Privacy Policy

privacy@kripalu.org

Your Privacy is Important to Us

Kripalu Center for Yoga & Health (Kripalu, we, us, and/or our, etc.) respects the privacy of our donors, guests, and visitors (you, your, etc.). This privacy policy (Policy) applies to kripalu.org, and any of our other Internet properties (each a Site and collectively, the Sites), mobile applications, donation and giving activities, store purchases, and all services, trainings, activities, classes, Programs (as defined in Section 1(A)) offered by Kripalu, whether at the Kripalu Center for Yoga & Health in Stockbridge, MA (Kripalu Center) or elsewhere (with all of the foregoing referred to as Services).

By accessing or using a Site, or engaging in Services (whether individually or on behalf of your organization) you signify that you have read, understand and agree to the terms of this Policy; and you consent to the collection and use of your information as described in this Policy, unless you opt-out as provided for hereunder.

This Policy describes the following:

1. INFORMATION COLLECTED

Use of our Sites and our Services, may result in the collection of information from you (Your Information). Personal Data is a subset of Your Information, and refers to information that identifies, or can be used to identify you, such as your full name, account registration information, phone number, mailing address, and email address. Personal Information also includes your gender, birth date, and emergency contact details to the extent the emergency contact details identify another individual. In addition, the Healing Arts Department may ask for basic medical information that might impact or prevent you from receiving certain Healing Arts Services, including information about injuries, surgeries, pregnancy, or medical conditions such as cancer. These details will be treated as Personal Data, although they are generally not stored by Kripalu. If you are submitting data, especially Personal Data, on behalf of a third party, you hereby covenant to Kripalu that you have the necessary permission to share that information.

Donors should please refer to donor-specific terms below.

Your Information can be collected directly from you or from third parties we collaborate with in providing the Services. Your Information may be collected automatically through your use of our Sites or Services. Your Information may be combined or aggregated with information obtained via other sources, unless otherwise prohibited by this Policy.

A. Information You Provide Directly to Us

Generally
We may receive and collect Your Information as follows:

  • When you register for or otherwise participate in our Services;
  • When you register or apply for membership with the Kripalu Schools;
  • When you make a reservation either by phone, in-person, or through our Sites;
  • When you submit a required form or answers to one of our surveys;
  • When you apply for employment or to volunteer;
  • When you participate in promotions or contests sponsored by Kripalu;
  • When you sign up for email offerings or marketing materials;
  • When you make a purchase at the Kripalu Center;
  • When you visit the Kripalu Center; or
  • When you interact with our customer or guest services or contact us with other inquiries through e-mail, phone, or other means of communication.

For details regarding submission of financial and payment information generally, please see financial information below.

Program Evaluation and Research Information Provided Voluntarily
When you participate in a program from our standard catalog offerings, or as part of a private group visit (Program), you may be asked to submit Your Information via evaluation materials, surveys, questionnaires, and other pre- and post-Program forms and research tools. We may use SurveyMonkey, Inc. (SurveyMonkey) to collect certain survey and questionnaire data. Data collected via SurveyMonkey is subject to the SurveyMonkey Privacy Policy; and if Kripalu uses a different third party to collect such information, that party’s policies will be posted in an update to this Policy.

Third Party Research Partners, Guest Faculty and Other Third-Party Collaborators
Often, we collaborate with certain third parties in providing the Programs or engaging in Program-related activities, including with guest faculty and speakers and the Third-Party Research Partners described below (Our Collaborators). In some cases, you may be asked by Our Collaborators to share Your Information directly with them; and in all such cases, Our Collaborators are required to provide you with written notification of their own privacy and security practices vis-à-vis such information. When Our Collaborators pass along Your Information to us, Kripalu will handle it in accordance with this Policy, irrespective of the separate terms provided by Our Collaborators.

From time to time, Kripalu, on its own, and/or in collaboration with certain qualified third-party research and medical organizations (Third-Party Research Partners), may engage in research studies in connection with a Program (Research Studies). Research Studies often involve the voluntary submission of Your Information via electronic and other questionnaires (Study Questionnaires) directly to the Third-Party Research Partners. These Study Questionnaires are different from the general questionnaires or surveys sent by Kripalu. Kripalu is not responsible for the privacy policies and practices of Our Collaborators or Third-Party Research Partners and you should please read and confirm your understanding of their respective privacy policies before you submit information directly to them.

