Privacy Policy

Effective date: 28 July 2026

1. Introduction

‍Avoyoga (“we”, “us” or “our”) is committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”) and its subsidiary legislation.

This Privacy Policy explains how we collect, use, disclose, store, transfer and protect personal data when you register for classes or events, make bookings, use our website (www.avo.sg), or otherwise interact with us. It also describes your rights and how you can exercise them.

This Privacy Policy should be read together with our Terms & Conditions. By submitting a registration or booking form, making a booking, or otherwise providing us with personal data, you acknowledge that you have read and understood this Policy.

‍

2. Personal Data We Collect

‍We may collect the following categories of personal data:

• Identity and contact information (name, email address, telephone number).
• Health or medical information that you voluntarily provide (for example, previous injuries, conditions or medications) solely for safety and participation purposes.
• Booking and participation records (class or event attendance, packages, membership status).
• Liability waiver and risk-assumption information.
• Photographs or video recordings taken during classes or events (where consent has been given).
• Any other information you choose to provide when contacting us.

We do not intentionally collect NRIC/FIN numbers or other national identity numbers unless required by law or a specific legitimate purpose that has been notified to you.

‍

3. How We Collect Personal Data

‍We collect personal data when you:

• Complete a registration or event form on our website.
• Make a booking through Acuity Scheduling.
• Communicate with us by email, WhatsApp, phone or in person.
• Participate in classes, courses or events.
• Provide consent for photographs or videos.

We may also receive limited information from third-party platforms that process bookings or payments on our behalf.

‍

4. Purposes of Collection, Use and Disclosure

‍We collect, use and disclose personal data for the following purposes:

• Processing registrations, bookings and payments.
• Administering classes, courses, memberships and packages.
• Assessing fitness for participation and managing safety (including emergency medical attention where necessary).
• Communicating with you about bookings, schedule changes, studio information and service-related matters.
• Maintaining records for operational, auditing and legitimate business purposes.
• Defending or establishing legal claims.
• Complying with legal or regulatory obligations.
• (With separate consent) marketing or promotional communications and use of photographs/videos.

We will not use your personal data for purposes that are materially different from those notified to you without obtaining fresh consent or relying on an applicable exception under the PDPA.

‍

5. Disclosure of Personal Data

‍We may disclose personal data to:

• Our service providers who assist us in operating the business (see section 6).
• Professional advisers (lawyers, insurers, accountants) where necessary.
• Government authorities or law enforcement if required by law or legal process.
• Any other party with your consent or as otherwise permitted under the PDPA.

We do not sell personal data.

‍

6. Transfer of Personal Data Outside Singapore

‍Some of our service providers process personal data outside Singapore:

• Webflow (website forms and hosting) – primarily United States.
• Acuity Scheduling (bookings) – primarily United States (Squarespace).
• Google Sheets / Google Workspace (backups and internal records) – may involve processing outside Singapore.

Where personal data is transferred overseas, we take steps to ensure that the recipient provides a standard of protection comparable to that under the PDPA. This is typically achieved through contractual agreements (including data processing terms or standard contractual clauses where applicable) and the providers’ own compliance measures and certifications.

‍

7. Retention of Personal Data

‍Under the PDPA we are required to cease retaining personal data, or remove the means by which it can be associated with particular individuals, as soon as it is reasonable to assume that the purpose for which the data was collected is no longer being served and retention is no longer necessary for legal or business purposes.

In practice, we retain registration forms, booking records, health declarations and liability waivers for as long as necessary to fulfil the purposes set out in this Policy and for legitimate legal and business needs, including the defence of potential claims.

Having regard to the limitation periods under Singapore’s Limitation Act (personal injury claims are generally subject to a 3-year period from the date of injury or knowledge, with an overriding long-stop in certain cases), we generally retain relevant records for a period of up to 7 years after the last relevant activity or enrolment for adult participants. For minors, we retain records for a longer period consistent with the extended limitation rules that apply to persons under disability.

Once retention is no longer necessary, we will securely delete or anonymise the personal data. We may retain anonymised or aggregated data indefinitely for statistical or operational purposes.

‍

8. Protection of Personal Data

‍We implement reasonable security arrangements to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. This includes access controls, use of reputable service providers with established security practices, and limiting access to personal data to authorised personnel on a need-to-know basis.

No method of transmission or storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security.

‍

9. Your Rights

‍Under the PDPA you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent to our collection, use or disclosure of your personal data (subject to legal or contractual restrictions and reasonable notice). Withdrawal may affect our ability to provide certain services.
• Request that we cease retention of your personal data where it is no longer necessary for legal or business purposes.

Requests should be submitted in writing to the contact details in section 11. We will respond within a reasonable time (and in any event within the timelines required by the PDPA). We may need to verify your identity before processing a request. In some cases we may charge a reasonable fee for access requests, which we will inform you of in advance.

‍

10. Data Protection Officer

‍We have designated a Data Protection Officer (“DPO”) who is responsible for ensuring our compliance with the PDPA. Data Protection Officer: studio@avo.sg

Please contact the DPO for any questions, access/correction requests, withdrawal of consent, or complaints regarding personal data.

‍

11. Changes to this Privacy Policy

‍We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised effective date. We encourage you to review this Policy periodically. Continued use of our services after changes have been posted constitutes acceptance of the updated Policy.

‍

12. Contact Us and Governing Law

‍If you have any questions about this Privacy Policy or our personal data practices, please contact us at:

studio@avo.sg‍

This Privacy Policy is governed by the laws of Singapore.