Privacy Notice - Liz Mellor Yoga

1. Who we are

This notice is issued by Liz Mellor Yoga ("we", "us", "our"), the data controller for personal data you provide when you use the Āsana/OS Service.

2. Data we collect

Account data - name, email, login credentials, profile details.
Content data - the class sequences, notes, and any content you create or publish within the Service.
Usage data - pages visited, features used, device and browser info, IP address, timestamps. Used to keep the Service running and improve it.
Support data - messages you send us for help, and our replies.
Payment data - handled directly by Paddle (our Merchant of Record). We only receive the subscription status, plan, and a Paddle customer/subscription reference - not your full card details.

3. Why we use it

To create and manage your account (contract performance).
To provide the Service and features you use (contract performance).
To keep the Service secure and prevent fraud or abuse (legitimate interests).
To improve the Service and understand how it's used (legitimate interests).
To respond to your support requests (contract performance).
To comply with legal obligations (e.g. tax, accounting) (legal obligation).

4. Who we share it with

Paddle - our Merchant of Record, for the sale of subscriptions, billing, tax compliance, invoicing, and refund handling.
Infrastructure providers - hosting, database, and analytics services that power Āsana/OS.
Professional advisers - legal, accounting, and audit advisers where necessary.
Authorities - where we are legally required to disclose data.

We do not sell your personal data.

5. Retention

We keep account and content data for as long as you have an active account. After you close your account, we delete or anonymise personal data within a reasonable period, unless we are required to keep it longer for legal, tax, or accounting reasons.

6. Your rights

Subject to your local law, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain uses. To exercise any of these rights, email us at hello@flowstateyoga.com. If you're in the UK or EEA, you can also complain to your local data protection authority.

7. International transfers

Some of our providers process data outside your country. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We use industry-standard technical and organisational measures - encryption in transit, access controls, and least-privilege backend access - to protect your data. No system is perfectly secure, but we take our responsibility seriously.

9. Cookies

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

10. Contact

Questions about this notice? Email hello@flowstateyoga.com.