Privacy Rights Under GDPR

Effective Date: February 22, 2026

At Everything Yoga, your privacy is important to us. We are committed to protecting your personal data and ensuring transparency in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

Although European Union law does not define personal data “sale” in the same manner as certain non-EU laws, we provide this page to explain your data protection rights and how you may control the use of your personal information.

Your Privacy Rights Under GDPR

If you are located in Estonia or another country within the European Economic Area (EEA), you have the following rights:

1. Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

2. Right to Rectification

You may request correction of inaccurate or incomplete personal data.

3. Right to Erasure

You may request deletion of your personal data, subject to legal or contractual obligations.

4. Right to Restrict Processing

You may request that we limit how your personal data is processed in certain situations.

5. Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

6. Right to Data Portability

You may request your personal data in a structured, commonly used, machine-readable format.

7. Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Data Sharing Commitment

We do not sell personal data for monetary compensation.
We only share personal data with trusted service providers (such as payment processors and shipping partners) strictly for business operations.
We do not process personal data for third-party advertising without a lawful basis under GDPR.

How to Exercise Your Rights

To submit a privacy-related request:

Email: contact@everything-yoga.com
Subject Line: Privacy Rights Request

Please include your full name, email address, and order number (if applicable) so we can verify your identity.

Response Time

We will respond within one month (30 calendar days) as required under GDPR. If necessary, this period may be extended in accordance with applicable law.

Supervisory Authority

If you believe your rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate or your local supervisory authority within the EEA.