Privacy Policy

1. Scope

This Policy applies to personal information you provide to Rhythmic Yoga Academy through rhythmicyoga.academy, its pages and forms, and through Academy processes that refer to this Policy. It applies to prospective students, students, parents or guardians where relevant, class participants, corporate clients, instructors, partners and website visitors.

2. Information We May Collect

Depending on how you interact with us, we may collect:

• Identity and contact information such as name, email address, telephone number and address.
• Application and enrolment information, including selected programme, educational or professional information and information necessary to assess an application.
• Student administration information, including student or enrolment identifiers, attendance, curriculum progress, assessments, feedback and certificate information.
• Payment-related information, such as payment date, amount, transaction/reference details and supporting payment documentation where requested. We do not intend to collect or store complete payment-card credentials through ordinary Academy forms.
• Communications, enquiries, feedback and correspondence you send to us.
• Technical information such as IP address, browser type, device information, pages visited and security logs.
• Cookie and similar technology information where such technologies are enabled.

3. How We Collect Information

We may receive information directly from you through enquiry forms, registration and application forms, student accounts, course and class bookings, email, telephone, messaging services and other communications. Some technical information may be collected automatically when you browse the website.

4. Why We Use Personal Information

We may use information to:

• Respond to enquiries and provide requested information.
• Process applications, admissions and enrolments.
• Administer courses, classes, workshops, retreats and corporate programmes.
• Maintain student records and academic or participation records.
• Assess learning, issue certificates and provide certificate verification services.
• Process and reconcile payments and related administrative records.
• Communicate about schedules, programme changes, account matters and service-related notices.
• Send optional marketing or community communications where permitted and where appropriate.
• Maintain website, account and information-security operations.
• Improve our programmes, website, services and user experience.
• Comply with applicable legal, regulatory, accounting and record-keeping obligations and respond to lawful requests.

5. Legal Basis and Fair Processing

We seek to process personal information lawfully, fairly and transparently. Depending on the circumstances, processing may be necessary to provide a service or perform an agreement, to comply with a legal obligation, for legitimate operational purposes where permitted, or on the basis of consent where consent is appropriate. Sri Lanka’s Personal Data Protection Act No. 9 of 2022 provides a framework governing the processing of personal data and includes obligations concerning lawfulness, purpose specification, purpose limitation, accuracy, retention, security and transparency. citeturn0search0turn0search12

6. Sharing and Disclosure

We do not sell personal information as a business practice. We may disclose information where reasonably necessary to operate the Academy, including to service providers that support website hosting, technology, communications, payment processing, email delivery, security, accounting or other administrative functions. We may also disclose information where required by law, court order, lawful regulatory request, or where necessary to protect the Academy, its students or others.

Where third parties process personal data on our behalf, we seek appropriate contractual, technical and organisational safeguards consistent with applicable requirements.

7. International Processing

Some technology or service providers may process information outside Sri Lanka. Where cross-border processing occurs, we will seek to apply the safeguards required by applicable law. The Sri Lankan data-protection framework contains provisions addressing transfers and processing of personal data outside Sri Lanka. citeturn0search13

8. Cookies and Similar Technologies

Our website may use cookies or similar technologies for essential functionality, preferences, security, analytics or other site functions. You can manage cookies through your browser settings. Blocking certain cookies may affect parts of the website.

9. Data Security

We use reasonable technical and organisational measures appropriate to the nature of the information we handle to reduce the risk of unauthorised access, loss, alteration, disclosure or destruction. No internet transmission or electronic storage system can be guaranteed to be completely secure.

10. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate Academy records, to resolve disputes, to enforce agreements, and to meet legal, accounting, regulatory or certificate-verification requirements. Retention periods may differ by record type.

11. Your Rights

Subject to applicable law and any relevant exceptions, you may have rights relating to your personal information, including rights to request access, correction or other legally available actions concerning your data. The precise rights and procedures depend on the applicable law and circumstances. Sri Lanka’s Data Protection Authority identifies rights and safeguards for data subjects under the PDPA. citeturn0search2turn0search6

To make a privacy request, contact us using the details below. We may need to verify your identity before acting on a request.

12. Children

Some Academy activities may be designed for younger participants. Where a service involves a child, we may require a parent or guardian to provide consent and information necessary for safe administration. We do not knowingly use children's personal information for purposes unrelated to the relevant service.

13. Third-Party Links and Services

Our website may link to third-party websites, social networks, payment services or other platforms. Their privacy practices are governed by their own policies. We encourage you to review those policies before submitting information to them.

14. Changes to This Policy

We may update this Policy when our services, technology or legal obligations change. The latest version will be published on this page with an updated effective date.

15. Contact Us

Important: This website policy is intended as a practical privacy notice for the Academy. It is not a substitute for legal advice. The Academy should obtain professional legal review where a formal compliance assessment or data-protection documentation is required.