Privacy Policy

1. Who is responsible for your information

Vula Yoga (Pty) Ltd (registration number 2019/496660/07), trading as Yoga for Beginners, is the responsible party for the personal information collected through yogaforbeginners.co.za.

• Physical address: 67 Voortrekker Street, McGregor, Western Cape, 6708, South Africa
• Email: domcatto@gmail.com
• Telephone: +27 82 856 4594

2. What we collect

Your email address

Given by you at checkout so that we can send your download link, and given by you if you sign up for our newsletter.

Your order details

Which product you bought, the amount, the date, and the payment reference Payfast returns to us. We keep this as our record of sale.

Basic technical information

Standard web-server information such as your IP address, browser type and the pages you visited, used to keep the site working and secure.

We never see your card or banking details. Payment happens entirely inside Payfast by Network (Pty) Ltd's secure environment. Payfast tells us only whether the payment succeeded and gives us a reference, never your card number.

We do not ask for, and do not want, any special personal information: no health records, no identity numbers, no financial details. Please do not send us any.

3. Why we use it

• To deliver what you bought. Your email address is how your download link reaches you.
• To support you. Reissuing an expired link, fixing a failed delivery, handling a refund.
• To keep proper records. Sales records are kept as required by South African tax and company law.
• To send you our newsletter, but only if you have separately asked us to. Buying a guide does not sign you up for anything.
• To keep the site secure and diagnose technical problems.

We process this information because it is necessary to perform our contract with you, to comply with our legal obligations, or on the basis of your consent where you have given it. We do not sell your personal information to anybody, ever, and we do not use it for automated decision-making or profiling.

4. Who we share it with

We use a small number of service providers ("operators" under POPIA) to run the business:

Payfast by Network (Pty) Ltd

Processes your payment and holds the card details we never see. Based in South Africa.

Resend

Sends your download email and our newsletter. Holds your email address for that purpose.

Cloudflare

Hosts this website and our order database, and protects the site from attack.

Each is contractually required to protect your information and to use it only to provide their service to us. Some of them process data on servers outside South Africa; where that happens, we rely on providers that offer a level of protection comparable to POPIA.

Beyond these, we share your information only where the law requires it, or where it is necessary to establish or defend a legal claim.

5. Cookies

This site does not use advertising cookies and does not track you across other websites. We use only what is strictly necessary to make the site and the checkout work. Payfast may set its own cookies on its own pages during payment. That is governed by Payfast's privacy policy.

6. How long we keep it

• Order and payment records: five years, as required by South African tax legislation.
• Download links: 7 days, after which they expire automatically.
• Newsletter subscriptions: until you unsubscribe, which you can do from any email we send.
• Server logs: a short rolling period, then automatically deleted.

7. How we protect it

The site is served entirely over HTTPS. Download links are cryptographically signed and time-limited, so they cannot be guessed or reused after expiry. Access to our systems is restricted and protected by strong authentication. No system is perfectly secure, but if a breach ever affected your personal information we would notify you and the Information Regulator as POPIA requires.

8. Your rights under POPIA

You have the right to:

• ask what personal information we hold about you, and get a copy of it;
• ask us to correct anything that is wrong;
• ask us to delete information we no longer have a lawful reason to keep;
• object to how we are processing your information; and
• withdraw consent at any time, for anything you consented to, such as the newsletter.

To exercise any of these, email domcatto@gmail.com. We will respond within a reasonable time and will not charge you for a straightforward request.

Note that we may need to keep your order records even after a deletion request, where tax law obliges us to.

9. Complaints

If you think we have mishandled your personal information, please tell us first: we would rather fix it. You also have the right to complain to the Information Regulator of South Africa at inforegulator.org.za.

10. Children

Our products are intended for adults. We do not knowingly collect personal information from children under 18. If you believe a child has given us their information, contact us and we will delete it.

11. Changes to this policy

If we change how we handle personal information, we will update this page and the date at the top of it.