Privacy Policy

privacy@kripalu.org

Your Privacy is Important to Us

Kripalu Center for Yoga & Health (“Kripalu,” “we,” “us,” and/or “our”) respects the privacy of our guests and other visitors. This privacy policy (this “Policy”) applies to our website, kripalu.org, and any of our other Internet properties or mobile applications (collectively, “our Site”), and all services, trainings, activities, classes, store purchases, Programs (as defined in Section 1(B)), certifications, on and off site at the Kripalu Center for Yoga & Health in Stockbridge, MA (the “Kripalu Center”), offered by Kripalu (collectively, with our Site, the “Services”). By accessing or using the Services or by registering individually or on behalf of your organization, you (you, and as appropriate, your organization, and its authorized users, are collectively referred to hereafter as “you,” or “your”), signify that you have read, understand and agree to be bound by our Policy; and you consent to the collection and use of your information as described in this Policy, whether or not you register for the Services (on the Site or otherwise).

This Policy explains the type of information we collect, how we may use the information, and under what circumstances we may disclose the information. This Policy also explains how to manage the information that you provide to us when you use our Services. 

1. Information We Collect

Your privacy is important to us. Whenever you use our Services, visit our Site, or submit information to us, we receive information about you. At times, we collect, retain, and utilize Personal Data about you to operate our organization and to make our Services and other opportunities available. The term “Personal Data” means information that identifies, or can be used to identify, you, such as your full name, account registration information, phone number, mailing address, and email address. We recognize and respect your privacy concerns relating to this information.

We obtain Personal Data in a variety of ways. We collect Personal Data and other information directly from you; from third parties we collaborate with in providing the Services; and automatically through your use of our Site or Services. We may combine all of the information we collect about you from these various sources.

  1. Information You Provide Directly to Us

    The information that we receive directly from you depends on the nature of your interactions with us. We may receive, and collect, information (including Personal Data) about you in the following ways:

    • When you register for our Services, you may be asked to submit information such as your name, title, email address, contact information, gender, date of birth (if under 18), emergency contact information, and school district, where applicable. As part of your account registration, if you register through our Site, you will also need to provide registration information, such as a username and password.
    • When you make a reservation either by phone, in-person, or through our Site. If a payment is required as part of the reservation, payment information will be collected. For further information on our payments and billing policies, please see the “Payment Information” discussion in Section 1(D).
    • When you submit information to us, whether in-person, over the phone, or through our Site, including submitting an online form, applying for employment, submitting responses to a survey, or participating in a contest, we collect Personal Data about you.
    • When you sign up for email offerings or marketing materials, we collect Personal Data about you.
    • When you make a purchase at the Kripalu Center, we collect Personal Data about you. If you make a purchase at the store, we will collect your payment information. For further information on our payment and billing policies, please see the “Payment Information” discussion in Section 1(D).
    • When you visit the Kripalu Center, we may collect information from you to maintain a record of your visit.
    • When you interact with our customer or guest services or contact us with other inquiries through email, phone, or other means of communication, we collect Personal Data about you.
       
  2. Program Evaluation and Research Information You Provide Voluntarily to Us

    When you participate as a guest in one of our Programs (as defined in this section), we may collect Personal Data, evaluation materials (surveys, questionnaires, etc.), and other information from you. We periodically use surveys, questionnaires, evaluations, and other pre- and post-program evaluation and research tools and participation documents to gather additional information about you and our Programs and other activities.

    For example, we offer a diverse assortment of programs, such as our RISE™ training programs to organizations and individuals (“RISE™,” and collectively, with our other program offerings, referred to as the “Programs”). You may be asked to authorize us (or a permitted third party) to collect information to assess the effectiveness of our Programs, your feedback on a Program, and other data. (For a discussion of Personal Data and other information you provide directly to third parties, please see Section 1(C), titled “Information You Provide Directly to Third Parties” below). Additionally, following your attendance at a Program, we will generally request that all Program participants complete evaluations and perhaps other post-Program participation documents.

    We may use SurveyMonkey, Inc. (“SurveyMonkey”) to collect some survey and questionnaire data. Data collected via SurveyMonkey is subject to the SurveyMonkey Privacy Policy.
     

  3. Information You Provide Directly to Third Parties

    Often, we collaborate with certain third parties in providing the Programs discussed in Section 1(B) above and other activities. In some cases, you may be asked by third parties to share your Personal Data and other information directly with such third party, and that third party may pass along your Personal Data it receives from you to us.

