Privacy
What I collect
If you write to me through the contact form, I keep your name, email address, phone number if you give one, how you'd prefer I reply, and your message.
If you book a session, I keep your name, email address, phone number if you give one, any notes you add, the session you booked, and whether you came.
Nothing is gathered in the background while you read. Signing in keeps a little more, and I set that out below.
Signing in
An account is optional and booking never asks for one. You can go on booking as a guest for as long as you like.
To sign in you give me an email address and I email you a link. The link works once and stops working after fifteen minutes.
The account itself keeps your email address, the fact that a link sent to it was followed, and when you last signed in. Everything it shows you comes from records I already keep: your bookings, any credit they have left you, and the contact details you gave me.
Signing in also leaves a record on my side that keeps you signed in on that device. That record holds the address your connection came from and which browser you used. Nothing like that is kept about a visitor who does not sign in.
If you lose a device or share one, email me. Ending every signed-in device on an account is something I can do, and it takes nothing else away; the next link I email you signs you back in.
What I don't do
This site runs no analytics and carries no advertising. Nothing here follows you to other websites. Ordinary browsing sets no cookies. Two things do: the spam check on the booking form may set one, and signing in sets one to keep you signed in.
I don't sell your details or hand them to anyone for marketing.
Photographs
I sometimes publish photographs of classes, and people in them are often recognizable. I ask before I take a photograph and before I put one on the site.
Published images live at public web addresses. Anyone holding the address can open the image, whether or not they came through this site.
If you are in a photograph here and would rather not be, email me at amy@gratefulheart.yoga and I will take it off the site. You don't need to give a reason.
Where it goes
Outside providers host the site and send my email. They handle your details only to provide those services, and for nothing of their own.
The booking form runs an automated check to keep spam out. That check is provided by an outside service and sees your browser's connection when it runs.
Booked sessions go onto my own calendar, but only the time and the kind of session. Names, email addresses, and phone numbers stay out of it.
Email from me
Confirmations and reminders for something you booked, and my replies to what you write, go out because you asked for them or because I owe them to you. Those reach you either way.
Anything else — the occasional note about classes and workshops — goes only to people who have said I may. You can say so from your account, or tell me in person and I'll record it myself. You can stop them again whenever you like, and you never need an account to do it.
I hold that permission against your email address rather than against you, so it stands on its own whatever else I do or don't have about you.
If you tell me to stop, I keep the record of you telling me, and I keep it for good. Letting it go would quietly hand back the permission you withdrew, and the next time I wrote to a group you would be on the list again. Keeping it is what keeps you off.
How long I keep it
I keep inquiries and booking records while I'm working with you, and afterwards for my own records. The counters that limit abusive traffic are short-lived, and the identifiers behind them are scrambled before storage rather than kept as readable addresses. Routine job logs are deleted after thirty days.
The record for a signed-in device lasts thirty days from the last time you used it. Come back inside that window and the thirty days start again; stay away and it stops working, and I delete it within a day. Signing in again starts a new one.
Asking me about it
Email amy@gratefulheart.yoga if you want to know what I hold about you, correct it, or ask me to remove it.
If you have an account you can also sign in and see much of it yourself: your bookings, and the contact details I hold, which you can change there. That used to mean writing to me; for photographs it still does.