For clarity, in cases where Kripalu shares Your Information with Our Collaborators, Our Collaborators are obligated to comply with this Policy in the treatment and use of Your Information.

Financial Information (Non-Donor)
Billing and other financial information (such as your credit card number or bank account number when combined with your billing address, and referred to collectively as Financial Information) will be required to register for certain Programs, book a visit to Kripalu Center, or related to other transactions, such as purchases made through the Kripalu Shop. Tokenized information – which Kripalu does receive – is not Financial Information for purposes of this Policy because Kripalu cannot access bank or card numbers via the token. All reservations and bookings (whether online, in-person, or over the telephone) are made and processed directly through a fully-integrated third-party solution.

For Financial Information relating to you in your capacity as a Donor to Kripalu (Donor Financial Information), please refer to the Donor-Specific Terms below.

Kripalu does not enter or store any Financial Information in its computers, networks, facilities, online database, or files, although tokens do reside on our systems until all transactions with you have been finalized.  Financial Information is processed and ultimately stored on a platform currently operated and controlled by Shift4 Corporation, a PCI-compliant service that handles all of our payment processing (Shift4). We do not review your Financial Information if you engage in a payment transaction, although we do know the amount that is charged to your credit card or debited from your bank account in any such transaction.  We may also receive your billing address.  Payment processing is governed by the Shift4 terms and privacy policies, available at  www.Shift4.com.

Please note that we may change our Financial Information processor at any time, in which case, this Policy will be updated.

B. Information Collected Automatically

Meta Data
Certain information may be gathered automatically through a variety of mechanisms, including non-identifying information, an IP address, referring URL, browser, operating system, cookie information, and Internet Service Provider (Meta Data). Generally, this kind of information on its own cannot be used to identify you.

Kripalu does not use automatic means to collect Personal Data, but we may associate Meta Data with Personal Data you or someone authorized by you has provided to us. Whenever we associate Meta Data with your Personal Data, it will be treated as Personal Data.

Information Obtained from Other Sources
We may obtain information about you from other sources. For example, we may receive background information in connection with an employment application; or via an email list purchased from or otherwise shared by a third party. Once information is received by Kripalu, we will treat it in accordance with this Policy.

Internet-Based Third-Party Advertising and Do Not Track Technology
Our Sites and certain Services use third-party advertising companies, which sometimes utilize third-party services for data collection and analytics.  These companies may use information about your visits to our Sites and to other websites in order to provide advertisements about products and services which may interest you. In so doing, we or these third parties may use cookies or other technologies for the purpose of collecting certain information about you. This may include your server activity logging, browser cookies, web beacons, and embedded scripts.

We use this information for our own marketing purposes, including but not limited to informing, optimizing and serving ads to you online when you are browsing other websites. We use a variety of third-party services to collect and track this information. Each service has its own policy for handling Do Not Track signals and methods for opting-out of the collection of information for these purposes. By using the Sites and Services, you consent to potentially encountering third-party tracking technologies and you understand and agree that our statements under this Policy do not apply to the tracking technologies or practices of such third parties.

For more information on internet based-advertising, including options for opting-out, the Network Advertising Initiative has created a website, which you can access here https://www.networkadvertising.org/.

Third-Party Sites and Social Media Plug-Ins
When you click on links on our Sites that take you to third-party websites, you will be subject to the privacy practices of the operator of the third-party website. We encourage you to read the posted privacy statement on those sites (if any). We are not responsible for the privacy practices and policies of these or any other third-party websites and/or social medial plug-ins.

We use social media buttons or plug-ins on our Sites, for example for Facebook, Twitter, Instagram, and Pinterest. If you click on one of these buttons, your browser connects directly to the web servers of the associated social media network(s). If you are registered and logged into your account(s) on the(se) network(s), the network will receive and may store information about your use of our Sites. Even if you are not registered with the social media network or you are logged out when you visit our Sites, your IP address may be transmitted to and stored by these organizations. If you interact with our Sites through a social media network, then you may be permitting us to have access to information from your profile (such as your name, e-mail address, photo, gender, location, and the people/sites you follow). Each network has its own privacy policy. If you do not want the network to collect information about you or to share it with us, you must review the privacy policy on the network’s website and take the steps described there. In addition, you should log out of the relevant network before you visit our Sites.

2. HOW INFORMATION IS USED

Kripalu may trade, sell, rent, or share Your Information with third parties in the manner specified in this Policy. In addition to those uses specified throughout this Policy, the following explains how we use Your Information, Meta Data, and other information collected automatically or via embedded third-party services.

