# Privacy Policy
Last updated: 29th May 2026
YogaResearch.org ("we", "us", "our") respects your privacy. This policy explains what personal information we collect, why we collect it, how we use it, and your rights regarding your data.
This policy applies to https://yogaresearch.org and all services operated under that domain.
## 1. Who we are
We are YogaResearch.org, an international non-profit initiative dedicated to supporting academic yoga studies research. We operate yogaresearch.org as a curated platform for the global yoga studies research community.
If you have questions about this policy or your data, contact us at: **info@yogaresearch.com**
## 2. What information we collect
We collect personal information only when you choose to share it with us. Specifically:
### 2a. Newsletter subscription
If you subscribe to our newsletter (at https://yogaresearch.org/newsletter/), we collect:
- Your email address
- The date you subscribed
Our newsletter is operated using **Mailman** (a self-hosted GNU mailing list system).
### 2b. User accounts
If you create an account on yogaresearch.org (at [REGISTRATION_URL]), we collect:
- Your email address
- Your chosen username
- Optionally: name, affiliation, research interests, profile photo (only if you provide them)
User accounts are managed by the **Ultimate Member** WordPress plugin.
### 2c. Feedback forms
If you respond to a feedback or survey form we publish (e.g., via Google Forms), we may collect:
- Your responses to the questions
- Optionally: your email if you provide it for follow-up
Feedback forms are operated using **Google Forms**, governed by Google's own privacy policy: https://policies.google.com/privacy
### 2d. Website usage data
When you visit yogaresearch.org, our hosting provider and any analytics tools collect technical data automatically:
- IP address
- Browser type and version
- Pages visited and time spent
- Referring website
We use this data only in aggregate form to improve the website.
### 2e. Cookies
We use the following cookies:
[COOKIE_LIST — e.g.:
- WordPress session cookies (essential, for login functionality)
- [Add Google Analytics if used: _ga, _gid — for anonymous usage statistics]
- [Add any others detected from your WP setup]]
You can control cookies through your browser settings.
## 3. Why we collect this information
We use your information for the following purposes:
- **Newsletter**: to send you the editorial updates you subscribed to
- **User accounts**: to provide you access to platform features (saved papers, contributions, etc.)
- **Feedback forms**: to understand what our community wants and shape platform development
- **Website analytics**: to improve site performance and content
**We do not sell your data, ever.** We do not share it with third parties for marketing.
## 4. Legal basis (GDPR)
We process your data under the following legal bases (UK/EU GDPR):
- **Consent (Art. 6.1.a)**: for newsletter subscription, feedback form responses, optional profile fields
- **Contract (Art. 6.1.b)**: for user account creation and platform access
- **Legitimate interest (Art. 6.1.f)**: for website analytics and security logging
## 5. How long we keep your information
- **Newsletter subscribers**: until you unsubscribe, or after 3 years of no engagement (whichever first)
- **User accounts**: until you delete your account, or after 3 years of inactivity (we'll email you first)
- **Form responses**: typically 2 years, then anonymized or deleted
- **Website logs**: 30 days standard
## 6. Where your data is stored
- WordPress database (registration data, content): hosted by **[HOSTING PROVIDER]**, location: **[HOSTING LOCATION]**
- Newsletter (Mailman): hosted on the same server
- Form responses (Google Forms): stored on Google servers (governed by Google's terms)
## 7. Who we share your data with
We share data only with the following service providers, strictly for operational purposes:
- **[HOSTING PROVIDER]** — for website hosting
- **Google** — if you use a feedback form (Google Forms)
- **Board members and approved volunteers** — limited access to user account and subscriber data for moderation and editorial purposes only
We do not transfer your data outside the UK/EU except where Google services involve standard contractual clauses for US data processing (Google Forms).
## 8. Your rights (GDPR)
You have the following rights regarding your personal data:
- **Right of access (Art. 15)**: request a copy of what we hold about you
- **Right to rectification (Art. 16)**: correct inaccurate data
- **Right to erasure (Art. 17)**: ask us to delete your data
- **Right to restrict processing (Art. 18)**: limit how we use your data
- **Right to data portability (Art. 20)**: receive your data in a portable format
- **Right to object (Art. 21)**: object to processing based on legitimate interest
To exercise any of these rights, email us at **info@yogaresearch.com**. We respond within 30 days.
You also have the right to complain to a data protection authority:
- UK residents: Information Commissioner's Office (ICO) — ico.org.uk
- EU residents: your national data protection authority
## 9. Children's data
Our services are not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, contact us at **info@yogaresearch.com** and we will delete it.
## 10. Changes to this policy
We may update this policy occasionally. When we do, we'll update the "Last updated" date at the top. For material changes, we'll notify subscribers via newsletter and account holders via email.
## 11. Contact
For any privacy-related question or request:
**YogaResearch.org**
Email: **info@yogaresearch.com**
Web: https://yogaresearch.org
---
*This policy is written in plain English. We aim to be clear about what we do with your data because we believe research communities run on trust.*
