Privacy notice — Newsletter
How we handle your newsletter data
Last updated: 2026-08-05
1. Who's the data controller?
{{DATA_CONTROLLER_NAME}}, Hatha Yoga instructor operating as an independent sole trader (French auto-entrepreneur regime), registered at {{DATA_CONTROLLER_ADDRESS}} (SIREN {{DATA_CONTROLLER_SIREN}}), acts as the controller for the data collected via this website.
For any question about your data: jitendranitrr13@gmail.com.
Given the size of the activity (single sole trader), no Data Protection Officer (DPO) is required under Article 37 GDPR.
2. What we collect, and why
If you choose to sign up to the newsletter via the invitation popup, we collect:
- your email address;
- the date and time of your signup;
- your preferred language (FR or EN), inferred from the page you signed up on;
- a technical consent proof (HMAC-SHA-256 fingerprint of your IP + the version of the consent text you accepted). We do not store your IP address in clear.
Single purpose: to send you occasional (typically monthly) updates about upcoming sessions, including adapted or accessibility-friendly ones.
Legal basis: your consent (GDPR Article 6(1)(a)), evidenced by the checkbox you actively ticked and by the click on the confirmation link we sent by email (double opt-in).
3. A small technical marker in your browser
When you dismiss the popup or subscribe, a flag called yj_popup_seen is stored in your browser's local
storage (localStorage) so the popup won't reappear for 30 days. This flag only holds the value 1,
never leaves your browser, and has no other purpose. It is exempt from prior consent under Article 82 of the French
Data Protection Act, category "trackers strictly necessary to provide a service explicitly requested by the user"
(in this case: your choice not to see the popup again).
4. Where your data lives
- Email + signup record: at Brevo (Sendinblue SAS, a French company headquartered in Paris, servers in France and Germany). Brevo's privacy policy: brevo.com/legal/privacypolicy. A GDPR-compliant Data Processing Agreement is in place.
- Technical consent proof: at Cloudflare (Workers KV), written with an EU-region preference. See: cloudflare.com/trust-hub/gdpr.
No newsletter-related data is transferred outside the European Union.
5. How long we keep your data
- Email in the mailing list: as long as you stay subscribed. After you unsubscribe, a 30-day grace period (to catch accidental unsubscribes), then permanent deletion.
- Consent proof record: 3 years from your signup, matching CNIL's recommended maximum for commercial email prospection.
- Anti-abuse rate-limit counter: 1 hour.
6. Your rights
You have the following rights at any time (GDPR Articles 15–22):
- Access — see what we hold.
- Rectification — correct anything inaccurate.
- Erasure — request complete deletion.
- Portability — receive your data in a machine-readable format.
- Object — decline further messaging (every email carries a one-click unsubscribe).
- Complaint — file a complaint with the CNIL: cnil.fr/en/plaints.
7. Manage my data
Three ways, from fastest to fullest:
- Fast: click the "Unsubscribe" link in any email — deletion is immediate.
- Full: use the form below. We'll send you a magic link (valid 30 minutes) to a page where you can view or delete your data.
- Manually: email jitendranitrr13@gmail.com.
8. Changes to this notice
Any material change will be dated at the top. We'll notify you by email if the change affects the processing purpose or your rights.