Privacy Policy

The Kriya Yogi is the data controller for personal data collected through this website. You can reach us at any time through our contact page.

Messages you send us. When you contact us, we receive the name, email address and message you provide. We use this only to reply to you. Legal basis: legitimate interest in responding to your enquiry.

Shop orders. When you buy from our shop, your order, contact and delivery details are processed by Shopify, our commerce provider, and payment details are handled directly by the payment provider. We never see or store your card numbers. Legal basis: performance of a contract.

Shopping cart. Your cart is stored in your own browser's local storage so it survives between visits. This data stays on your device and is not sent to us.

Account data. If an account area is offered, your login details are handled by our authentication provider. We store only what is needed to run your account. Legal basis: performance of a contract.

Technical logs. Like almost every website, our hosting providers keep short-lived server logs (such as IP address and browser type) for security and troubleshooting. Legal basis: legitimate interest in keeping the site secure.

We do not sell your personal data. We do not share it with advertisers. We do not run third-party advertising or cross-site tracking on this site.

This site uses a small number of cookies and browser storage items — for example to keep your cart and remember your cookie choice. Details are in our Cookie Policy.

We use a small number of service providers who process data on our behalf:

• Hosting and content delivery (to serve the website to you)
• Database and authentication provider (to store site content and accounts)
• Shopify (to run the shop and checkout)
• Payment providers (to process payments securely)
• Google Fonts (to display the site's typography)

Each provider processes data only as needed to deliver their service and under their own privacy terms.

Some of our providers process data outside the European Economic Area. Where they do, transfers are protected by appropriate safeguards such as standard contractual clauses approved by the European Commission.

Contact messages are kept only as long as needed to handle your enquiry and any follow-up. Order records are kept for the period required by tax and accounting law. Server logs are kept for a short period and then deleted.

If you are in the EU/EEA or UK, you have the right under GDPR to: access the personal data we hold about you; have it corrected; have it deleted; restrict or object to its processing; receive a portable copy; and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us through the contact page. We will respond within one month.

This site is not directed at children under 16, and we do not knowingly collect their personal data.

If we change how we handle personal data, we will update this page and the date above. The current version always applies.