top of page

PRIVACY POLICY

Last Updated: August 29, 2026

 

Hortari Studio (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book yoga classes or workshops, subscribe to our newsletter, or otherwise engage with our services.

 

Please read this policy carefully. If you have any questions, you can contact us at emma@hortari-studio.com.

 

1. Data Controller Details

For the purposes of the General Data Protection Regulation (GDPR) and applicable data protection legislation, the Data Controller is:

 

  • Entity Name: Hortari Studio

  • Contact Person: Emma Plantin

  • Contact Email: emma@hortari-studio.com

  • Primary Locations of Operation: Amsterdam & Utrecht, The Netherlands

     

2. Information We Collect

We collect personal data that you voluntarily provide to us, as well as certain technical data collected automatically when you use our website.

 

A. Information You Provide to Us

  • Identity & Contact Data: Name, surname, and email address provided when booking an event, reserving a class, or subscribing to our newsletter.

  • Booking & Transaction Details: Date, time, location, and specific session or workshop booked.

  • Demographic & Feedback Data (Optional): Age, health preferences, or survey responses voluntarily provided to help us tailor our community offerings.

     

B. Information Collected Automatically

  • Technical & Usage Data: IP address, browser type, operating system, referring URLs, page views, and website navigation patterns collected via host logs and analytical tools.

Special Category Data Note: We do not intentionally collect health or medical data. If you voluntarily disclose physical conditions or injuries to help us adapt your yoga practice, we treat this information with strict confidentiality and process it only with your explicit consent.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal grounds provided by Article 6 of the GDPR:

 

  1. Consent (Art. 6(1)(a)): When you opt in to receive marketing, newsletters, or fill out optional community surveys. You may withdraw consent at any time.

  2. Contractual Necessity (Art. 6(1)(b)): When processing is necessary to complete your class booking, manage reservations, or provide requested services.

  3. Legitimate Interests (Art. 6(1)(f)): To optimize website functionality, ensure network security, maintain business accounting, and improve our services and student experience.

  4. Legal Obligation (Art. 6(1)(c)): To comply with applicable tax, legal, or financial reporting requirements.

     

4. How We Use Your Information

We use your personal information strictly for clear and legitimate purposes:

  • To manage, schedule, and confirm your yoga class and event bookings.

  • To communicate essential updates regarding your schedule or location changes.

  • To send newsletter updates, seasonal themes, and offerings (only where explicit consent is granted).

  • To understand our community demographics and improve our class offerings.

  • To ensure technical security, prevent fraud, and maintain website stability.

  • To fulfill tax, accounting, and legal requirements.

     

5. Third-Party Service Providers (Data Processors)

We never sell or rent your personal data to third parties. We share data only with trusted third-party service providers who act as data processors under contract and are bound by strict security obligations:

 

Provider Purpose Location / Compliance:

  • WixWebsite hosting and content deliveryEU / International (SCCs)

  • Zoho MailProfessional email hosting and communications EU / International (GDPR Compliant)

  • bookaLeap Class scheduling and booking management EU / International (GDPR Compliant)

  • Mailchimp Newsletter collection and email automation EU / International (SCCs)

 

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards—such as Standard Contractual Clauses (SCCs)—are in place.

 

6. Cookies and Tracking Technologies

Our website hosted on Wix uses essential cookies for security, system performance, and basic functionality. Non-essential cookies (such as analytics or marketing cookies) are only deployed with your consent via our cookie banner. You can manage or disable cookies directly in your web browser settings.

 

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

 

  • Booking & Transaction Records: Stored for up to 2 years following your last attended event (or up to 7 years for financial records required by Dutch tax authorities).

  • Newsletter Subscriptions: Retained until you click "unsubscribe" or request deletion.

  • Survey & Demographic Data: Anonymized or permanently deleted after 12 months.

     

8. Your Legal Rights (EU & GDPR)

Under EU data protection laws, you possess the following rights regarding your personal data:

 

  • Right of Access: Request a copy of the personal data we hold about you.

     

  • Right to Rectification: Request correction of inaccurate or incomplete data.

     

  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data when it is no longer needed.

     

  • Right to Restrict Processing: Request temporary restriction of data processing under certain conditions.

     

  • Right to Data Portability: Request transfer of your data to another provider in a structured format.

     

  • Right to Object: Object to processing based on legitimate interest or direct marketing.

     

  • Right to Withdraw Consent: Unsubscribe or revoke consent at any time without affecting prior lawful processing.

     

To exercise any of these rights, please email us directly at emma@hortari-studio.com.

 

9. Supervisory Authority & Complaints

If you believe your personal data is being processed in violation of the GDPR, you have the right to lodge a complaint with a supervisory authority. In the Netherlands, the relevant authority is:

 

Autoriteit Persoonsgegevens (AP)

 

Website: autoriteitpersoonsgegevens.nl

 

10. Data Security

We implement technical and organizational security measures—including SSL encryption, secure passwords, and restricted access protocols—to protect your personal information. However, no internet transmission or storage method is 100% secure, and we cannot guarantee absolute security.

 

11. Children’s Privacy

Our services are intended for individuals aged 16 and older. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal information, we will delete it immediately.

 

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Updated versions will be published directly on this page with an updated "Last Updated" date.

 

13. Contact Us

If you have questions, feedback, or requests regarding this Privacy Policy or your personal data:

 

bottom of page