Privacy Policy

1. Introduction

Dylan Ayaloo (“we”, “us”, or “our”) operates dylanayaloo.com. The data controllers are BeQn Ltd and elev8 Yoga Ltd, both registered in England & Wales. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our programmes and services.

2. Information We Collect

We may collect the following types of information:

• Personal information: Name, email address, and any information you provide via contact forms or programme applications.
• Payment information: Processed securely through ThriveCart. We do not store card details on our servers.
• Usage data: Pages visited, time spent, browser type, and device information collected via Google Analytics.
• Quiz responses: Pattern quiz answers used to provide personalised recommendations.
• Session recordings: Video and audio recordings of live group sessions, which may include your image and voice if your camera or microphone is active.
• Advertising data: Browsing behaviour collected via Meta Pixel, Google Ads, and TikTok Pixel (with your consent) to build retargeting audiences and measure campaign performance.

3. How We Use Your Information

• To provide and maintain our programmes and services
• To send you programme updates, newsletters, and marketing communications (with your consent)
• To improve our website and user experience
• To process payments and manage your account
• To respond to your enquiries and support requests

4. Legal Basis for Processing

Under the UK GDPR, we process your personal data on the following bases:

• Contract: To fulfil purchases and deliver programmes you have signed up for.
• Consent: To send you marketing emails and newsletters. You can withdraw consent at any time via the unsubscribe link in any email.
• Legitimate interest: To improve our website, analyse usage patterns, respond to enquiries, and record live sessions for the benefit of programme members. You have the right to object to processing based on legitimate interest at any time.

5. Email Communications

We use MailerLite to manage our email communications. When you subscribe to our mailing list or purchase a programme, you may receive emails from us. Every email includes an unsubscribe link. You can opt out at any time.

6. Third-Party Services

We use the following third-party services to deliver our programmes and operate our website:

• ThriveCart: Payment processing (US)
• MailerLite: Email marketing (EU)
• Resend: Transactional email delivery (US)
• Skool: Community platform and course delivery (US)
• Vimeo: Video hosting (US)
• Google Analytics: Website analytics (US)
• Google Ads: Conversion tracking and remarketing (US)
• Meta (Facebook/Instagram): Advertising pixel for retargeting (US)
• TikTok: Advertising pixel for retargeting (US/Singapore)
• Attio: Customer relationship management (EU)

Each service has its own privacy policy. We encourage you to review them. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or the service provider’s participation in recognised data protection frameworks.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Programme purchase records: 7 years (UK tax requirements)
• Email marketing data: until you unsubscribe or request deletion
• Contact form enquiries: 2 years
• Website analytics: 14 months (Google Analytics default)

You may request deletion of your data at any time by contacting us.

8. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Request restriction of processing
• Data portability — receive your data in a structured, commonly used format
• Object to processing based on legitimate interest
• Withdraw consent for marketing communications at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, please use our contact form or email us at the address below. We will respond within 30 days.

9. Cookies

Our website uses cookies in two categories, each requiring your separate consent:

Analytics cookies

• Google Analytics (_ga, _ga_*): Used to understand how visitors interact with our website. These cookies collect information anonymously and report website trends without identifying individual visitors. Duration: up to 14 months.

Marketing cookies

• Meta Pixel (_fbp, _fbc): Used to show you relevant ads on Facebook and Instagram and measure ad campaign performance. Duration: 90 days.
• Google Ads (_gcl_au, _gcl_aw): Used for conversion tracking and remarketing on Google services, including YouTube. Duration: 90 days.
• TikTok Pixel (_ttp): Used to measure ad performance and show relevant ads on TikTok. Duration: 13 months.

In accordance with the Privacy and Electronic Communications Regulations (PECR), we will not set non-essential cookies without your consent. Our cookie banner allows you to independently accept or decline analytics and marketing cookies. You can change your preferences at any time by clearing your browser cookies and revisiting the site. Declining cookies does not prevent you from using our website.

10. Automated Decision-Making

Our pattern quiz uses your responses to generate personalised programme recommendations. This is based on simple scoring logic — no AI profiling or automated decisions with legal or significant effects are made. You are never required to act on any recommendation, and you can retake the quiz or contact us for personalised guidance at any time.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@dylanayaloo.com.