Privacy Policy
Last updated: 30 September 2026
At Sama Yoga, we value your privacy and want you to feel confident about how your personal information is handled.
This Privacy Policy explains how Sama Yoga AB collects, uses, stores and protects personal data when you visit our websites, sign up for a course, membership, free online event, workshop or retreat, make a purchase, subscribe to our emails, or otherwise interact with us.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation.
1. Who is responsible for your personal data?
The data controller is:
Sama Yoga AB
Company registration number: 559315-6366
VAT number: SE559315636601
Humlegatan 9
268 68 Röstånga
Sweden
Sanna
Phone: +46 (0)708-704 859
Email: yogadeepening@gmail.com
Sky
Phone: +46 (0)73-074 76 04
Email: yogasky108@mac.com
Sama Yoga AB is registered for Swedish F-tax.
For questions concerning privacy, personal data or your rights under GDPR, please contact Sanna at yogadeepening@gmail.com.
2. What personal information do we collect?
The information we process depends on how you interact with us and which of our services you use.
This may include:
your name
email address
telephone number, when you choose to provide it
billing and contact information
information about courses, memberships, free events, workshops, retreats or other services you have registered for or purchased
payment and transaction information
information required to manage your account and provide access to digital content
information you provide when contacting or communicating with us
technical information generated when you use our websites, such as IP address, browser information and information collected through cookies or similar technologies.
We aim to collect only the personal information that is necessary for the relevant purpose, in accordance with GDPR's principle of data minimisation.
3. Why do we process your personal information?
We may process personal information in order to:
manage registrations for courses, memberships, free online events, workshops, retreats and other activities
administer memberships and user accounts
provide access to digital course material, recordings and membership content
process and administer purchases and payments
send information relating to a course, membership or event you have registered for
answer questions and provide customer support
send newsletters, inspiration, information about upcoming activities and offers where we have a lawful basis to do so
administer, maintain and improve our websites and digital services
comply with legal obligations, including accounting requirements.
4. Our legal basis for processing your data
Under GDPR, we need a lawful basis for processing personal data. The basis we rely on depends on why the information is being processed.
Performance of a contract: When you purchase a course, membership or other service, we process the information necessary to provide what you have purchased.
Legal obligation: We are required to process and retain certain information to comply with legal requirements, such as accounting legislation.
Consent: In some circumstances, we process personal information based on your consent. Where processing is based on consent, you can withdraw your consent at any time.
Legitimate interests: In some situations, we may process personal information where we or you have a legitimate interest in doing so, provided that this interest is not overridden by your rights and interests.
5. Free courses, online weeks and other free events
When you register for a free course, online week or other free event, we normally need your name and email address in order to administer your registration.
We may send you information directly related to the event you have registered for, including:
confirmation of your registration
dates and times
information about how to participate
reminders before live sessions
links to live sessions or groups
information about replays
practical information during the event
relevant follow-up relating to the event.
Some free events may take place partly or entirely through a private Facebook group or another external platform. If you choose to join such a group or use an external platform, that provider will also process personal information according to its own terms and privacy policy.
6. Newsletters and marketing emails
If you subscribe to our newsletter or otherwise sign up to receive communications from Sama Yoga, we may send you inspiration, news and information about our teaching, courses, memberships, retreats and other offerings.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting us.
Unsubscribing from marketing does not prevent us from sending information that is necessary for a course, membership or event in which you are currently participating.
7. User accounts and memberships
When you create an account on our membership or course platform, we process the information necessary to administer your account and provide access to the relevant content.
This may include your name, email address, memberships or courses you have access to, registrations, purchases and other information necessary for the service to function.
Passwords are handled by the authentication system used by our platform. We do not have access to your password in plain text.
8. Payments
When you purchase a course, membership or other paid service, information necessary to process and document your purchase will be processed.
We use Stripe for certain payments. Stripe therefore processes payment information in accordance with its own terms and privacy policy.
Sama Yoga does not store your complete payment card details.
9. Service providers
We use third-party services to provide our websites, courses, memberships, communications and other services.
Depending on which of our services you use, personal information may be processed through providers including:
Squarespace – website hosting and website functionality
Lovable – course and membership platform and related technical services
Mailchimp – email communications and newsletters
Stripe – payment processing
Vimeo – video hosting and playback
Zoom – live online classes and meetings
Meta/Facebook – groups, communities, live events and social media
We only share personal information with service providers where this is necessary for the relevant service or otherwise permitted by law.
Where a service provider processes personal data on our behalf, the processing is subject to applicable data protection requirements and appropriate contractual arrangements.
Some providers may also act as independent data controllers for certain processing. In those situations, their own privacy policies also apply.
10. International transfers of personal data
Some of the service providers we use are international companies. This means that personal information may in some circumstances be processed or made accessible outside the European Union and European Economic Area (EU/EEA), including in the United States.
Where GDPR requires safeguards for such a transfer, an appropriate legal mechanism must be used. Depending on the provider and circumstances, this may include an adequacy decision by the European Commission, the EU's Standard Contractual Clauses or another mechanism permitted under GDPR.
11. How long do we keep your information?
We retain personal information only for as long as necessary for the purpose for which it was collected, unless we are required to keep it for longer by law.
For example:
information required for accounting purposes is retained for the period required by applicable accounting legislation
information necessary for an active membership or course may be retained for as long as it is required to provide the service
information used for newsletters and marketing is retained for as long as we have a lawful basis to use it for that purpose, or until you unsubscribe or object where applicable.
We may need to retain limited information after a service has ended where this is necessary to comply with legal requirements or establish, exercise or defend legal claims.
12. Cookies and similar technologies
Our websites may use cookies and similar technologies.
Some cookies are necessary for the website, login functions or other services to work properly. Others may be used for purposes such as analytics, statistics or marketing.
Where applicable law requires your consent for a particular cookie or similar technology, it should only be used after you have made your choice.
Where available, you can manage your preferences through the cookie settings provided on the relevant website.
13. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration and unlawful processing.
Access to personal information is limited to people and service providers who need the information for their work or to provide the relevant service.
However, no method of transmitting or storing information online can be guaranteed to be completely risk-free.
14. Your rights
Depending on the circumstances, GDPR gives you a number of rights concerning your personal information.
These may include the right to:
receive information about how your personal data is processed
request access to the personal information we hold about you
request correction of inaccurate or incomplete information
request deletion of your personal information in certain circumstances
request restriction of processing in certain circumstances
object to certain processing
receive certain personal information in a structured, commonly used and machine-readable format and, where applicable, have it transferred to another data controller
withdraw consent at any time where our processing is based on your consent.
These rights are not absolute in every situation. For example, we may need to retain certain information even after a request for deletion where we have a legal obligation to do so.
To exercise any of these rights, or if you have questions about how we process your personal information, please contact:
15. Complaints
If you have any questions or concerns about how we process your personal information, you are welcome to contact us.
You also have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection.
Swedish Authority for Privacy Protection (IMY)
16. External websites and services
Our websites, courses and communications may contain links to external websites and services, such as Facebook, Vimeo or Zoom.
When you leave our websites and use an external service, that provider may process your personal information according to its own privacy policy. Sama Yoga is not responsible for the independent processing of personal data carried out by external providers.
17. Changes to this Privacy Policy
We may update this Privacy Policy when our services, digital platforms or processing of personal information change.
The current version will be available on our website, and the date at the top of this page shows when it was last updated.