Privacy Policy

Last Updated: 10/16/2020

1. General information

This Privacy Policy explains how Yoga Design Lab, Inc. ("Yoga Design Lab", "we" or "us") collects, uses, and discloses personal information about you when you use our websites, and other online products and services that link to this Privacy Policy (collectively, our "Services"), contact our customer service team, engage with us on social media, or otherwise interact with us.

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website homepage or sending you a notification). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

2. Information We Collect

Information You Provide to us

If you choose to submit information to us, we will collect it. For example: if you register for an account with us, we will collect your first and last name and email address.

Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions.

For EU residents, the processing of these data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your agreement (Art. 6 Para. 1 lit. a GDPR) if this has been requested.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions in particular retention periods.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, or another method (e.g., text message, WhatsApp) your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request.

For EU residents, these data are processed on the basis of Art. 6 Sect. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6 Sect. 1 lit. f GDPR) or on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR) if it has been obtained.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Registration on this Website

You have the option to register on this website to be able to use additional website functions. We will use the data you enter for the purpose of using the respective offer or service you have registered for. The required information we request at the time of registration must be entered in full. Otherwise we shall reject the registration.

To notify you of any important changes to the scope of our portfolio or in the event of technical modifications, we shall use the e-mail address provided during the registration process.

Comments

When you use the comment function on this website, information on the time the comment was generated and your e-mail-address and, if you are not posting anonymously, the username you have selected will be archived in addition to your comments.

For EU residents, comments are stored on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You have the right to revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Newsletters and Emails

If you would like to subscribe to any newsletters offered on this website, we will need an e-mail address as well as information that allows us to verify that you are the owner of the e-mail address provided and consent to the receipt of the newsletter.

For EU residents, the processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the "Unsubscribe" link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date.

Your information will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected. You can unsubscribe at any time by contacting us via the information listed in the "Contact Us" section below.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (for EU residents, legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is indefinite. For EU residents, you may object to the storage if your interests outweigh our legitimate interest.

Automatically Collected Information

We also collect your information automatically when you visit our website or otherwise interact with us online. This data comprises primarily technical information (e.g. web browser, operating system or time the site was accessed).

below on some specific categories of information we collect and how it is used and shared.

Cookies

Our websites and pages use what the industry refers to as "cookies." Cookies are small text files that websites like ours place on your device. hey may be served by the entity that operates the website you are visiting (these are called "first-party cookies") or by other companies (which are called "third-party cookies"). For example, we partner with third-party analytics providers which set cookies when you visit our websites. This helps us understand how you and others are using our website so that we can improve it. Cookies are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them or they are automatically eradicated by your web browser.

Cookies have a variety of functions. Many cookies are technically essential for certain website functions (e.g. the shopping cart function or the display of videos). The purpose of other cookies may be the analysis of user patterns or the display of promotional messages.

For EU residents, cookies that are required for the performance of electronic communication transactions (required cookies) or for the provision of certain functions you want to use ( functional cookies, e.g. for the shopping cart function) or those that are necessary for the optimization of the website ( analytic cookies),e.g. cookies that provide measurable insights into the web audience, are stored on the basis of our legitimate interests under Art. 6(1)(f) of the GDPR., unless a different legal basis is cited in our Cookie Policy . The operator of a website has a legitimate interest in the storage of cookies to ensure the technically error free and optimized provision of the operator's services.

If your consent to the storage of the cookies has been requested, the respective cookies are stored exclusively on the basis of the consent obtained (Art. 6(1)(a) of the GDPR) this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.

In the event that third-party cookies are used or if cookies are used for analytical purposes, we will separately notify you in conjunction with this Privacy Policy and, if applicable, ask for your consent.

You can find out more information about how we use cookies and exercise your choices by visiting our Cookie Policy, which is surfaced to new users or users who visit from a new browser.

 

Server and computer log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

  • The type and version of browser used
  • The used operating system
  • Referrer URL
  • The hostname of the accessing computer
  • The time of the server inquiry
  • The IP address
  • Other information provided by your device or ISP

For EU residents, the legal basis for the collection of this data is Art. 6(1)(f) of GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator's website. In order to achieve this, server log files must be recorded.

3rd Party Apps Within Shopify

In order to add additional functionality to this website, Yoga Design Lab has installed select 3rd party apps through Shopify which may in some cases use cookies for the purpose or remarketing. Below is a list of 3rd party app usage with links to their privacy policies for further information.

A2X

Ecommerce accounting integration provider. Privacy Policy here

Klaviyo

Email service provider that uses cookies and web tracking to improve email conversion rates and general performance. Privacy Policy here

Google

Google will use cookies to track customer behavior and connects to Shopify for a product feed for off-Shopify shopping. For information as to how Google uses cookies for Google Shopping please visit this page.

Facebook

Facebook will use cookies to track customer behavior and connects to Shopify for a product feed for off-Shopify shopping. For information as to how Facebook uses cookies for Facebook Shopping please visit this page.

