Last updated: 28 July 2026

This Privacy Policy explains what personal data Active Yogin collects when you use
activeyogin.com, why we collect it, who we share it with, and what rights you have over it.
It applies to the website, your member account and the classes you stream through it.

Please review the bracketed items below and replace them with your legal details
before relying on this document.

1. Who we are

The controller of your personal data is [LEGAL ENTITY NAME], [REGISTERED ADDRESS],
registration number [NUMBER] («Active Yogin», «we», «us»).

For any question about this policy or your data, write to
[CONTACT EMAIL].

2. What we collect

2.1 Data you give us

• Account data — name, e-mail address, username, password (stored
  only as a cryptographic hash, never in readable form), and the profile picture and
  details you choose to add.
• Membership data — the plan you subscribe to, its start and renewal
  dates, and your payment history.
• Messages — anything you send us through the contact form or by
  e-mail.

2.2 Data collected automatically

• Usage data — pages and classes you open, time spent, and how far
  through a video you watched.
• Technical data — IP address, browser and device type, operating
  system, referring page, and language settings.
• Cookies and similar technologies — see section 6.

2.3 Payment data

We do not receive or store your card number, expiry date or security code.
Card details are entered on the payment provider’s own page and handled entirely by them. We
receive only the outcome of the transaction, its amount and date, and a masked reference to the
card (such as its last four digits).

3. Why we use it

Purpose	Legal basis
Creating and running your account	Performance of a contract
Giving you access to the classes in your plan	Performance of a contract
Taking payment and issuing receipts	Performance of a contract; legal obligation
Answering your questions and providing support	Legitimate interest
Keeping the service secure and preventing abuse	Legitimate interest
Understanding how the site is used, so we can improve it	Consent (analytics cookies)
Sending newsletters and offers	Consent
Keeping accounting records	Legal obligation

4. Who we share it with

We do not sell your personal data. We share it only with the service providers we need in
order to run the site, and only to the extent each of them requires:

• Payment providers — WayForPay and Stripe process your payments and
  receive the data necessary to do so.
• Google Analytics (Google Ireland Limited) — measures how the site is
  used. Loaded only after you accept analytics cookies.
• Google Sign-In — if you choose to log in with a Google account,
  Google confirms your identity to us and we receive your name and e-mail address.
• Cloudflare — protects our forms from automated abuse (Turnstile) and
  delivers site content. It processes your IP address for this purpose.
• E-mail delivery provider — sends account, payment and support
  e-mails on our behalf.
• Hosting provider — stores the site and its database on servers
  located in [SERVER LOCATION / COUNTRY].

We may also disclose data where the law requires it, or where it is necessary to establish,
exercise or defend legal claims.

5. International transfers

Some of the providers above are located outside your country. Where data leaves the European
Economic Area, the transfer is covered by the European Commission’s standard contractual
clauses or by an adequacy decision.

6. Cookies

We use cookies that are strictly necessary for the site to work — keeping you logged in,
remembering your language, and securing forms. These cannot be switched off.

We also use analytics cookies, which are set only if you agree to them. You can change your
choice at any time through the cookie banner or its preferences link.

A full list of the cookies we set is available in our
Cookie Policy.

7. How long we keep it

• Account data — for as long as your account exists, and for
  [RETENTION PERIOD] after you delete it.
• Payment and accounting records — for the period required by tax law,
  normally [NUMBER] years.
• Support messages — [RETENTION PERIOD] after the matter is closed.
• Analytics data — as configured in Google Analytics, currently
  [RETENTION PERIOD].

8. Your rights

Subject to the conditions set out in applicable data protection law, you have the right to:

• ask what data we hold about you and receive a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we process it;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing carried out before you
  withdrew it;
• lodge a complaint with your national data protection authority.

To exercise any of these rights, write to [CONTACT EMAIL].
We answer within one month.

9. Security

The site is served exclusively over an encrypted connection (HTTPS). Passwords are stored as
cryptographic hashes and cannot be read by us. Access to the video library is restricted to
members, and video files are served through expiring signed links so that they cannot be shared
or downloaded from outside the site. Access to our servers and database is limited to
authorised administrators.

No system is perfectly secure. If a breach ever affects your rights, we will notify you and
the competent authority as the law requires.

10. Children

The service is not directed at children under 16, and we do not knowingly collect their data.
If you believe a child has given us personal data, write to us and we will delete it.

11. Changes to this policy

We may update this policy. The date at the top always shows the current version. If a change
materially affects your rights, we will tell you by e-mail or through a notice on the site
before it takes effect.

12. Contact

Active Yogin — [LEGAL ENTITY NAME] [REGISTERED ADDRESS] [CONTACT EMAIL]