PRIVACY POLICY

LAST UPDATED: AUGUST 2, 2024

YOGAEM LLC. (“YOGAEM.com”) provides this Privacy Policy in order to demonstrate YOGAEM.com’s firm commitment to your privacy and privacy-related concerns. This Privacy Policy may be updated from time to time for any reason; each version will apply to information collected while it was in place. Time to time updates and modifications may be made available on YOGAEM.com and you are advised to consult this Privacy Policy regularly for any changes.

The following sets forth YOGAEM.com’s information gathering, use and dissemination practices. If you have any questions or comments about this Privacy Policy or our use of your personally identifiable information, please contact us at Privacy@YOGAEM.com.

YOGAEM.com does not collect personal information — names, addresses, phone numbers, e-mail addresses, and specific location — about you except when you specifically provide such information on a voluntary basis; for example, when you provide YOGAEM.com with information in connection with a web site registration.

A Special Note About Children.
Children are not eligible to use our services and we ask that minors do not submit any personal information to us. If you are a minor, you can use this service only in conjunction with your parents or guardians. If we become aware that a child under 13 has provided us with personal identifiable Information, we will delete such information from our files. We use your email address and, in rare situations your mailing address or phone number, to contact you regarding administrative notices from time to time.

Information Collection and Use
As a valued visitor to YOGAEM.com, we will occasionally contact you, typically by e-mail (or any other way you prefer) to notify you of special promotions, and up-to-date news, custom-tailored to your personal interests. Of course, if you do not wish to receive this personalized information, you can always let us know by emailing us at Privacy@YOGAEM.com , and we will happily abide by your wishes.
YOGAEM.com uses your Internet Protocol (IP) address to help diagnose problems with our computer server and to administer our website. Your IP address is used to help identify you, and to gather broad demographic data. Your IP address contains no personal information about you.

To ensure that all of your personal information is correct and up-to-date, at any time you may visit your personal profile via our yoga coaching application ‘Daily Yoga’. Through your personal profile you may: (a) review and update your personal information that YOGAEM.com has already collected; (b) choose whether or not you wish us to share some of your Personal Information in Daily Yoga’s community.
Users of this website must promptly notify YOGAEM.com if personally identifiable information is lost, stolen, or used without permission. In such an event, we can help you reset your password, hold or cancel your account, and update our records accordingly.

Daily Yoga will require permission to access your camera which is used to take photos when you voluntarily share your photos in the Daily Yoga Community. And please make sure you have the right to share these pictures before sharing.

Location permission is required for geotagging of your posts. If enabled, your location will be shown to others when you make a post in the Daily Yoga Community.

Daily Yoga requires permission to read your Phone State such as Device ID to bind your device with your Daily Yoga Account and Network Type to help avoid unnecessary data consumption.

To request the deletion of your personal data that we have in Daily Yoga App, please find the “Delete Account” in Profile – Setting. Or you can email us at Privacy@YOGAEM.com to request the deletion, and we will respond to your request in a reasonable timeframe. Upon your request, Daily Yoga will permanently and irrevocably anonymize your data such that it can never be reconstructed to identify you as an individual.

When you participate in the active rankings, Daily Yoga will use your IP address to obtain country and region information. Your IP address contains no personal information about you. You can still reset your region information on the Profile page.

Data Protection
Protecting users’ personal information is our top priority. To ensure the security of sensitive data, we have implemented the following measures:
– Data Encryption: We use advanced encryption technology to secure the transmission and storage of sensitive data.
– Access Control: Only authorized personnel can access sensitive data due to strict access control measures.
– Secure Data Storage: Sensitive data is stored in secure servers and protected environments to prevent unauthorized access.
We collect data to enhance the functionality of the application, improve user experience, customize features, and optimize performance. Our data collection practices comply with applicable data protection laws and regulations.

Cookies
We use “cookie” technology to collect non-personal website usage data and to improve the Site and our service. Cookies are files a web site can use to recognize repeat users, and allow a web site to track web usage behavior. Cookies take up minimal room on your computer and cannot damage your computer’s files. YOGAEM LLC. may use both session cookies and persistent cookies to better understand how you interact with the YOGAEM.com web site and services, to monitor aggregate usage by our users and web traffic routing on the website, and to improve the web site and our services. A session cookie enables certain features of the site and our service and is deleted from your computer when you disconnect from or leave YOGAEM.com. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to YOGAEM.com. Persistent cookies can be removed by following your web browser help file directions. Most Internet browsers automatically accept cookies. You can instruct your browser, by editing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit.

Information Sharing Disclosure
YOGAEM.com does not sell or rent personal information about its customers to any third parties at this time. In the event YOGAEM.com does engage in such commerce in the future, you will have an opportunity to remove yourself from any such lists prior to your inclusion therein by emailing us at unsubscribe@YOGAEM.com. Please exercise caution when deciding to disclose your personal information. This web site also contains links to other web sites. YOGAEM.com is not responsible for the privacy practices or the content of such web sites.

