PRIVACY POLICY

Last updated: 16 October 2026

1. Who we are

This policy applies to emilygoldyoga.com and embodiedmotherhoodspace.com (together, the "Sites"). The data controller is Emily Gold, trading as Emily Gold Yoga, enterprise number BE0642986769.  Contact: [email protected]

We handle your personal data in line with the EU General Data Protection Regulation (GDPR) and Belgian data protection law.

2. What we collect, why, and our legal basis

Enquiries and discovery calls. Your name, email, phone number, and the content of your message or booking. We use this to reply to you and arrange calls. Legal basis: our legitimate interest in answering enquiries, or steps you ask us to take before a contract.

Bookings and purchases (classes, courses, workshops, retreats, coaching, membership). Name, email, phone, the product you booked, and payment details. Payment card details are handled by our payment provider and are not stored by us. We also keep invoices and transaction records. Legal basis: performing our contract with you and meeting our legal obligations (such as accounting rules).

Health and wellbeing information. Our sign-up and intake forms may ask whether you are prenatal or postnatal, how far along you are, injuries or physical concerns, and, for coaching, how you are feeling or what you hope to work on. This is health-related data, which the GDPR treats as a special category. We collect it only with your explicit consent, only so we can teach and support you safely, and you can withdraw consent at any time. If you choose not to share it, we may be unable to offer certain classes or programmes safely.

Newsletter and free resources. Your name and email address, and your interests if you tell us. We use these to send the newsletter, your free guide or resource, and information about our offers. Legal basis: your consent. You can unsubscribe at any time using the link in any email.

Community members. Your name, email, and anything you choose to post or share in the private community space or live sessions. Legal basis: our contract with you.

Website use and cookies. Technical data such as your IP address, device, pages visited, and, where you accept them, analytics and advertising cookies (see section 7). Legal basis: your consent for non-essential cookies.

Recordings, photos, and testimonials.We record or publish these only with your clear consent, and you can withdraw it.

3. Who we share your data with

We do not sell your data. We use trusted service providers (processors) who handle data only on our instructions. Depending on what you use, these include: 

• Squarespace (website hosting and class sales on emilygoldyoga.com)

• GoHighLevel (website, forms, bookings, email and messages, community on embodiedmotherhoodspace.com)

• Zapier (connecting our tools and automations)

• Google (Google Workspace for email and documents; Google Ads and analytics)

• Stripe and Paypal for payment services

• Zoom for video classes and sessions

We may also share data where the law requires it.

4. Transfers outside the EU/EEA

Some providers are based in the United States or elsewhere. Where your data is transferred outside the EU/EEA, we rely on safeguards such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

5. How long we keep your data

• Invoices and accounting records: 7 years, as required by Belgian law

• Booking and client records, including intake forms:  2 years after our last contact

• Coaching notes: 2 years after the end of the programme

• Newsletter subscribers: until you unsubscribe, or after 2 years of inactivity

• Enquiries that do not lead to a booking: 12 months

We then delete or anonymise the data.

6. Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to our processing, receive a copy in a portable format, and withdraw consent at any time (which does not affect processing that happened before). To use any of these rights, email [email protected] . We aim to respond within one month.

You also have the right to complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

7. Cookies

Essential cookies keep the Sites working and do not need consent. Analytics and advertising cookies load only if you choose "Accept all" in our cookie banner. You can decline them, and you can change your choice at any time by clearing cookies. 

8. Security, children, and changes

We protect your data with reasonable technical and organisational measures, but no online system is completely secure. Our services are for adults, and we do not knowingly collect data from anyone under 16. We may update this policy and will post the new date at the top. For significant changes affecting how we use your data, we will tell you directly.