Privacy Notice

We Are Yoga Studio — www.weareyoga.studio

Last updated: 17 September 2026

In accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulation and the Privacy Notice Guidelines, Daniel Osuna Aguilera (hereinafter, "the Controller"), owner of the We Are Yoga Studio website, available at www.weareyoga.studio, makes this Privacy Notice available to you.

Identity and address of the Controller

The party responsible for the processing and protection of your personal data is Daniel Osuna Aguilera, with address at Plaza Kura, C. 10 C.22, Montebello, 97113 Mérida, Yucatán, Mexico. Contact email: hola@weareyoga.studio.

Personal data we collect

For the purposes stated in this notice, we collect the following personal data: name, address, telephone number, email address, user details and, where applicable, information relating to payments for the services contracted (amounts and payment references). Bank details are processed directly by our payment service providers and are not stored by the Controller.

Sensitive personal data

We inform you that, in order to provide our services properly and safely, we may collect the following sensitive personal data relating to your state of health: injuries or physical conditions, pregnancy, medical conditions and any other health information relevant to the practice of yoga.

This data will be used solely to adapt the practice to your physical condition, to safeguard your safety and wellbeing during classes and, where necessary, to act appropriately in an emergency. It will not be used for secondary purposes or transferred to third parties, except in the cases set out in article 37 of the LFPDPPP or where necessary for emergency medical care.

In accordance with article 9 of the LFPDPPP, the processing of sensitive personal data requires your express written consent, which will be obtained through your handwritten signature, electronic signature or the corresponding acceptance checkbox in our physical or digital forms. You may decline to provide this data; however, doing so may limit our ability to adapt the practice to your physical needs.

Purposes of processing

Primary purposes (necessary for the legal relationship between you and the Controller):

• To identify you as a user or customer of the site.
• To provide the services and handle the orders or bookings you request through the site.
• To process the corresponding payments.
• To adapt the practice of yoga to your physical condition and safeguard your safety during classes.
• To respond to your questions, requests and clarifications.
• To comply with the legal obligations applicable to the Controller.

Secondary purposes (not necessary for the provision of the service):

• To send you promotions, newsletters, news and advertising, by physical or digital means.
• To compile statistics and internal studies on the use of our services.

If you do not wish your personal data to be processed for the secondary purposes, you may state your refusal at any time by writing to hola@weareyoga.studio, without this affecting the provision of the services requested.

Cookies and tracking technologies

In accordance with article 14 of the Regulation to the Federal Law on the Protection of Personal Data Held by Private Parties, we inform you that this site uses cookies and similar technologies that collect data automatically while you browse, and we set out below how to disable them.

The data obtained through these technologies is: device and browser identifiers, IP address, pages visited, browsing time and user preferences.

Technologies we use

This site also uses FormSubmit (formsubmit.co) to send the contact forms, and Google Fonts to load the typefaces.

How to disable them

You may disable these technologies at any time by any of these means:

• From this site. Use the "Cookie preferences" link that appears in the footer of every page. From there you can enable or disable analytics and advertising independently. Disabling is as easy as enabling.
• From your browser. Chrome: Settings → Privacy and security → Cookies and other site data. Safari: Preferences → Privacy → Manage website data. Firefox: Settings → Privacy and security → Cookies and site data. Edge: Settings → Cookies and site permissions.
• Google Analytics add-on. You can install the official opt-out add-on available at tools.google.com/dlpage/gaoptout, which prevents data being sent to Google Analytics on every site you visit.

Please note that disabling the necessary cookies may prevent the booking system or the payment process from working correctly.

Data transfers and disclosures

Your personal data will not be transferred to third parties without your consent, except in the following cases:

• Service providers acting on behalf of and at the instruction of the Controller, as data processors and solely in accordance with our instructions. These providers may be located outside Mexico, so your data could be processed in other countries:
  • Fitco — booking and membership platform.
  • Stripe — payment processing and fraud prevention.
  • Google (Google Analytics and Google Tag Manager) — site usage statistics.
  • TikTok — measurement of advertising campaigns on TikTok.
  • Meta (Facebook and Instagram) — measurement of advertising campaigns on those networks.
  • FormSubmit — sending of the contact forms.
  • Vercel — website hosting.
• The cases provided for in article 37 of the LFPDPPP, including duly founded and justified requests from a competent authority.

Outside these cases, your data will be used exclusively for the purposes set out in this notice.

Retention period

We keep your personal data for as long as you have an active relationship with the studio. Once you leave: identification and billing data is kept for five years, a period derived from the tax obligations set out in article 30 of the Mexican Federal Tax Code; sensitive health data is deleted within three months of your leaving, since its purpose —adapting the practice to your physical condition and acting in an emergency— ends with the relationship; data processed on the basis of your consent for marketing communications is kept until you withdraw that consent. Once these periods elapse, the data is deleted or irreversibly dissociated.

ARCO Rights

You have the right at any time to know what personal data we hold about you, what we use it for and the conditions of its use (Access); to request the correction of your personal information when it is out of date, inaccurate or incomplete (Rectification); to have your information removed from our records or databases when you consider that it is not being used in accordance with the principles, duties and obligations set out in the law (Cancellation); as well as to object to the use of your personal data for specific purposes (Objection).

Exercising ARCO rights, revocation of consent and limitation of use

To exercise any of the ARCO rights, revoke your consent or limit the use or disclosure of your personal data, you must submit the corresponding request to the email address: hola@weareyoga.studio.

The request must contain: full name, telephone, email address and the content or reason for the request. Through the same address you may request information on the applicable procedure and requirements.

You will receive a reply within a maximum of 10 working days, to the email address you state in your request.

Regarding the revocation of consent, please note that we will not be able to accommodate your request or stop using your data immediately in all cases, since a legal obligation may require us to continue processing it. Likewise, for certain purposes, revocation will mean that we can no longer provide the service requested, or the end of your relationship with us.

Officer responsible for handling requests

• Name: Daniel Osuna Aguilera
• Address: Plaza Kura, C. 10 C.22, Montebello, 97113 Mérida, Yucatán, Mexico
• Email: hola@weareyoga.studio

Amendments to the Privacy Notice

This notice may be amended, changed or updated as a result of new legal requirements, our own needs in relation to the services we offer, our privacy practices or changes to our business model.

Any amendment will be published on this same page: www.weareyoga.studio. You may also request information about changes to this notice by writing to hola@weareyoga.studio.