A. Used for the Purpose Submitted
Other than as provided for in this Policy, we generally use Your Information for the purpose for which it was submitted. For example:

  • If you provide Your Information as part of an employment application, we will use it to process your application and communicate with you about the same;
  • If you provide Your Information to register for a Program or other visit to Kripalu Center, we will use Your Information to process the registration; or
  • If you request materials and Services, we will use Your Information to respond to and process your request, and may also add you to our database in order to provide you with additional materials and information in the future.

We also share or transfer Your Information as directed or authorized to do so by you or where you consent to such disclosure. We may aggregate Your Information with the information of other individuals in order to analyze and compare information as between users of our Sites and Services.

Other general uses include:

  • To communicate with you generally about our Sites, Programs and Services;
  • To solicit feedback about the Programs;
  • To facilitate your participation in events conducted by Our Collaborators;
  • To facilitate contact from Third-Party Research Partners who may request your voluntary participation in a Research Study as part of a Program; and
  • To communicate with you about our giving and donor opportunities.

The foregoing are just a few examples of certain uses tied to the nature of your interactions with us. The terms in the balance of this Section 2 provide additional details.

 

B. Other Uses

Research Studies
Research Studies may be performed by Kripalu on its own, by a Third-Party Research Partner, or as a collaboration between us and a Third-Party Research Partner. The information you provide in connection with a Research Study will be shared between Kripalu and its Third-Party Research Partners in order to research and evaluate data and feedback from Program participants and other resources. Specific to Programs (such as RISE™) where research is performed by Third-Party Research Partners and/or other of Our Collaborators, you may be asked to voluntarily provide information directly to the Third-Party Research Partners, which will then be shared by the Third-Party Research Partners with us. Study Questionnaires (if any) and related Program surveys will be sent to you from the Third-Party Research Partner and are distinct from Kripalu’s general surveys provided to all of our Program participants.

The Third-Party Research Partner will aggregate the information it collects via the Study Questionnaires and other materials you have provided, and will perform an analysis, which it will share with the rest of the research team in aggregate form, including its own Institutional Review Board, affiliates and others. Please refer to Section 1(A) regarding submission of information directly to a Third-Party Research Partner, which is always voluntary.

Programs & Our Collaborators
When you attend an onsite research and/or training Program at the Kripalu Center, we may use and share Your Information as follows: typically, we will only disclose or share aggregate, anonymous, or de-identified information for research, compliance, marketing, advertising, or other purposes. We may, however, publicize direct quotes from responses to a survey or evaluation; provided, however, that we will not disclose the participant’s name associated with the quote without that participant’s express, prior permission.

Further, we may also disclose Your Information to Our Collaborators and Third-Party Research Partners. For instance, we may share Your Information to permit Our Collaborators to communicate with you, provide you with materials relevant to a Program, or otherwise facilitate your registration in a Program to be provided by these third parties.

Third-Party Marketing Activities
You may be presented with opportunities to receive information and/or marketing offers directly from third parties, including in some cases, Our Collaborators. If you later decide that you no longer want to receive communication from a third party, you will need to contact that third party directly. Where information about you is voluntarily disclosed by you to third parties, all information you disclose will be subject to the privacy policy and practices of such third parties. We are not responsible for the privacy policies and practices of such third parties and, therefore, you should review the privacy policies and practices of such third parties prior to agreeing to receive such information from them.

Third-Party Service Providers
We may use third-party vendors, consultants, and other service providers to perform certain services on behalf of Kripalu, such as hosting the Sites, hosting and processing Your Information and Meta Data, designing and/or operating features of the Sites and Services, performing analytic services that allow us to enhance the information we present to you either now or in the future, or performing other administrative and operational tasks. We may provide these vendors with access to Your Information, including Personal Data, to carry out the services they are performing on our behalf.

We expect all of our third-party service providers to comply with federal and state laws regarding consumer privacy and data protection.

Furthermore, we may also provide our partners (and other third-party partners who might benefit from the information) with aggregated de-identified data (i.e., compiled data that does not in itself identify you) for research and commercial purposes.

We may also, on occasion, share, rent, or exchange all or part of our customer postal lists with carefully selected organizations with whom we have relationships, for our own, and their own, promotional purposes. The sharing activities described in this paragraph (either directly or through a list broker such as InfoGroup, Inc.) will be limited to your name and mailing address.

