Privacy notice

Draft for review

This text is a draft prepared for review. It is not yet the studio’s final privacy notice.

Before it is published, a Mexican lawyer or contador has to check it. At least the following are still to be confirmed: how long data is kept, the statutory deadlines for answering an ARCO request, which authority a complaint can be taken to, the responsable’s registered legal name if it differs from the trading name, and whether the studio wants to use contact details for announcements or promotions. What the hosting provider logs also needs confirming.

Delete this box once the notice has been reviewed and approved.

Who is responsible

The party responsible for handling your personal data is Sayulita Yoga Fit, at 45 Punta de Mita, Sayulita, Nayarit 63734, Mexico.

For anything to do with this notice, email [email protected] or send a WhatsApp message to +52 322 198 5481.

What we collect

If you book by WhatsApp, only what is needed to hold a place in a class for you:

• your name, or the name you want the place held under;
• your phone number, because the booking is agreed over WhatsApp;
• your email address, only if you write to us by email rather than WhatsApp.

If you book and pay online, the booking form collects:

• your name and email address;
• your WhatsApp number, if you choose to add one;
• any notes you add, such as an injury or a child’s name;
• the class and date you are booking;
• the internet address (IP address) the booking was made from, kept for fraud prevention.

Card payments are processed by Mercado Pago, on its own pages. This website never receives or stores your card number: Mercado Pago’s own privacy notice covers that part of the process. We do not otherwise ask for sensitive personal data. Health information you volunteer, whether over WhatsApp or in the online notes field, is used only to help the teacher adapt the class; over WhatsApp it is not kept in any record beyond the conversation, and in the online notes field it is stored with your booking for the retention period described below.

What the website collects

The pages themselves set no cookies and run no analytics. The only data the website collects is what you type into the booking form, described above.

• It sets no cookies of its own.
• It runs no analytics or measurement tools.
• It loads no third-party scripts and no third-party fonts.
• There is no advertising and there are no social media pixels.

Everything you see on this page is served from this domain. The one thing that can come from somewhere else is a video: where an article on this site embeds one, the still image is loaded from YouTube’s servers, and the player itself loads only if you press play. Until you press play, YouTube receives nothing from you beyond the request for that still image. If you press play, you are using YouTube, under Google’s rules and not ours.

The links to WhatsApp, Instagram and Facebook are ordinary links. Follow one and you leave this site for another company’s service, under that company’s rules.

The hosting provider that serves this page may log technical connection data such as your IP address in order to run and protect the service. That log belongs to the provider, not to the studio. This is separate from the booking’s IP address described above: when you book online, that address is recorded deliberately by our own booking system, kept with your booking record, and used for fraud prevention rather than for running the site.

What we use it for

For this and nothing else:

• holding and confirming your place in a class;
• answering your questions;
• telling you if the class you booked changes time or does not run.

We do not sell your data. We do not trade it. We do not use it for advertising.

Who it is shared with

Nobody, with these exceptions:

1. WhatsApp. Bookings are agreed there, so your message passes through the WhatsApp service, operated by Meta, under its own terms. If you would rather not use it, email us at [email protected].
2. Mercado Pago. Card payments for online bookings are handled entirely on Mercado Pago’s own pages; see “What we collect” above for how that works.
3. Resend. Confirmation and cancellation emails for online bookings go out through Resend, an email delivery service, on our behalf.
4. A competent authority. If an authority requires information from us in the exercise of its powers, the law obliges us to hand it over.

We transfer your data to no one else for any other purpose, inside or outside Mexico.

How long we keep it

We keep your data for as long as it is needed to provide the service, which means while you are taking classes with us and for as long as the law requires us to keep it.

Booking data from the online booking form, meaning your name, email, WhatsApp number if you gave one, notes and the IP address the booking was made from, is kept for 12 months after the date of the class, then deleted or anonymised.

The retention period for data given over WhatsApp is still to be confirmed and will be stated here before the final version of this notice is published. You can ask us to delete your data sooner, as set out below.

Your ARCO rights

Mexican law gives you four rights over your personal data:

• Access: to know what data of yours we hold and what we do with it.
• Rectification: to have it corrected if it is wrong or incomplete.
• Cancellation: to ask us to delete it.
• Opposition: to ask us to stop using it for a particular purpose.

You can also withdraw your consent at any time.

How to exercise them

Send your request either way:

• by email to [email protected]
• by WhatsApp to +52 322 198 5481

Tell us your name, which right you want to exercise and which data you mean, and leave us a way to reply. We may ask you to prove who you are before we answer, because we cannot hand your data to somebody else.

If you are not satisfied with our answer, you can take the matter to the competent data protection authority.

How you give consent

When you send us a message with your details to book a class, and you do not object to this notice, we take it that you consent to your data being handled as described here.

Changes to this notice

If we change anything, the new version is published on this same page. The version in force is always the one you are reading. It is worth checking again if the way we work changes, as it did on 26 September 2026 when we introduced online booking and card payment through Mercado Pago.

The Spanish and English versions say the same thing. If they ever differ, the Spanish version is the one that counts.