list of cookies via the “Cookie Settings” link in the footer of the Site.
5. Third-Party Service Providers
We use a number of trusted third-party service providers to operate the Site and deliver our services. These include:
- Stripe, Inc. — payment processing.
- MemberPress — membership and subscription management.
- WordPress / WP Engine / our hosting provider — website hosting.
- Mailchimp (or equivalent) — email marketing and newsletter delivery, where you have opted in.
- Google (Analytics, reCAPTCHA, Fonts) — analytics, anti-spam and font delivery.
- Meta (Facebook, Instagram) — social-media integration, pixel-based remarketing and analytics where you have consented.
- Video hosting provider — to stream our Video Library content securely to subscribers.
Each provider acts as a processor or independent controller in respect of the personal data they handle on our behalf and is subject to its own privacy policy. Where any such provider transfers personal data outside the European Economic Area, appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission) are in place.
6. Pixels and Analytics
We may use various technologies — including cookies, pixels and web beacons — to collect and store information when you visit and/or use the Site. These technologies may track:
- whether an email sent through the Site was delivered and opened, and whether links within the email were clicked;
- your IP address, browser, email client type and similar device details;
- Site usage and traffic patterns;
- conversion events related to advertising campaigns we run on Meta or Google.
Reports are available to us when we send an email to you, so we may collect and review that information for service-improvement purposes. These pixels do not read your hard drive but may be stored on your device to enable our Site to recognise you on a return visit.
7. Choice / Opt-Out
We may invite you to opt in to marketing communications at the point where we collect your information. You always have the option of removing your name from any email list to discontinue future communications. To unsubscribe, follow the link at the bottom of any marketing email you receive from us. If you are unsuccessful in completing the unsubscribe steps, please email us at [email protected], including a copy of the undesired email, and state that you wish to be removed from the mailing list.
Opting out of marketing emails will not affect transactional communications such as booking confirmations, subscription receipts, password resets or class-related notices, which we must send in order to provide you with the services you have requested.
8. Malware, Spyware & Viruses
Neither Cork Lotus Yoga nor the Site knowingly permits the use of malware, spyware, viruses or other similar types of software.
9. Links to External Sites
We are not responsible for the content or practices of third-party websites that may be linked to from the Site, including social-media platforms, video-hosting providers, and any partner sites. We are also not responsible for any information you might share with such linked websites. You should refer to each website’s respective privacy policy and practices before disclosing any information.
10. Comments, Reviews & Submitted Content
You are solely responsible for the content of any messages, reviews or testimonials you post on the Site, our social-media channels or through any community feature. When you voluntarily disclose personal information in such public-facing contexts, that information can be collected and used by others and may result in unsolicited messages. Please take care when using these features.
Cork Lotus Yoga may use comments, reviews, testimonials and feedback you provide in marketing material. Where the content is identifiable (e.g. quoted alongside your first name), we will rely on your consent and you may withdraw it at any time by emailing us.
11. Transfer of Information Across National Borders
The Site and some of our service providers operate on servers located in various jurisdictions, including outside the European Economic Area (for example in the United States or the United Kingdom). When you access or use the Site and our services, personal information about you may be transferred outside the country in which you are located.
Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place — such as European Commission-approved Standard Contractual Clauses, adequacy decisions, or certification under approved frameworks — so that your data continues to be protected to a standard equivalent to GDPR.
12. Your Rights Under GDPR
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate or incomplete personal data.
- Erasure (“right to be forgotten”) of your personal data in certain circumstances.
- Restriction of processing of your personal data in certain circumstances.
- Data portability — to receive your personal data in a structured, commonly used and machine-readable format.
- Object to processing carried out on the basis of legitimate interests, or for direct marketing.
- Withdraw consent at any time, where processing is based on consent.
- Not be subject to automated decision-making with legal or similarly significant effects.
To exercise any of these rights, please email [email protected] with the relevant request in the subject line — for example:
- “Personal Information Review Request” — to receive a copy of your data.
- “Delete Account” — to delete a registered user account.
- “Delete My Information” — to delete email or other personal data where you have no account.
- “Privacy Request” — for any other privacy-related question or request.
We will respond to your request within one month, as required by GDPR, although this period may be extended by a further two months where requests are complex or numerous.
You also have the right to lodge a complaint with the Data Protection Commission in Ireland, which is the supervisory authority for data-protection matters:
- Website: www.dataprotection.ie
- Phone: +353 (0)761 104 800
- Postal: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.
13. Data Retention
We retain personal data only for as long as is necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting or reporting requirements. As a general guide:
- Active subscription / account data: retained for as long as your account is active and for up to 2 years after closure, for support and chargeback purposes.
- Booking and class records: retained for up to 6 years after the class or booking, to comply with Irish tax and accounting obligations.
- Health / waiver information: retained for as long as you remain an active student and for up to 6 years afterwards, to address any potential personal-injury claim within the limitation period.
- Marketing subscriptions: retained until you unsubscribe, after which we may retain a minimal record on our suppression list to ensure we do not contact you again.
14. Security
Security of your personal data is extremely important to us. We have implemented technical, administrative and physical security measures designed to protect your personal data from unauthorised access and improper use, including:
- HTTPS / TLS encryption for all traffic to and from the Site;
- hashed passwords;
- restricted access to personal data on a need-to-know basis;
- secure off-site backups;
- regular software and plugin updates.
Unfortunately, no data transmission over the internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal data, we cannot ensure or warrant the security of any information you transmit via the internet. By transmitting any such information to us, you accept that you do so at your own risk. In the event of a personal-data breach that poses a risk to your rights and freedoms, we will notify both the Data Protection Commission and you, as required by GDPR.
15. Your Choices Around Cookies and Tracking
You have a number of options to control or limit how we and our partners use cookies and similar technologies, including for advertising:
- Most browsers and devices accept cookies by default, but their settings usually allow you to clear or decline cookies.
- To prevent your data from being used by Google Analytics, you can install Google’s opt-out browser add-on.
- For information on how our advertising partners allow you to opt out of receiving ads based on your browsing history, visit http://optout.aboutads.info/ (industry self-regulatory programme) or http://youronlinechoices.eu/ (European users).
- To opt out of personalised ads on Facebook/Instagram or Google, use your Meta or Google Ads settings.
Disabling cookies is not strictly necessary for the Site to work, but it may affect your browsing experience and some features may not behave as intended.
16. Changes to This Policy
This Privacy Policy may be revised from time to time by updating this posting. You are bound by any such revisions and should therefore periodically visit this page to review the then-current Privacy Policy. Where changes are material, we will draw them to your attention by a notice on the Site or by email to registered users.
17. Your Acceptance of These Terms
By using the Site, you accept the policies and restrictions set forth in this Privacy Policy. If you do not agree to this policy, please do not use the Site.
Contact for Complaints or Concerns
If you have any complaints or concerns about Cork Lotus Yoga or about this Privacy Policy, please contact:
Cork Lotus Yoga Email: [email protected] Phone: +353 85 712 7806
Information provided by you via general email inquiries is used only to respond to your inquiries in the ordinary course of business and is never shared with third parties for marketing purposes.
If you are a resident of the EU/EEA and have an unresolved data-privacy concern, you may also contact the Irish Data Protection Commission as described in Section 12.