If you prefer that we do not exchange, rent, or otherwise share your name and postal address with our partners, please let us know by following the OptOut Procedures in Section 5 below

Kripalu Promotional Efforts
At times, we may take photographs and/or make audio and video recordings of guests to promote the benefits of participating in our Programs and Services. If you are a guest of Kripalu, you will be required to sign a Guest Participation Agreement and Release upon arrival (a sample of which is posted at https://kripalu.org/guest-participation-agreement-and-release), which addresses permissions and other rules related to use of photographs and other recordings made by Kripalu.

Release of Your Information for Legal Purposes
We may access, use, preserve, transfer, and disclose Your Information (including Personal Data), including disclosure to third parties, to the fullest extent permitted by applicable law: (i) to satisfy any applicable law, regulation, subpoenas, governmental requests or legal process if in our good faith opinion such is required or permitted by law; (ii) to protect and/or defend the Sites’ Terms of Use or other policies applicable to the Sites or Services, including investigation of potential violations thereof; (iii) to protect the safety, rights, property or security of the Services or any third party; and/or (iv) to detect, prevent or otherwise address fraud, security or technical issues. Further, to the fullest extent permitted by applicable law, we may use IP address or other device identifiers, to identify users, and may do so in cooperation with third parties such as copyright owners, Internet service providers, wireless service providers and/or law enforcement agencies, including disclosing such information to third parties, all in our discretion. Such disclosures may be carried out without notice to you if permitted by applicable law.

Security and Protective Measures
We may, in our sole discretion, share or transfer Your Information to protect the security or integrity of our Sites and Services, to protect our business or reputation, to take precautions against legal liability, in the event of a business transition (see below), to protect and defend our rights or property, for required institutional risk control, or for resolving disputes, inquiries or complaints with respect to your use of the Sites and Services.

Meta Data
We use this information in the aggregate (combined with similar information collected from other individuals who are using our Sites and Services) to help us analyze, maintain, and improve our Sites and Services, to monitor the online usage of our Sites and Services, assess our Sites’ performance, ensure technological compatibility with your computer, and understand the relative importance of the information provided about our Sites and Services. We may also use this data to conduct statistical analyses on usage patterns, trends and other aggregated data. Additional uses are specified in Section 1(B)

3. PERSONAL INFORMATION ABOUT CHILDREN

As a general matter, the Sites are not intended for use by children. We do not knowingly collect any Personal Data from children younger than the age of thirteen (13) through our Sites. We will endeavor to delete any Personal Data collected that we later determine to be from a user younger than the age of thirteen (13). If you are a parent or guardian of a child under the age of thirteen (13) and believe he or she has disclosed Personal Data to us, please contact us at legal@kripalu.org.

Notwithstanding the foregoing, we may collect Personal Data (such as date of birth and gender) from children under thirteen (13) in-person when they visit the Kripalu Center. In such cases, we will provide the applicable policies and procedures at that time.

4. DONOR-SPECIFIC TERMS

The provisions in this section apply to you if you have or will donate to Kripalu, making you a Donor. Other sections of this Policy will continue to apply to you in your capacity as a user of our Sites and Services, or a guest at Kripalu.

We may have a Donor’s name and associated information, including Personal Data (Donor Information) because the Donor provided it directly, or because it was obtained through a referral from a Trustee, Board member or other affiliate of Kripalu, or otherwise obtained via our standard development activities.

If a Donor seeks to honor someone, or donate in someone’s memory, we will also request information pertaining to the honoree or individual being memorialized, which may include the names of individuals related to such people. Kripalu will not share these gift amounts with anyone outside of Kripalu (unless legally required to do so), and will otherwise use the Donor Information as specified in this Section 4.

Donor Financial Information Submission
Donors who use the online portal available on a Site, are prompted to submit Donor Information, as well as Donor Financial Information. Donor Financial Information submitted online is processed by BlackBaud Payment Services (BBPS), a third-party payment processing service, and will be subject to the BBPS privacy policy available at https://www.blackbaud.com/privacy-policy.aspx. Kripalu will not receive Donor Financial Information from BBPS but is provided with your name and your donation amount. Kripalu has no control over or responsibility for BBPS vis-à-vis the Donor Financial Information and you should familiarize yourself with the BBPS Privacy Policy prior to submitting Donor Financial Information.

