Privacy Policy

This Privacy Policy explains how Shalaya Pte. Ltd. ("Shalaya", "we", "us" or "our") collects, uses, discloses and protects personal data when you use our website, mobile experience, platform and related services (the "Platform").

Shalaya is incorporated in Singapore and handles personal data in accordance with the Singapore Personal Data Protection Act 2012 ("PDPA").

By using the Platform, creating an account, making a booking, submitting a listing, contacting us or interacting with Shalaya, you acknowledge that your personal data may be collected, used and disclosed as described in this Privacy Policy.

This Privacy Policy should be read together with our Terms and Conditions, Cancellation and Refund Policy, Professional Terms where applicable, and any waiver or participation terms applicable to a specific experience.

1. Personal Data We Collect

We may collect personal data directly from you, from Yoga Professionals, from payment providers, or automatically when you use the Platform.

This may include:

• name;
• email address;
• phone number;
• account login details;
• booking details and booking history;
• payment and transaction information;
• location or preferred practice location;
• yoga preferences, class preferences and experience preferences;
• messages, reviews, ratings, comments and other content you submit;
• health, injury, pregnancy, allergy or emergency contact information where you choose to provide it or where it is needed for safety reasons;
• parent or guardian details where a minor is allowed to participate;
• professional profile, certification, business, tax or payout information where you are a Yoga Professional;
• device information, IP address, browser type, cookies, analytics data and usage information; and
• any other information you choose to provide to us.

We only collect personal data that is reasonably necessary for the purposes described in this Privacy Policy, or that you voluntarily provide to us.

2. How We Use Personal Data

We may use personal data to:

• create, manage and secure your account;
• allow you to browse, request, book and pay for yoga-related experiences;
• confirm bookings and send booking-related communications;
• share necessary booking information with the relevant Yoga Professional;
• process payments, refunds, chargebacks and related transactions;
• provide customer support and respond to enquiries;
• manage cancellations, complaints, disputes, safety issues and exceptional cases;
• verify, onboard and support Yoga Professionals;
• display listings, profiles, reviews, ratings and user content;
• improve search, recommendations and user experience;
• operate, maintain, test and improve the Platform;
• detect, prevent and investigate fraud, misuse, security incidents or unlawful activity;
• send service-related communications;
• send marketing communications where you have consented or where permitted by law;
• conduct analytics, reporting and business planning;
• comply with legal, regulatory, tax, accounting, audit and compliance obligations; and
• carry out any other purpose notified to you, where required with your consent.

3. Sharing Personal Data with Yoga Professionals

Shalaya is a marketplace. When you make or request a booking, we may share the personal data reasonably necessary for the relevant Yoga Professional to manage and deliver the experience.

Yoga Professionals may only use this personal data to manage and fulfil the relevant booking, handle safety requirements and comply with applicable law.

Yoga Professionals must not use your personal data for unrelated marketing unless they have obtained separate valid consent from you.

Shalaya is not responsible for a Yoga Professional's misuse of personal data, except where Shalaya is legally responsible under applicable law.

4. Sharing Personal Data with Service Providers

We may share personal data with trusted third-party service providers who help us operate, protect and improve the Platform.

These may include:

• payment processors, including Stripe;
• hosting, database and cloud providers;
• email, messaging and customer support tools;
• analytics and performance tools;
• security, fraud prevention and monitoring providers;
• professional advisers, including lawyers, accountants and auditors;
• banks, payment networks and financial institutions;
• regulators, authorities or law enforcement where required or permitted by law; and
• other service providers necessary to operate the Platform.

These service providers may only process personal data for the purposes for which they are engaged, unless otherwise permitted by law.

5. Cookies and Analytics

We may use cookies, analytics tools and similar technologies to operate the Platform, remember preferences, understand how users interact with the Platform, improve performance, measure marketing effectiveness, prevent fraud and improve user experience.

You may be able to disable cookies through your browser settings. Some features of the Platform may not work properly if cookies are disabled.

Where required by law, we will obtain your consent before using non-essential cookies or marketing technologies.

6. Marketing Communications

We may send you marketing communications about Shalaya, yoga experiences, offers, events, community updates, rewards or related content where you have consented or where permitted by law.

You may unsubscribe from marketing emails by using the unsubscribe link in the email or by contacting us.

Even if you unsubscribe, we may still send you service-related communications, including booking confirmations, payment notices, account updates, safety information and legal notices.

7. International Transfers

Some of our service providers, systems or partners may be located outside Singapore. This means your personal data may be transferred to, stored in or accessed from countries outside Singapore.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that it receives a standard of protection comparable to the protection required under the PDPA.

8. Retention and Protection of Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, or as required for legal, regulatory, tax, accounting, audit, dispute resolution, fraud prevention, safety or business purposes.

When personal data is no longer needed, we will take reasonable steps to delete, anonymise or securely dispose of it.

We take reasonable security measures to protect personal data in our possession or control against unauthorised access, collection, use, disclosure, copying, modification, disposal, loss or similar risks.

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of personal data transmitted through the internet or stored electronically.

9. Access, Correction and Withdrawal of Consent

Under the PDPA, you may request access to personal data about you that is in our possession or control, and information about how it has been used or disclosed within the period required by law.

You may also request correction of any error or omission in your personal data that is in our possession or control.

You may withdraw your consent to our collection, use or disclosure of your personal data by contacting us.

Please note that withdrawing consent may affect our ability to provide certain services to you. For example, we may not be able to maintain your account, process bookings, share booking details with Yoga Professionals, send booking communications, process payments or provide customer support.

We may need to verify your identity before processing any request. We may refuse or limit a request where permitted or required by law.

10. Children and Minors

The Platform is intended for users who are at least 18 years old.

Minors may only participate in a yoga experience where the relevant listing expressly allows it and where the booking is made by a parent or legal guardian, or with prior written consent from a parent or legal guardian.

Where we collect personal data relating to a minor, we may require parental or guardian consent, emergency contact details, health declarations or other information necessary for safety, participation and legal compliance.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Where changes are material, we will take reasonable steps to notify users, such as by posting the updated policy on the Platform, sending an email or displaying an in-platform notice. Your continued use of the Platform after the updated Privacy Policy takes effect means that you acknowledge the updated policy.

12. Contact and Data Protection Officer

For questions about this Privacy Policy, or to make an access, correction or withdrawal of consent request, please contact:

Shalaya Pte. Ltd.
Email: hello@shalayayoga.com
Registered address: 160 Robinson Road, #14-04, Singapore Business Federation Center, Singapore 068914
UEN: 202618786H