GeoIP Country Redirect by Spice Gems

For additional information on how to adjust cookie settings in your browser, please visit the helpful links below.  
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-DE/topic/168dab11-0753-043d-7c16-ede5947fc64d
Mozilla Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop?redirectslug=cookies-erlauben-und-ablehnen&redirectlocale=de
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

3. Analytics, Advertising, and Social Media

We allow others to provide analytics services and serve advertisements on our behalf across the web and in mobile apps. These entities may use cookies, web beacons, device identifiers and other technologies to collect information about your use of our Services and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in mobile apps, links clicked, and conversion information. This information may be used by Yoga Design Lab and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites, and better understand your online activity. For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit https://optout.aboutads.info/ and https://www.youronlinechoices.com/ in the EU, or you can change your settings using the consent management tool on our website.

We also work with third parties to serve ads to you as part of customized campaigns on third party platforms (such as Facebook and Instagram). As part of these ad campaigns, we or third party platforms may convert information about you.

You can find out more information about some of our analytics, advertising, and social media partners below. For a full list, please review our consent management tool.

Facebook plug-ins (Like & Share button)

We have integrated plug-ins of the social network Facebook on this website. The provider of this service is Facebook. According to Facebook's statement the collected data will be transferred to the USA and other third-party countries too.

An overview of the Facebook plug-ins is available under the following link:

https://developers.facebook.com/docs/plugins/ . For more detailed information, please consult the Facebook's privacy policy at: https://www.facebook.com/privacy/explanation.

For EU residents, the use of the Facebook plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media. If a respective declaration of consent has been obtained, the data shall be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be revoked at any time.

Instagram plug-in

We have integrated functions of the public media platform Instagram into this website. These functions are being offered by Facebook. Facebook is an independent company and collects, uses, and shares your data for its own purposes.

For EU residents, data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the highest possible visibility on social media. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. Any such consent may be revoked at any time.

For more information on this subject, please consult Instagram's privacy policy at: https://www.instagram.com/about/legal/privacy/.

Pinterest plug-in

We use social plug-ins of the social network Pinterest on this website. The network is operated by Pinterest.

For EU residents, data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the highest possible visibility on social media. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. Any such consent may be revoked at any time.

For more information concerning the purpose, scope and continue processing and use of the data by Pinterest as well as your affiliated rights and options to protect your private information, please consult the privacy policy of Pinterest at:

https://policy.pinterest.com/en/privacy-policy .

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google. Google Analytics enables the website operator to analyze the behavior patterns of website visitors.

For EU residents, this analysis tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator's advertising activities. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=en .

For more information about the handling of user data by Google Analytics, please consult Google's privacy policy at:

https://support.google.com/analytics/answer/6004245?hl=en .

Google Ads and Remarketing

The website operator uses Google Ads. Google Ads is an online promotional program of Google. Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). Google Remarketing analyzes your interests (e.g. clicks on specific products) to display matching online offers to you when you visit other online offers (remarketing or retargeting).

For EU residents, the use of Google Remarketing is based on Art. 6 1 lit. et seq. GDPR. The website operator has a legitimate interest in the marketing of the operator's products that is as effective as possible. If a respective declaration of consent was requested, processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time.

If you have a Google account, you have the option to object to personalized advertising under the following link:

https://www.google.com/settings/ads/anonymous .

For further information and the pertinent data protection regulations, please consult the Data Privacy Policies of Google at:

https://policies.google.com/technologies/ads?hl=en .

Please review Google's privacy policy at: https://policies.google.com/privacy?hl=en

Facebook Pixel

To measure conversion rates, this website uses the visitor activity pixel of Facebook. The provider of this service is Facebook. According to Facebook's statement the collected data will be transferred to the USA and other third-party countries too. This tool allows the tracking of page visitors after they have been linked to the website of the provider after clicking on a Facebook ad. This makes it possible to analyze the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns.

For EU residents, the use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in effective advertising campaigns, which also include social media. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

You can review Facebook's privacy policy here at:

https://www.facebook.com/about/privacy/ .

You also have the option to deactivate the remarketing function "Custom Audiences" in the ad settings section under https://www.facebook.com/adpreferences/?entry_product=ad_settings_screen . To do this, you first have to log into Facebook.

If you do not have a Facebook account, you can deactivate any user based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance:

https://www.youronlinechoices.com/de/praferenzmanagement/ .

YouTube

This website embeds videos of the website YouTube. The website operator is Google.

If you visit a page on this website into which YouTube has been embedded, a connection with YouTube's servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited.

Furthermore, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website's visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.

If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.

For EU residents, the use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest. If a corresponding agreement has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

For more information on how YouTube handles user data, please consult the YouTube privacy policy at:

https://policies.google.com/privacy?hl=en .

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter referred to as "reCAPTCHA") on this website.

The purpose of reCAPTCHA is to determine whether data entered on this website (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.