    From time to time, Kripalu, on our own, and/or in collaboration with certain qualified third parties (“Third-Party Research Partners”), will conduct various research studies in connection with the Program (“Research Studies”). When you voluntarily submit information directly to a Third-Party Research Partner, this information will be shared by the Third-Party Research Partner with us. For example, you may be asked to voluntarily complete electronic and other questionnaires (“Study Questionnaires”), which are generally sent to Program participants by Third-Party Research Partners, which are different from the general questionnaires or surveys sent by us.

    Where you disclose your Personal Data directly to a third party, such as a Third-Party Research Partner, please be aware that all Personal Data and other information you disclose will be subject to the privacy policy and practices of such Third-Party Research Partner or such other third party. We are not responsible for the privacy policies and practices of such third parties. Because we do not control the privacy practices of these third parties, you should read and understand their privacy policies before you submit information to them.
     

  4. Payment Information

    We may ask you to provide us with your billing information (such as your credit card number, bank account number, and billing address) if you choose to pay for our Services. We employ third-party encryption technology to keep your payment information secure. All reservations and bookings (whether online, in-person, or over the telephone) are made and processed directly through a fully-integrated third-party solution.

    Whether you make a reservation online through our Site, in-person at the Kripalu Center, or over the telephone, we do not enter or store any payment information in our computers, networks, facilities, online database, or files. The portion of the platform where payment information is processed and ultimately stored is currently operated and controlled by Shift4 Corporation (“Shift4”) (a PCI-compliant servicer that handles all of our payment processing). We do not review your billing information if you engage in a payment transaction, although we do know the amount that is charged to your credit card or debited from your bank account in any such transaction. Payment processing is governed by the Shift4 Privacy Policy which we do not control, and as such we encourage you to review the Shift4 Privacy Policy before submitting any payments.

    Please note that we may change our payment processor at any time, in which case, this Policy will be updated.

    If you are submitting data, especially Personal Data, on behalf of a third party, you are responsible for ensuring that you have the necessary permission to share that information.
     

  5. Information We Collect Automatically

    Kripalu may gather information automatically about your online use of our Services through a variety of mechanisms. Whenever you use our Services online or access our Site, we may collect non-identifying information from you, such as your IP address, referring URL, browser, operating system, cookie information, and Internet Service Provider. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, this information alone cannot usually be used to identify you. Please refer to Section 6 of this Policy regarding our use of internet-based third-party advertising and do not track technology.

    We use this information in the aggregate (combined with similar information collected from other individuals who are using our Services) to help us analyze, maintain, and improve our Services, to monitor the online usage of our Services, assess our Site’s performance, ensure technological compatibility with your computer, and understand the relative importance of the information provided about our Services. We may also use this data to conduct statistical analyses on usage patterns, trends and other aggregated data.

    Kripalu does not collect Personal Data automatically, but may tie information that does not identify you (that is collected automatically) to Personal Data you have (or someone authorized by you has) provided to us directly. Whenever we associate automatically collected data with your Personal Data, we will treat it as Personal Data.
     

  6. Information From Other Sources

    We may also obtain information about you from other sources. For example, we may receive background information in connection with employment opportunities; provided, however, we will provide the applicable policies and procedures to you in such instance. We may also purchase or obtain Personal Data (for example, email lists) from third-parties.

2. How We Use and Share Information

Except as otherwise stated in this Policy, we do not trade, rent, or share your information (including Personal Data) with third parties, unless you ask or authorize us to do so.

In general, we collect, store, and use your Personal Data and other information to provide you with a safe, smooth, efficient, and customized experience. One important use of your information is communication. We may use Personal Data and other information collected from you, including in any one or more of the following ways:

  • To allow you to access our Services and materials. Your information is also used to allow you to register;
  • To provide you support for registration, Site service, and other Services;
  • To solicit feedback about the Programs;
  • To suggest and plan future Programs;
  • To use in Research Studies, which you voluntarily agree to participate in;
  • To provide you with Services, products, and information you request, and the products and services of certain associates and affiliates, such as guest speakers;
  • To send you information about our products and Services;
  • To seek your opinion about our products and Services;
  • To analyze, maintain, evaluate, and improve the effectiveness of our Services or your experience, or to enhance our product and Services offerings;
  • To process your application for employment;
  • To associate information about you that we collect online and offline, for example from your visit to Kripalu, your phone reservation, or with information you provide online through the Site or through emails you send us;
  • To facilitate your participation in guest speaker and other third-party events;
  • To facilitate contact from Third Party Research Partners who may invite your voluntary participation in certain Research Studies;
  • To process your submission to any of our online contests; and
  • In connection with certain audits and other reviews.