YOGAEM.com uses third-party advertising companies to serve ads and the third-party advertising companies may use non-personally identifiable information about a user’s visits to YOGAEM.com in order to provide advertisements about goods and services that may be of interest to users.

YOGAEM LLC Information Security Policy

1. Purpose

The purpose of this Information Security Policy is to ensure the security and integrity of cardholder data processed, stored, or transmitted by YOGAEM LLC. This policy outlines our commitment to complying with the Payment Card Industry Data Security Standard (PCI DSS) and protecting our customers’ sensitive payment information.

2. Scope

This policy applies to all employees, contractors, consultants, and any other personnel at YOGAEM LLC who handle cardholder data or are involved in the processing, storage, or transmission of such data. It covers all systems, networks, and physical premises owned or operated by YOGAEM LLC that interact with cardholder data.

3. Cardholder Data Protection

3.1 Data Encryption

• Cardholder data must be encrypted during transmission over open, public networks using strong cryptography (e.g., SSL/TLS).
• Stored cardholder data must also be encrypted using strong encryption standards (e.g., AES-256).

3.2 Data Retention and Disposal

• Cardholder data must only be retained for as long as necessary for business, legal, and regulatory purposes.
• Secure disposal methods (e.g., shredding, electronic file deletion) must be used to destroy cardholder data when it is no longer needed.

4. Access Control

4.1 Access Management

• Access to cardholder data is restricted to authorized personnel based on job responsibilities and the principle of least privilege.
• Strong authentication mechanisms, including multi-factor authentication (MFA), must be implemented for accessing systems containing cardholder data.

4.2 User Identification

• Unique user IDs must be assigned to all personnel with access to cardholder data systems.
• Shared user IDs and passwords are prohibited.

5. Network Security

5.1 Firewall Configuration

• Firewalls must be implemented to protect cardholder data from unauthorized access.
• Firewall configurations must be reviewed and updated regularly to ensure compliance with PCI DSS requirements.

5.2 Network Monitoring

• Continuous monitoring and logging of network traffic to and from systems handling cardholder data must be conducted to detect and respond to security incidents.

6. Vulnerability Management

6.1 Patch Management

• All systems and applications must be regularly updated with security patches and updates to protect against known vulnerabilities.

6.2 Vulnerability Scanning and Penetration Testing

• Regular vulnerability scans and penetration testing must be conducted to identify and remediate security weaknesses.

7. Incident Response

7.1 Incident Response Plan

• YOGAEM LLC must maintain an incident response plan to address security incidents involving cardholder data.
• The plan must include procedures for detecting, responding to, and recovering from security breaches.

7.2 Incident Reporting

• All personnel must report suspected or confirmed security incidents involving cardholder data to the designated incident response team immediately.

8. Security Awareness and Training

8.1 Employee Training

• All employees with access to cardholder data must receive regular training on information security policies, procedures, and best practices.
• Training must include a focus on recognizing and responding to social engineering attacks and phishing attempts.

9. Third-Party Service Providers

9.1 Vendor Management

• YOGAEM LLC must ensure that all third-party service providers handling cardholder data are PCI DSS compliant.
• Contracts with third-party providers must include specific data security requirements and responsibilities.

10. Policy Review and Maintenance

10.1 Policy Review

• This Information Security Policy must be reviewed and updated at least annually or whenever significant changes occur in business practices or regulatory requirements.

10.2 Policy Approval

• The Information Security Policy must be approved by senior management and communicated to all relevant personnel.

By adhering to this Information Security Policy, YOGAEM LLC commits to safeguarding cardholder data and ensuring compliance with PCI DSS requirements. This policy is an integral part of our commitment to maintaining the trust and security of our customers.

Google API
Additionally, we would like to inform you that YOGAEM’s use and transfer of information received from Google APIs will adhere to Google API Services User Data Policy, including the requirements for limited use.

Compliance with Laws and Law Enforcement
YOGAEM.com cooperates with all law enforcement inquires and with all third parties to enforce their intellectual property or other rights. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims, legal process (including subpoenas), to protect the property and rights of YOGAEM LLC. or a third party, the safety of the public or any person, to prevent or stop any illegal, unethical, or legally actionable activity, or to comply with the law. YOGAEM.com takes your privacy concerns very seriously. If you still have concerns about privacy issues after reading this Privacy Policy, please contact us at Privacy@YOGAEM.com.

This Privacy Policy is effective as of August 2, 2024. This Privacy Policy is not intended to and does not create any contractual or other legal rights in or on behalf of any party. We reserve the right, at any time and without notice, to add to, change, update or modify this Privacy Policy, simply by posting such change, update or modification on the Site. Any such change, update or modification will be effective immediately upon posting on the Site.