Privacy Policy
Last updated: 14 June 2026 | Version: 2026-06-14
This Privacy Policy explains how Galvorn Wellness Collective Ltd. ("Galvorn", "we", "us") collects and uses personal data when you visit galvorn.top or book a yoga session through our website. We comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Data Protection Act 2018 (Ireland).
1. Data Controller
Galvorn Wellness Collective Ltd.
Unit 4, Riverlee Community Centre, 12 Upper Bagot Street, Dublin 4, D04 V2P1, Ireland
Email: [email protected]
Phone: +353 1 556 7824
We have not appointed a Data Protection Officer. For all privacy enquiries, contact [email protected].
2. Personal Data We Collect
When you submit the booking form on our website, we collect:
- Full name — to identify your booking (mandatory)
- Phone number — to confirm your session and respond to enquiries (mandatory)
- Preferred class day — if you select one (optional)
When you browse our site, we may also collect:
- Technical data (IP address, browser type, device) through cookies — only with your consent for non-essential cookies
- Cookie consent preferences stored in the
galvorn_consentcookie
3. Purposes and Legal Bases
| Purpose | Data used | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Processing your class booking request | Name, phone, preferred day | Consent (Art. 6(1)(a)) — via the form checkbox; Steps prior to contract (Art. 6(1)(b)) |
| Contacting you about your booking | Name, phone | Steps prior to contract (Art. 6(1)(b)) |
| Website analytics (if accepted) | Cookie identifiers, usage data | Consent (Art. 6(1)(a)) |
| Advertising measurement (if accepted) | Cookie identifiers, conversion data | Consent (Art. 6(1)(a)) |
| Storing cookie preferences | Consent record | Legitimate interest (Art. 6(1)(f)) — necessary to honour your choice |
4. Recipients of Data
We do not sell your personal data. We may share data with:
- Our hosting provider (server logs, encrypted transmission)
- Google Ireland Limited — if you consent to Analytics or Marketing cookies (Google Analytics, Google Ads conversion tags)
- Irish authorities — only where required by law
5. International Transfers
If you consent to Google Analytics or Google Ads cookies, data may be transferred to the United States. Google participates in the EU-US Data Privacy Framework and uses Standard Contractual Clauses where applicable. You can withdraw consent at any time via .
6. Retention Periods
- Booking requests: up to 3 years after your last interaction, unless you request earlier deletion
- Cookie consent logs: 3 years from the date of consent
- Analytics/Marketing cookies: as stated in our Cookie Policy
7. Your Rights
Under GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion ("right to be forgotten")
- Restriction — limit how we process your data
- Portability — receive data in a structured format
- Object — object to processing based on legitimate interests
- Withdraw consent — at any time, without affecting prior lawful processing
To exercise these rights, email [email protected]. We respond within 30 days.
8. Right to Complain
You may lodge a complaint with the Data Protection Commission (Ireland):
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie
9. Mandatory Fields
Name and phone are required to process a booking. If you do not provide them, we cannot confirm your class place. The Privacy Policy checkbox must be ticked before submission.
10. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
11. Security
Our website uses HTTPS encryption. Form data is submitted via POST and is not included in URL parameters. Access to booking records is restricted to authorised Galvorn staff.
12. Changes
We may update this policy. The current version is always published on this page with the date above. Material changes will be communicated where appropriate.