In the EU, data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the protection of the operator's websites against abusive automated spying and against SPAM. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. Any such consent may be revoked at any time.

For more information about Google reCAPTCHA please refer to the Google privacy policy and Terms Of Use under the following links:

https://policies.google.com/privacy?hl=en and

https://policies.google.com/terms?hl=en .

Amazon partner program

The operators of this website participate in the Amazon partners' program. Amazon integrates ads and links to the Amazon website - Amazon.com - into this website, which allows us to generate earnings in the form of advertising cost reimbursements. Amazon uses cookies or comparable technologies for recognition for this program to be able to determine the source of orders placed. This allows Amazon to determine that you have clicked the partner link on this website.

For EU residents, data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the correct calculation of the operator's affiliate compensation. If a respective declaration of consent has been obtained (e.g. consent to the archiving of cookies), the data will be processed exclusively on the basis of Art. 6 Sect. 1 GDPR. Any such consent may be revoked at any time.

For more information on Amazon's data usage, please consult Amazon's privacy policy at the following link:

https://www.amazon.com/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=468496 .

4. eCommerce and payment service providers

Processing of data (customer and contract data)

We collect, process and use personal data to process and fulfill your purchases and inquiries about your orders.

Data transfer upon closing of contracts for online stores, retailers and the shipment of merchandise

We share personal data with third parties in conjunction with the handling of the contract; for instance, with companies entrusted with the shipment of goods or the financial institution tasked with the processing of payments.

In the EU, the basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions. The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.

Payment services

We integrate payment services of third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, bank account details, credit card number) are processed by the payment service provider for the purpose of payment processing. For these transactions the respective contractual and data protection provisions of the respective providers apply. For EU residents, the use of the payment service providers is based on Art. 6(1)(b) GDPR (contract processing) and in the interest of a smooth, convenient and secure payment transaction (Art. 6(1)(f) GDPR). Insofar as your consent is requested for certain actions, Art. 6(1)(a) GDPR is the legal basis for data processing; consent may be revoked at any time for the future.

We use the following payment services / payment service providers within the scope of this website: Stripe

The provider for customers within the EU is Stripe Payments Europe, Ltd,1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter "Stripe"). Details can be found in Stripe's Privacy Policy at the following link:

https://stripe.com/gb/privacy .

5. How We Share Your Information

We share personal information in the following circumstances and as otherwise described in this policy:

    • With vendors, service providers, and consultants that need access to personal information in order to perform services for us, such as companies that assist us with web hosting, shipping and delivery, payment processing, fraud prevention, customer service, and marketing and advertising;
    • With other users of our Services, such as if you submit a product review or post content in a public area of our Services;
    • With third parties for their own services and marketing purposes, unless you opt out of this type of sharing by following the opt out instructions referenced above;
    • In response to a request for information if we believe disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements;
    • If we believe your actions are inconsistent with our user agreements or policies, if we believe you have violated the law, or to protect the rights, property, and safety of Yoga Design Lab or others;
    • With our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests;
    • In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company;
    • Between and among Yoga Design Lab and our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership; and
    • With your consent, at your direction or as otherwise permitted by law.
    • We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

    6. Data Retention

    Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

    7. Information about data transfers to the USA

    We are headquartered in the U.S., and our website uses tools from other companies based in the U.S. When these tools are active, your personal information may be transferred to the U.S. servers of these companies. Therefore, we and our service providers may transfer your personal information to, or store or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it.

    8. Your GDPR Rights

    Your Rights and Choices

    You have the right to access the personal information we hold about you and to ask us to correct, erase, or, in some situations, transfer it to another provider. You may also have the right to withdraw your consent to processing, object to, or request that we limit or restrict certain processing of your personal information as described below.

    Access and Deletion Requests

    You can request to update, correct, or delete information we have about you or close your account by contacting us as indicated in the Contact Us section below with the subject line "Data Protection Rights". When necessary to identify you, we will request that you give proof of your identity or require more information from you that is necessary to handle your request.

    Emails, Text Messages

    When you consent, we may send you promotional emails or text messages. You can opt out of such messages by following the instructions in those messages. If you opt out of receiving promotional emails from us, we may still send you non-promotional emails.

    Mobile push notifications

    When you consent, we may send promotional and non-promotional push notifications or alerts to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device.

    Cookies and similar technologies

    For information about the choices you have regarding our use of cookies, including how to block cookies or withdraw consent to certain types of cookies and other similar technologies, please see the information above or visit our Cookie Policy.

    Revocation of your consent to the processing of data

    A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

    Right to Lodge a Complaint with a Data Protection Supervisory Agency

    EU individuals are entitled to lodge a complaint with a data protection supervisory agency about violations of the GDPR, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

    9. Contact Us

    Please do not hesitate to contact us at any time at this address if you have questions about this or any other data protection related issues.

    Yoga Design Lab, Inc
    780 Corporate Woods Pkwy
    Vernon Hills, IL 60061
    United States Of America

    E-mail: info@yogadesignlab.com