Privacy Policy
Last updated: April 2026
Scope of This Policy
Best Yoga Training Bali is a directory that helps prospective yoga teacher training students compare schools, programs, and prices across Bali, Indonesia. Our visitors come from Australia, the United States, the United Kingdom, the European Union, and many other countries. This policy describes the personal data we collect through the website, the purposes for which we use it, and the safeguards we apply. We operate in accordance with Indonesia's Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi, UU PDP No. 27 of 2022), which establishes comprehensive data protection rights for individuals within Indonesia and governs how organisations process personal data.
Enrollment Is Handled by Schools
An important distinction: this directory provides information to help you research and compare yoga teacher training programs. We do not process enrollments, collect deposits, or handle any payment on behalf of YTT schools. When you click a link or WhatsApp button to contact a school listed on this site, you leave our platform and enter a direct relationship with that school. Any personal data you share during the enrollment process (passport details, health declarations, dietary requirements) is collected and controlled by the school, not by us. We encourage you to review each school's own privacy policy before sharing personal information with them.
Information We Collect
Browsing data: Google Analytics 4 collects anonymised statistics about how visitors use the site, including pages viewed, session duration, and general geographic region. GA4 Consent Mode v2 ensures that analytics data is only gathered after you provide cookie consent. Contact form data: if you send a message through our contact page, we receive the name, email address, and message text you enter. This data is delivered to our inbox via Brevo, a transactional email service. We do not collect health information, Yoga Alliance registration numbers, or any other sensitive personal data.
Purposes of Processing
We use analytics data to understand which programs and locations attract the most interest, so we can keep the directory relevant and accurate. Contact form data is used exclusively to respond to your enquiry. We do not build user profiles, send marketing emails, or share personal data with the yoga schools listed on the site. A US student reviewing Ubud YTT programs, for example, can browse every school listing without us knowing who they are, unless they voluntarily submit a contact form.
Service Providers
Three third-party services process data on our behalf. Vercel Inc. hosts the website and may log your IP address in server access logs, retained for up to 30 days. Google LLC operates Analytics 4 under its data processing terms, processing anonymised browsing statistics. Brevo (Sendinblue) receives contact form submissions for the sole purpose of email delivery. School data displayed on the directory (program details, pricing, reviews, photos) is compiled from publicly available sources including school websites, Yoga Alliance registries, and Google Maps.
Cookies and Local Storage
GA4 sets analytics cookies only after you accept the cookie consent prompt. A localStorage item records your display currency preference (USD, AUD, or GBP). No advertising cookies, social media trackers, or fingerprinting technologies are used on this site. If you block all cookies, the directory functions normally except that your currency preference resets on each visit.
Data Retention
GA4 analytics data: retained for 14 months, then automatically deleted by Google. Contact form emails: deleted from our inbox within 90 days after your enquiry is resolved. Vercel server logs: purged after 30 days. Your currency preference in localStorage: persists in your browser until you clear your site data.
International Transfers
UU PDP No. 27/2022 requires that cross-border transfers of personal data maintain equivalent protection. Our data flows involve transfers to the United States (Google Analytics, Vercel edge network) and Europe (Brevo email servers). Given that we process only minimal, voluntarily provided personal data and do not handle sensitive categories, we have assessed the risk of these transfers as low. Visitors from the EU retain their rights under the General Data Protection Regulation, including the right to lodge a complaint with their national supervisory authority. Australian visitors are covered by the Australian Privacy Act 1988.
Your Data Rights
Under UU PDP, you may request access to your personal data, demand correction of inaccurate records, withdraw consent for processing, and ask for deletion of your data. To make any of these requests, contact us through the form on our contact page. We will respond within 30 days. You may also raise concerns with the relevant authority in your home country if you believe your data has been mishandled.
Changes
This policy may be revised periodically. Updates will be published on this page with an adjusted date. Significant changes that alter how we process personal data will be noted prominently for at least 60 days.