SARA SHANTI YOGA · SOUTHAMPTON
Privacy Notice
Last updated: 3 November 2026
This notice explains how personal information is handled when you visit this website, enquire about a class or contact Sara Shanti Yoga. It is written for visitors in the United Kingdom.
1. Who is responsible for your information?
The data controller is Sara Lasca, an individual operating under the name Sara Shanti Yoga (“Sara”, “I”, “me” or “the business”). For privacy questions or requests, contact info@sarashanti.com.
2. Personal information we collect
- Enquiries: your name, email address, the class or package you are interested in, and the message you choose to send through the contact form.
- Website analytics, only if you consent: a randomly generated pseudonymous browser identifier, pages viewed, timestamp, referring website or campaign source, device category, and approximate country/city derived by the hosting platform. The analytics application does not store your IP address.
- Technical and security information: information processed by the hosting and security providers when delivering the website, which may include IP address, browser and request information in their infrastructure logs.
- Privacy choices: a small local browser-storage record that remembers whether you accepted or rejected optional analytics.
Please do not include detailed medical records or other sensitive personal information in a general website enquiry. If you choose to tell Sara about an injury, health concern or access need relevant to a class, that information may reveal health data. Share only what is necessary; it will be used only to respond to your request and consider class arrangements.
3. Why we use information and our lawful bases
- Responding to enquiries and handling class requests: to take steps at your request before entering an arrangement, and where applicable to perform an agreement (UK GDPR Article 6(1)(b)).
- Keeping correspondence and basic business records: legitimate interests in managing the yoga activity, responding to follow-up questions and keeping appropriate records (Article 6(1)(f)), or compliance with a legal obligation where applicable (Article 6(1)(c)).
- Optional website analytics: your consent (Article 6(1)(a)) and the applicable PECR consent requirements. Analytics are not activated before you opt in.
- Website delivery, security and abuse prevention: legitimate interests in operating and protecting the website and its services (Article 6(1)(f)).
4. Contact form and email
When you submit the contact form, the information is sent to the website contact service hosted on Cloudflare Workers and forwarded using Resend to the business email inbox. The email address you provide is used to reply to you. Do not use the form for emergencies; it is not monitored as an emergency service.
5. Website analytics
If you accept analytics, the site creates a random identifier in your browser's local storage and sends page-view information to a Cloudflare Worker connected to a Cloudflare D1 database. The report is used to understand overall website traffic, popular pages, broad traffic sources and device categories. The analytics application does not intentionally collect names, email addresses or full IP addresses. Cloudflare may process network information, including IP addresses, transiently to deliver and secure its services.
If you reject analytics, or later withdraw consent, the analytics code does not send page-view events. Withdrawing consent also removes the browser's analytics identifier on that device. Your choice applies to that browser; repeat it on other devices or browsers you use.
6. Service providers and international transfers
Personal information may be handled by providers needed to operate the website and communications, including GitHub Pages (website hosting), Cloudflare (domain, security, Workers and database services) and Resend (transactional email delivery). These providers act according to their own service terms and, where applicable, data-processing terms.
Some providers or their infrastructure may process information outside the United Kingdom. Where a restricted international transfer takes place, the relevant provider must rely on a lawful UK transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, as applicable. You can contact Sara for further information about the safeguards relevant to a particular request.
7. How long information is kept
Enquiry correspondence is kept for as long as reasonably necessary to handle the enquiry, any resulting class arrangement and related follow-up, and then deleted or securely disposed of unless a longer period is required by law or needed to establish, exercise or defend legal claims. Analytics records are retained only for as long as needed for the stated statistical purpose and are reviewed periodically. Browser consent preferences remain on your device until cleared or replaced.
8. Your UK data protection rights
Subject to the conditions and exemptions in data protection law, you may ask to access, correct or erase personal information, restrict or object to certain processing, or receive information you provided in a portable format. Where processing relies on consent, you can withdraw it at any time; this does not affect processing carried out before withdrawal.
To exercise a right, email info@sarashanti.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. The ICO is the UK supervisory authority for data protection.
9. Children
This website and the advertised classes are intended to be used by adults. The contact form is not designed to collect children's information. If you believe a child has submitted personal information, please contact Sara so the matter can be reviewed.
10. Changes to this notice
This notice may be updated when the website, services or applicable legal requirements change. The latest version and its review date will always be published on this page.