1. Who I Am

Hi, I'm Layla! I run With Layla, a small yoga business offering classes, workshops, and private sessions.

Contact me: contact@withlayla.com

2. What Data I Collect

I collect and process the following personal data:

• Account Information: Name, email address, password (encrypted)
• Booking Information: Service bookings, appointment dates/times, special requests
• Marketing Preferences: Email consent for newsletters and event updates (only if you opt-in)
• Contact Form Submissions: Name, email, message content
• Technical Data: Session cookies for authentication, IP address (server logs)

3. Legal Basis for Processing (UK GDPR)

I process your personal data under the following lawful bases:

• Contractual Necessity: Processing bookings and providing services you've requested
• Consent: Sending marketing emails (you can withdraw anytime)
• Legitimate Interests: Improving my services, responding to inquiries

4. How I Use Your Data

• To create and manage your account
• To process and confirm bookings
• To send booking confirmations and reminders
• To send marketing emails (only with your consent)
• To respond to contact form inquiries
• To improve my website and services

5. Data Sharing

I do not sell your personal data to third parties.

I may share data with:

• Email Service Provider: AWS SES (for sending emails)
• Database Provider: Turso (for secure data storage)
• Legal Requirements: If required by law or to protect my legal rights

All third-party processors are GDPR-compliant and use appropriate security measures.

6. Data Retention

We retain your data for:

• Active accounts: As long as your account is active
• Booking records: 7 years (for financial and legal compliance)
• Marketing data: Until you unsubscribe
• Contact inquiries: 2 years unless you request deletion

7. Your Rights (UK GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to marketing emails (click "unsubscribe")
• Withdraw Consent: Unsubscribe from marketing at any time

To exercise these rights, contact us at contact@withlayla.com

8. Cookies

I use essential cookies for authentication and website functionality. See my Cookie Policy for details.

9. Data Security

We implement industry-standard security measures including:

• Encrypted passwords (bcrypt hashing)
• HTTPS encryption for all data transmission
• Secure database access controls
• Regular security updates

10. Children's Privacy

My services are not intended for children under 16. I do not knowingly collect data from children under 16 without parental consent.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

12. Complaints

If you're unhappy with how we handle your data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113