Namasté Offline and Namasté Online are run by Yoga Bible ApS (CVR 41295252, Torvegade 66, 1400 København K, Denmark), the data controller for the personal data described here. Contact: info@namasteoffline.com.
We process the account and contact details you give us, bookings, check-ins and attendance, membership and payment status (we store only the last four digits of your card), messages you send us, and the data needed to operate the studio. For the studio guide, we save its version and your completion time against your account so you do not have to repeat it on another device. Understanding-check answers are validated but not saved. When you take a class, you may appear in the live broadcast (sections 3–5). Security cameras at the studio also capture video and sound (section 6). On this website, your browser may supply an optional time-zone hint at fresh signup or class booking. You can set or clear your own zone in Profile for class-message times. Device hints keep your deliberate choice. This is an account preference, not proof of location or marketing consent, and follows your account export and deletion rights.
Classes are filmed in the studio and broadcast live, one way, to Namasté Online members and other members and customers with live access. The camera shows a wide view of the room, so people taking the class may appear and could be recognisable, depending on the view. Online members never appear. We broadcast classes because the live stream is part of the service our members buy; for people in the studio, the legal basis is our legitimate interest in offering live classes (GDPR Art. 6(1)(f)), and you can object at any time (section 5), and for teachers it is also our agreement with them (Art. 6(1)(b)). We do not use the broadcast or recordings to identify, profile or track people taking the class.
Our live-video provider temporarily records the studio broadcast because its streaming technology needs a recording to deliver live video. This is a technical recording, not a saved class. After the broadcast ends, our system automatically requests deletion, normally within minutes. A playback fault or an unsuccessful deletion can delay removal; we retry failed deletions and aim to delete routine recordings within 24 hours. Once deleted, the recording is no longer available through our service or the provider's normal video library, and we cannot supply it to members or teachers, including the teacher who taught the class. There is no 30-day minimum retention or class-recording archive. We do not currently keep Namasté class recordings for teacher training or teaching-quality review. Recordings are never offered as replays, published or sold. After deletion, a copy may remain for a limited time in a provider's backups under its data-processing terms; this is not a replay or recording-recovery service.
You can object at any time (GDPR Art. 21) to appearing in the live broadcast or in a recording. Write to info@namasteoffline.com. We will stop unless we have compelling legitimate grounds that override your interests, which we will explain; a kept recording will be deleted or you will be removed from it. You can also ask whether we hold a recording of you and for access to it, within the limits that protect other people in it.
Separate security cameras at the studio capture video and sound to protect people and property, which is our legitimate interest (Art. 6(1)(f)). They are not part of the live broadcast. Contact us for details about access to and retention of security footage.
Under the GDPR (Article 6) we rely on: performance of our contract with you (Art. 6(1)(b)) to run your account, bookings, membership and payments and to answer your messages; legal obligation (Art. 6(1)(c)) to keep bookkeeping records; our legitimate interests (Art. 6(1)(f)) for the live broadcast, recordings and security cameras described above, to remember which studio guide you have completed, and to keep the service secure and prevent fraud; and your consent (Art. 6(1)(a)) for optional analytics, advertising measurement and news emails. You can withdraw consent at any time; that doesn't affect anything done before.
Our service providers handle personal data for us: BookingBible, our booking and membership system, which stores data in a Supabase database in an EU region; NamasteSuite, our customer-relationship system, which stores the name, email and campaign information you give when you ask for an offer, and, if you tick the box, lets us email you about that offer; Stripe, which processes card payments; Cloudflare Stream (Cloudflare, Inc.) and Mux, our live-video providers, which carry the configured studio broadcast and make the temporary technical recordings described in section 4; Vercel, which hosts the website; Resend, which delivers our emails; Cloudflare Turnstile, which checks the website's forms for bots; and, with your consent, Google Analytics and Meta Pixel. Some of these providers are based in, or may access data from, countries outside the EU/EEA such as the United States. Where that happens, the transfer is covered by an EU adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) or by the EU Standard Contractual Clauses.
With your consent, Google Analytics measures how the site is used, and Meta Pixel and Google measure how our advertising performs (Google's advertising features only with marketing consent). These optional technologies load only after you accept them. With analytics consent we also keep, in your browser and for up to 90 days, how you came to the site first and most recently (the campaign, ad or website that sent you and the page you arrived on), and add it to your account when you create one and to your purchase when you buy, so we can see which campaigns bring members. With marketing consent this includes the ad's click identifier. When you buy, we may send information about the purchase to Google and Meta from our own systems to measure our advertising: your Google Analytics identifiers are included with analytics consent, and Meta's browser identifier and your browser and device type with marketing consent, so the purchase is not counted twice. With marketing consent, and where our advertising integration is enabled, we may also use a normalized, one-way hashed email address and, for Meta, a hashed member identifier to match a purchase to an ad interaction. These remain personal data. We do not sell personal data.
Necessary cookies support authentication, security and payment fraud prevention. Your cookie choice is stored in your browser. Google Analytics and Meta Pixel cookies are optional, and you can change or withdraw your choice at any time through Cookie settings. Optional tracking stops on this device when you withdraw. A checkout privacy change is saved in our systems only when confirmed; otherwise we show it as pending and offer a retry. A saved withdrawal governs fresh permission checks. It cannot recall a capture already in progress under an earlier check, or information already forwarded. Current checkout permission lasts at most 15 minutes, so older or delayed purchases may have no attribution. Changing privacy choices does not start another payment or purchase.
Account, booking and membership data are kept while you have an account and are deleted or anonymised when it is deleted. Bookkeeping records of payments are kept as long as Danish bookkeeping law requires, currently five years from the end of the financial year. Class recordings are kept only as described in section 4. Minimal technical privacy records link a choice to an original checkout so an old retry cannot undo a saved withdrawal; they contain the necessary account, venue and checkout identifiers and choices, without campaign or browser data. On this device we remove completed-checkout privacy records on later activity after the 15-minute permission window ends, provided no financial recovery is held and all queued withdrawals are confirmed. Pending or unverifiable records remain for retry; optional campaign information follows the separate 90-day browser rule. Server privacy records follow our account-data retention and erasure rules.
Under the GDPR you may request access to your data, correction, erasure, restriction of processing or a portable export, object to how we use it, and withdraw any consent you have given. Write to info@namasteoffline.com and we'll respond within 30 days. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
Questions or data requests: info@namasteoffline.com, or by post to Yoga Bible ApS (CVR 41295252, Torvegade 66, 1400 København K, Denmark). Studio: Torvegade 66, 1400 København K.