For example, when you send an email to us, you are communicating with us electronically and consent to receive communication from us electronically. We may retain the content of the email, your email address, and our response in order to service your needs and requests. We may use the data that you provide to send you email and for other business purposes, including marketing communications about our products or services that we believe you may find of interest.

We may share or transfer your Personal Data as directed or authorized to do so by you or where you consent to such disclosure. We may aggregate your Personal Data and other information with that of other individuals in order to analyze and compare information to share on the Site, Services, and elsewhere, and you consent to such use, except as otherwise discussed in this Policy. A more detailed discussion of the ways we may use, disclose, and share with third parties your Personal Data is set forth immediately below.

  1. Programs

    When you attend an onsite research and/or training Program at the Kripalu Center, we may use and share your Personal Data and other information you provide.

    For example, when you voluntarily complete a survey or evaluation form that you receive directly from us, we may use this information you provide to us for our own internal research purposes. Typically, we will only disclose or share aggregate, anonymous, or de-identified information for research, compliance, marketing, advertising, or other purposes. We may, however, publicize direct quotes from responses to a survey or evaluation; provided, however, that we will not disclose the participant’s name associated with the quote without that participant’s express, prior permission.

    Further, we may also disclose your Personal Data to third parties. For instance, we may share your information either before or after a Program with your organization, a guest speaker/lecturer, and/or other relevant third parties (typically, some or all of your contact information, such as email address). We may also share your Personal Data with Third-Party Research Partners who may invite your voluntary participation in certain Research Studies (as described below in Section 2(B).
     

  2. Research Studies

    Research Studies may be performed by Kripalu on its own, by a Third-Party Research Partner, or as a collaboration between us and a Third-Party Research Partner. The information you provide in connection with a Research Study will be shared between Kripalu and its Third-Party Research Partners in order to research to evaluate data and feedback from Program participants and other resources.

    Specific to Programs (such as RISE™) where research is performed by Third-Party Research Partners and/or other third parties associated with Kripalu, you may be asked by our Third-Party Research Partners to voluntarily provide information directly to these Third-Party Research Partners, which will then be shared by the Third-Party Research Partners with us. While we often send general questionnaires or surveys, a Third-Party Research Partner will generally send Study Questionnaires to Program participants. These Study Questionnaires may be provided prior to attending the Program, then again at the conclusion of the Program, and then after a period of time following the Program’s conclusion. Similarly, you may have an opportunity to voluntarily complete a survey offered by us or a third party before and/or after a Program.

    The Third-Party Research Partner will then aggregate the information collected via the Study Questionnaires and other materials it has been provided, and perform an analysis, which it will share with the rest of the research team in aggregate form. Please refer to Section 1(C) regarding submission of information directly to a third-party.
     

  3. Third-Party Marketing

    You may be presented with opportunities to receive information and/or marketing offers directly from third parties. If you later decide that you no longer want to receive communication from a third party, you will need to contact that third party directly. Where your Personal Data is voluntarily disclosed by you to third parties, all information you disclose will be subject to the privacy policy and practices of such third parties. We are not responsible for the privacy policies and practices of such third parties and, therefore, you should review the privacy policies and practices of such third parties prior to agreeing to receive such information from them.
     

  4. Third-Party Service Providers and Partners

    We may use third-party vendors, consultants, and other service providers to perform certain services on behalf of Kripalu, such as hosting the Site, hosting and managing the data, designing and/or operating the Services’ features, tracking the Service analytics, enabling us to send you information, or performing other administrative and operational tasks. We may provide these vendors with access to your information, including Personal Data, to carry out the services they are performing for you on our behalf.

    We may transfer Personal Data to third-party vendors, consultants, and other service providers who provide services that allow us to enhance the information we present to you either now or in the future, or who provide services that may help us provide additional services or features to you either now or in the future. To the extent that we use third-party analytics service providers to evaluate and provide us with information about the use of the Services and viewing of our content, we may share Personal Data with these analytics service providers, and they may set and access their own cookies, web beacons and embedded scripts and other tracking devices on your personal device(s).

    We expect all of our vendors, consultants, and other service providers to operate under federal and state laws regarding consumer privacy and data protection. Any such third parties shall be required to maintain the confidentiality of your Personal Data in line with this Policy and not use your Personal Data or other information except in connection with our Services to you.

