1. Information We Collect

1.1 Information You Provide

When you register an account, place an order, subscribe to our newsletter, or contact customer service, we may collect the following:

Identity Information: Name, email address, phone number, shipping address
Account Information: Username, password (stored with one-way encryption)
Order Information: Products purchased, order amount, order number
Payment Information: Credit/debit card number, expiration date (transmitted via encryption; processed directly by our payment processors — we do not store full card numbers)
Communication Information: Any information you provide via contact forms, email, or customer support

1.2 Information Collected Automatically

Browsing Data: IP address, browser type, operating system, access timestamps, pages viewed
Cookie Data: Session identifiers, shopping cart contents, preferences (see Section 6)
Device Information: Device model, screen resolution, language settings

2. How We Use Your Information

Purpose	Legal Basis (EEA Users)
Processing and shipping your orders	Contract performance
Creating and managing your account	Contract performance
Processing payments and refunds	Contract performance
Sending order confirmations and shipping updates	Contract performance
Customer support and after-sales service	Legitimate interest
Marketing and promotions (only with your consent)	Consent
Website security and fraud prevention	Legitimate interest
Analyzing and improving the website experience	Legitimate interest
Compliance with legal obligations	Legal obligation

3. Information Sharing & Disclosure

We do not sell your personal information. We only share it in the following circumstances:

Recipient Type	Information Shared	Purpose
Payment processors (Stripe, PayPal, etc.)	Name, address, card details	Processing payments
Shipping carriers	Name, address, phone number	Delivering products
Email service providers	Email address	Sending order notifications
Hosting/cloud service providers	All stored data	Website operation
Legal/regulatory authorities	As required by law	Compliance

All third parties are bound by data processing agreements ensuring a commensurate level of protection.

4. Data Retention

Data Type	Retention Period
Account information	Duration of account activity + 30 days after deletion
Order records	7 years (tax compliance)
Payment information (card numbers)	Not stored — only transmitted at the time of transaction
Marketing consent records	Retained indefinitely until consent is withdrawn
Customer service communications	2 years after case closure
Website logs	90 days

5. Your Rights

Depending on your jurisdiction, you may have the following rights:

Right	Description
Right of Access	Obtain a copy of the personal data we hold about you
Right to Rectification	Correct inaccurate personal information
Right to Erasure	Request deletion of your personal data
Right to Restrict Processing	Limit how we process your data
Right to Data Portability	Receive your data in a structured, commonly used format
Right to Object	Object to processing based on legitimate interests
Right to Withdraw Consent	Withdraw marketing consent at any time

To exercise any of these rights, please contact us at hansdayoga@gmail.com.

EEA users also have the right to lodge a complaint with their local data protection supervisory authority.

6. Cookie Policy

Cookie Type	Purpose	Duration
Strictly Necessary	Shopping cart, login, checkout functionality	Session
Preference	Language and currency settings	30 days
Analytics	Google Analytics, visitor statistics	Up to 2 years
Marketing	Personalized recommendations and remarketing	Up to 90 days

You may disable cookies in your browser settings; however, this may affect certain website functions.

7. Security Measures

Site-wide TLS/SSL encryption (HTTPS)
Payment card data is never stored on our servers — handled directly by PCI DSS certified payment processors
Passwords are stored using bcrypt one-way hashing
Regular security scanning and vulnerability patching
Access control: only authorized personnel may access the administration panel

8. Children's Privacy

Hansda Yoga does not knowingly collect personal information from individuals under the age of 16. If we discover that we have inadvertently collected such data, we will delete it within 72 hours. If you are a parent or guardian and believe your child has provided us with information, please contact us immediately.

9. Sanctions & Restricted Regions

Hansda Yoga strictly complies with international sanctions laws and regulations.

We do not support, do not provide services to, and do not process orders from users in the following sanctioned countries and regions:

Iran
North Korea
Syria
Cuba
Crimea Region
Donetsk People's Republic
Luhansk People's Republic
Any country, region, or entity designated on sanctions lists maintained by the United Nations Security Council, U.S. OFAC, European Council, or UK HM Treasury

Enforcement Measures:

Restricted-region users are identified at registration via IP address and shipping address
Account creation, login, and order submission are prohibited from the above regions
Any order identified as originating from a restricted region will be automatically cancelled and fully refunded
We do not collect, store, or process any personal data from sanctioned regions beyond the minimum necessary to process a refund
We reserve the right to update this list at any time in accordance with applicable sanctions regimes

Should relevant sanctions be lifted, service to the corresponding region will be restored automatically.

10. International Data Transfers

Our servers may be located in US. If you access this website from another region, your data may be transferred to and stored in that location. We will implement appropriate safeguards (such as Standard Contractual Clauses) to ensure your data receives a level of protection equivalent to that in your home jurisdiction.

11. Third-Party Links

This website may contain links to third-party websites (e.g., social media platforms, payment gateways). We are not responsible for the privacy practices of those websites. Please review each third party's respective privacy policy.

12. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be communicated via:

A prominent notice on our website
Email notification (for registered users)
Updated "Last Updated" date at the top of this page

Continued use of the website following an update constitutes acceptance of the revised policy.

13. Contact Us

For any questions, requests, or complaints regarding this Privacy Policy, please contact:


Email	hansdayoga@gmail.com
Company Address	1013 GEYLANG EAST AVENUE 3, #06-104, GEYLANG EAST INDUSTRIAL ESTATE,SINGAPORE 389728
Website	https://hansdayoga.com/