1. Controller and contact
The controller is Aram Jalilvand, operating Turiya Yoga School in Warsaw, Poland. Privacy questions and requests can be sent to turiyayogaschool@gmail.com.
This notice is effective from 19 July 2026.
2. Information we process
- Account data: name, email, profile image, authentication provider, Firebase user ID and email-verification status.
- Profile and booking data: phone, city, emergency contact, programme, attendance status and payment or delivery information when applicable.
- Information you voluntarily share about injuries, accessibility or health needs. Please provide only what is necessary for safe participation.
- Messages, newsletter preferences, free-resource requests and consent records.
- Basic technical and security data created by hosting and authentication services, such as timestamps, device or request information and security logs.
3. Why and on what basis
- To create and secure your account, confirm your email and provide booked services: performance of a contract and legitimate interests in account security.
- To organise safe participation, answer messages and administer bookings: contract steps, legitimate interests and, for health information you choose to provide, your explicit consent or another basis permitted by law.
- To meet tax, accounting, consumer and legal obligations: compliance with law.
- To send newsletters and optional practice resources: consent, which can be withdrawn at any time without affecting earlier lawful processing.
- To protect the website, prevent abuse and understand essential service performance: legitimate interests in reliable and secure operation.
4. Service providers and links
Turiya uses Google Firebase for authentication and database services, Vercel for website hosting, and Resend when configured to deliver requested emails. These providers act under their own data-protection commitments and may process data outside the European Economic Area using recognised safeguards.
Some programme buttons open third-party websites such as Yestem Yoga. Turiya does not send your account data through those links; information you submit there is governed by that provider’s privacy notice.
5. Retention
Account data is kept while the account is active and then only as needed for security, claims or legal duties. Booking and transaction records are retained for statutory accounting and claims periods. Contact messages are normally kept for up to 24 months after the conversation ends. Newsletter data is kept until consent is withdrawn or the address becomes permanently inactive. Optional health notes are restricted and removed when no longer needed for the event, subject to necessary legal claims periods.
6. Your choices and rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent at any time and complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO). Turiya normally responds within one month and may need to verify your identity first.
Send a request to turiyayogaschool@gmail.com. Newsletter messages will also include an unsubscribe route when email delivery is active.
7. Account identity and security
Email/password accounts must confirm their email address before access. Google sign-in and password sign-in are linked to the same verified address wherever Firebase can safely establish ownership, so one person keeps one account and one user ID. Never share your password or email-verification link.