Privacy Policy
Last updated: April 12, 2026
Table of Contents
At YTTinBali ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.
1. Information We Collect
Personal Information You Provide
When you use our services, you may provide:
- Contact Information: Name, email address, phone number
- Inquiry Details: Messages, questions, and preferences submitted through forms
- School Information: If you're a school owner, details about your training program
Information Collected Automatically
When you visit our website, we may automatically collect:
- Device Information: Browser type, operating system, device type
- Usage Data: Pages visited, time spent, referral sources
- IP Address: For analytics and security purposes
- Cookies: Small data files stored on your device (see Section 3)
2. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide customer support
- Connect you with yoga schools based on your interests
- Send you marketing communications (with your consent)
- Improve our website, content, and services
- Analyse usage patterns and trends
- Prevent fraud and maintain security
- Comply with legal obligations
4. Third-Party Services
We may share your information with:
- Yoga Schools: When you express interest or submit inquiries
- Analytics Providers: To understand website usage (e.g., Google Analytics)
- AI Services (Anthropic): To power our AI chat feature, queries are processed by Anthropic. See Anthropic's privacy policy privacy policy.
- Email Service Providers: To send communications you've requested
- Hosting Providers: To store and serve our website
We require third-party service providers to maintain the confidentiality and security of your data.
5. Data Retention
We retain your personal information for as long as necessary to:
- Fulfil the purposes outlined in this policy
- Comply with legal and regulatory requirements
- Resolve disputes and enforce agreements
Inquiry data is typically retained for up to 3 years unless you request earlier deletion.
6. Your Rights
GDPR Rights (EU/EEA Residents)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a portable format
- Objection: Object to processing for certain purposes
- Restriction: Limit how we use your data
CCPA Rights (California Residents)
- Know what personal information is collected
- Know whether personal information is sold or disclosed
- Opt out of the sale of personal information
- Request deletion of personal information
- Non-discrimination for exercising your rights
To exercise any of these rights, please contact us at hello@yttinbali.com.
7. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our services, you consent to the transfer of your information to countries outside your country of residence. Our operations are based in India, and our servers and infrastructure providers may store and process data in multiple jurisdictions including India, the European Union, Singapore, and the United States, depending on the service.
9. Policy Updates
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
10. Browser Extension
YTTinBali offers a free Chrome browser extension that displays verified school data when visiting yoga school websites. This section explains exactly what the extension does with your data.
What the Extension Accesses
The extension reads only the domain and page title of the page you are viewing, used to look up matching schools in our directory. It does not read page content, form inputs, passwords, browsing history, or cookies. It only activates when you click the YTTinBali toolbar icon.
What the Extension Stores Locally
Your compare list (up to 4 schools) and a one-time welcome flag are stored in your browser using Chrome's storage.local API. This data is never transmitted to YTTinBali, never synced to any cloud, and never shared with third parties.
What the Extension Sends to Our Servers
When you click the icon, the extension sends only the domain and (optionally) page title to yttinbali.com to look up matching school data. We log standard server access information (IP, timestamp) for security and rate-limiting. We do not build user profiles or track browsing across sessions.
What the Extension Does Not Do
- Does not collect personal information (name, email, address)
- Does not use cookies, tracking pixels, or third-party analytics
- Does not display advertisements
- Does not access browsing history or modify web pages
Permissions Explained
- storage — to save your compare list locally
- activeTab — to read the current tab's domain when you click the icon
- scripting — to read the page title from the active tab
Information Accuracy Disclaimer
All data shown in the extension is provided for reference only. Prices, course dates, availability, and details change frequently and may not reflect real-time information. Always verify all details directly with the school before making any booking or financial commitment. YTTinBali is not liable for any outcomes resulting from information shown in the extension.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: hello@yttinbali.com
- Contact page: Contact Us
For GDPR-related inquiries, you may also contact your local data protection authority.