    Furthermore, we may also provide to our partners (and other third-party partners who might benefit from the information) with aggregated de-identified data (i.e., compiled data that does not in itself identify you, for research and commercial purposes). The Site or Services may allow you to create an account as part of a partnership with other organizations. Creating an account through one of these partner portals may result in your data being automatically shared with one or more of our partners, through their accounts or through other means. In this situation, we will indicate on the relevant portals if your data will be automatically shared with a third party.

    We may also, on occasion, share, sell, rent, or exchange all or part of our customer postal lists with carefully selected organizations with whom we have relationships for our own, and their own, promotional purposes only. Our partners agree that they will not use your information we provide to engage in any solicitation efforts. The information we share (either directly or through a list broker) will be limited to your name and mailing address. We do not control the privacy practices of our list broker, InfoGroup, Inc. (“InfoGroup”), and as such, we encourage you to review InfoGroup’s Privacy Policy.

    If you prefer that we do not exchange, rent, sell, or otherwise share your name and postal address with our partners, please let us know by following the instructions in the procedures to opt out in Section 3 below.
     

  5. Kripalu Promotional Efforts

    At times, we may take photographs and/or make audio and video recordings of guests to promote the benefits of participating in our Programs and activities. Whenever these activities are happening, you consent to being the subject of any photographs or audio/video recordings made by Kripalu staff and grant permission for these to be published or posted in ways that promote Kripalu unless you inform our staff that you do not want to participate or move to a place in the room that is not being photographed or recorded.
     

  6. Social Media and Posting of Photographs and Videos

    We recognize that a portion of our guests wish to photograph, video, and audio record aspects of their Program experience to post on various social media sites, such as Facebook and YouTube. In order to protect the privacy of others, we require that all guests agree not to post or publish any photographs, video, or audio recordings of other individuals, or make use of the Kripalu name or logo, without our express permission. You understand that you are solely responsible and potentially liable for any harm or damages caused by your online activity relating to Kripalu or our guests and staff.
     

  7. Release of Your Information for Legal Purposes

    We may access, use, preserve, transfer, and disclose your information (including Personal Data), including disclosure to third parties, to the fullest extent permitted by applicable law: (i) to satisfy any applicable law, regulation, subpoenas, governmental requests or legal process if in our good faith opinion such is required or permitted by law; (ii) to protect and/or defend the Site’s Terms of Use or other policies applicable to the Site or Services, including investigation of potential violations thereof; (iii) to protect the safety, rights, property or security of the Services or any third party; and/or (iv) to detect, prevent or otherwise address fraud, security or technical issues. Further, to the fullest extent permitted by applicable law, we may use IP address or other device identifiers, to identify users, and may do so in cooperation with third parties such as copyright owners, Internet service providers, wireless service providers and/or law enforcement agencies, including disclosing such information to third parties, all in our discretion. Such disclosures may be carried out without notice to you, to the fullest extent permitted by applicable law.
     

  8. Security and Protective Measures

    We may, in our sole discretion, share, or transfer your Personal Data and other information to protect the security or integrity of our databases or the Services, to protect our business or reputation, to take precautions against legal liability, in the event of a business transition (see below), to protect and defend our rights or property, for required institutional risk control, or for resolving disputes, inquiries or complaints with respect to your use of the Services.
     

3. How You May Access and Manage Your Information and How to Opt Out

We want to provide you with meaningful choices regarding managing your information and communications you receive from us, and you may choose to limit or opt out of certain promotional/marketing communications and/or how and with whom we share your information. If you choose to opt out of promotional/marketing communications, please note this will correspondingly result in automatically opting out of any surveys we may send to evaluate your stay and any Programs you may have attended.

If you manage your account with us online, you may log in to update your Personal Data (such as your email or mailing address), and/or manage your preferences regarding marketing communications. Your online account also includes settings to request that our list broker add you to a “do-not-rent” list, which means we will not share your name and mailing address with our partners for promotional purposes (although you may continue to receive promotional communications from us).

Otherwise, if you do not manage an online account, or simply prefer, you may instead contact us at privacy@kripalu.org or at 866.200.5203 to update your Personal Data or to opt out of receiving marketing email.

You may still receive administrative communications from us, such as order confirmations, notifications about your account activities (e.g., account confirmations, password changes, etc.), products or services you have requested, and other important announcements, and you may receive direct mail from us.

4. Personal Information About Children

As a general matter, the Services are not intended for use by children. We do not knowingly collect any Personal Data from children younger than the age of thirteen (13) through our Site. We will endeavor to delete any Personal Data collected that we later determine to be from a user younger than the age of thirteen (13). If you are a parent or guardian of a child under the age of thirteen (13) and believe he or she has disclosed Personal Data to us, please contact us at privacy@kripalu.org.