In cases where you submit Donor Financial Information in an “off-line” manner (via mail, or provided directly to an individual at Kripalu), Kripalu manually enters Your Information and Donor Financial Information into its fundraising system (currently Raiser’s Edge), where it is processed via BBPS. Although we retain certain Donor Information, such as your name, address and amount of donation, any Donor Financial Information received by Kripalu off-line is destroyed following processing in our systems.

Use of Information
Every donor has the option to request anonymity when making a gift. Anonymity may pertain to all donations, or may be requested for certain gifts. In certain cases, including those below, where a Donor has not requested anonymity, Kripalu may publish your name on a list of donors; or may share your name and mailing address (but not the amount of your gift) to a private party for whom news of your generosity will be personally meaningful (e.g., in memoriam gifts).

Some instances or examples of disclosures outside of Kripalu include: (i) to acknowledge your generosity as a Donor to Kripalu in an annual report, or in reporting on the results of a special campaign. This list may be arranged by bracketed gift amounts, but shall not identify the specific gift amount; (ii) to notify individuals or their family members whom you have recognized with a gift “in honor” or “in memory” as described above; or (iii) to notify the founders of certain designated funds of your generosity.

Kripalu will honor a request from any Donor to refrain from sharing mailing addresses or gift amounts outside of Kripalu, unless Kripalu is legally obligated to disclose such information, including in federally required Form 990 filings and other similar circumstances.

Donor Information is shared internally to facilitate Kripalu’s development efforts. In addition to being accessible to individuals within the development functions, Your Information and the Donor Financial Information (to the extent housed in Kripalu’s systems) may be shared with Trustees, Board members and other senior staff members. The sharing may be done via email, oral communications, or in written reports, and we are unable to honor requests for anonymity with respect to these internal sharing practices.

Although Kripalu reserves the right to retain information as needed to comply with legal and regulatory obligations, you may opt-out of other uses as specified in Section 5 below.

5. ADMINISTRATIVE MATTERS

A. How You May Access and Manage Your Information and How to Opt-Out
We want to provide you with meaningful choices regarding managing Your Information and the communications you receive from us, and you may choose to limit or opt-out of certain promotional/marketing communications and/or how and with whom we share Your Information. If you choose to opt-out of promotional/marketing communications, please note this will correspondingly result in automatically opting-out of any surveys we may send to evaluate your stay and any Programs you may have attended. In addition to responding to the provided link in our electronic communications, you may email contact@kripalu.org or call us at 800.741.7353 to opt-out or otherwise change your communication preferences (including being added to the “do not rent” list).

For catalog and programming requests, please email us at request@kripalu.org.

You may still receive administrative communications from us, such as order confirmations, notifications about your account activities (e.g., account confirmations, password changes, etc.), products or services you have requested, and other important announcements, and you may receive direct mail from us.

B. How to Contact Us About Our Privacy Policy
Should you have any questions or comments concerning our Policy you may e-mail us at legal@kripalu.org.

C. We Reserve the Right to Contact You
Kripalu reserves the right, but is under no obligation, to contact you for any reason regarding, related to, or arising from, the Services, Sites, your account or subscription, this Policy, the Terms of Use, or any other policies or agreements relevant to you. Our primary method of communication is email.

D. Your California Privacy Rights
Under California law, California residents who have an established business relationship with us may choose to opt-out of our disclosure of Personal Data about them to third parties for direct marketing purposes. Unless noted in this Privacy Policy, our policy is not to disclose Personal Data collected online to a third party for direct marketing purposes without your approval. If you choose to opt-out at any time after granting approval, please contact us by email contact@kripalu.org.

E. Transfer or Sale as Part of a Business Transaction
In the event Kripalu goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, your Personal Data might be among the assets sold or transferred and you hereby consent to such sale, transfer or assignment.

F. Governing Law
We, and our servers, are located in the United States and are subject to the applicable U.S. local and national laws. When you choose to use our Sites and Services, you do so on your own initiative and understanding that your use of the Sites and Services and our use of Your Information is subject to U.S. laws and regulations. If you choose to use our Sites and Services, you consent to the use and disclosure of information in accordance with this Policy and subject to such laws, including the transfer of your Personal Data to servers located in the United States.

G. Changes to this Policy
This Policy was last revised on the below date. Any changes to the Policy will be made through updates to the Policy and posted on our Sites, with a new effective date. Unless we clearly indicate otherwise, we will use information in accordance with the Policy under which the information was collected.

Last Updated Date: September 14, 2018