Notwithstanding the foregoing, we may collect Personal Data (such as date of birth and gender) from children under thirteen (13) in-person when they visit the Kripalu Center. In such cases, we will provide the applicable policies and procedures at that time.

5. How We Protect Information

We maintain administrative, technical and physical safeguards to help protect against loss, misuse or unauthorized access, disclosure, alteration or destruction of the information you provide in connection with our Services and through our Site. We maintain reasonable physical, electronic and procedural safeguards to protect the confidentiality of your Personal Data. The security measures in place on the Services and computer systems aim to protect the loss, misuse or alteration of the information you provide to us. Unfortunately, no transmission of information over the Internet is completely secure. So please exercise caution when providing information online using our Site. If you have any questions or concerns regarding the security of your information, please email us at privacy@kripalu.org

6. Internet-Based Third-Party Advertising and Do Not Track Technology

Whenever you use the Site, we use third-party advertising companies to serve ads, and may utilize third-party services for data collection and analytics. These companies may use information about your visits to our Site and to other websites in order to provide advertisements about products and services which may interest you. In so doing, we or these third parties may use cookies or other technologies for the purpose of collecting certain information about you. This may include your server activity logging, browser cookies, web beacons, and embedded scripts. We use this information for our own marketing purposes, including but not limited to informing, optimizing and serving ads to you online when you are browsing other websites. We use a variety of third-party services to collect and track this information. Each service has its own Policy for handling Do Not Track signals and methods for opting out of the collection of information for these purposes. You consent to potentially encountering third-party tracking technologies in connection with use of the Services and accept that our statements under this Policy do not apply to the tracking technologies or practices of such third parties. For more information on internet based-advertising, including options for opting out, the Network Advertising Initiative has created a website, which you can access at networkadvertising.org.

7. Third-Party Sites and Social Media Plug-Ins

When you click on links on our Site that take you to third-party websites, you will be subject to those sites’ privacy policies. We encourage you to read the posted privacy statement on those sites.

We use social media buttons or plug-ins on our Site, for example for Facebook, Twitter, Instagram, and Pinterest. If you click on one of these buttons, your browser connects directly to the web servers of the associated social media network(s). If you are registered and logged into your account(s) on the(se) network(s), the network will receive and may store information about your use of our Site. Even if you are not registered with the social media network or you are logged out when you visit our Site, your IP address may be transmitted to and stored by these networks. If you interact with our Site through a social media network, then you may be permitting us to have access to information from your profile (such as your name, email address, photo, gender, location, and the people/sites you follow). Each network has its own privacy policy. If you don’t want the network to collect information about you or to share it with us, you must review the privacy policy on the network’s website and take the steps described there. In addition, you should log out of the relevant network before you visit our Site.

We are not responsible for the privacy practices and policies of these or any other third-party websites and/or social medial plug-ins.

8. Your California Privacy Rights

Under California law, California residents who have an established business relationship with us may choose to opt out of our disclosure of personal information about them to third parties for direct marketing purposes. Unless noted at the time of collection, our policy is not to disclose Personal Data collected online to a third party for direct marketing purposes without your approval. If you choose to opt out at any time after granting approval, please contact us by email at privacy@kripalu.org.

9. Business Transitions

In the event Kripalu goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, your Personal Data might be among the assets transferred and you hereby consent to such transfer or assignment.

10. Governing Law

We, and our servers, are located in the United States and are subject to the applicable U.S. local and national laws. When you choose to use our Services, you do so on your own initiative and understanding that your use of the Services and our use of your Personal Data and other information is subject to U.S. laws and regulations. If you choose to use our Services, you consent to the use and disclosure of information in accordance with this Policy and subject to such laws, including the transfer of your Personal Data to servers located in the United States.

11. How to Contact Us About Our Privacy Policy

Should you have any questions or comments concerning our Policy, you may email us at privacy@kripalu.org. If you would like to opt out of receiving marketing email from us, you may also email us at privacy@kripalu.org.

12. We Reserve the Right to Contact You

Kripalu reserves the right, but is under no obligation, to contact you for any reason regarding, related to, or arising from, the Services, your account or subscription, this Policy, the Terms of Use, or any other policies or agreements relevant to you. Our primary method of communication is email.

13. Changes to Our Privacy Policy

This Policy was last revised on the below date. Any changes to the Policy will be made through updates to the Policy and posted on our Site, with a new effective date. Unless we clearly indicate otherwise, we will use information in accordance with the Policy under which the information was collected.

Date: November 20, 2017