1. Introduction

This Privacy Policy explains how BARNES Julia (EI) collects, uses and protects personal data when you visit the website, contact me, purchase a product or service, or otherwise interact with my business.

It also explains how cookies and similar technologies are used on the website.

This Privacy Policy complements the website’s Legal Notices and Terms & Conditions of Sale.

I process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the French Data Protection Act (Loi Informatique et Libertés), and other applicable data protection legislation.

​

2. Data controller

The data controller responsible for your personal data is:

BARNES Julia (EI)
59 rue de Ponthieu, Bureau 326
75008 Paris, France
SIREN: 514 585 066
Email: julia@yogajulia.com

I am responsible for determining how and why your personal data is processed.

I have not appointed a Data Protection Officer (DPO). For any question concerning your personal data, you can contact me directly at julia@yogajulia.com.

​

3. Personal data collected

Depending on how you interact with my business, I may collect the following categories of personal data:

• first name and surname;

• email address;

• postal address, where required for a purchase or other service;

• information relating to products or services purchased;

• information provided when you contact me or communicate with me;

• information relating to your participation in online workshops, courses or programmes;

• technical information relating to your use of the website, such as IP address, browser type, device information, pages visited and referring website;

• information relating to cookies and similar technologies.

I only collect data that is relevant and necessary for the purposes described below.

Where information is required to provide a service, process a purchase or comply with a legal obligation, failure to provide that information may mean that I cannot provide the requested service or process the transaction.

​

4. How and why your personal data is used

Your personal data may be collected and processed for the following purposes:

4.1 Purchases and services

When you purchase a product or service, I may use your personal data to:

• process and administer your purchase;

• provide access to the relevant service, course, workshop or digital product;

• send you information relating to your purchase;

• manage customer records;

• issue invoices and maintain accounting records;

• respond to questions relating to your purchase.

The legal basis for this processing is the performance of a contract and, where applicable, compliance with a legal obligation.

4.2 Enquiries and communication

If you contact me by email, through a contact form or by another means, I use the information you provide to respond to your enquiry and manage our communication.

The legal basis is the performance of a contract or steps taken at your request prior to entering into a contract, or my legitimate interest in responding to enquiries and managing my business relationships, depending on the circumstances.

4.3 Newsletter and marketing communications

If you subscribe to my newsletter or otherwise give the required consent to receive marketing communications, I may use your name and email address to send you newsletters, information about my services, educational content and relevant offers.

The legal basis is consent, where consent is required.

You can withdraw your consent at any time by using the unsubscribe link included in my emails or by contacting me.

4.4 Website operation and security

I may process technical information about visitors to operate, maintain and secure the website, prevent fraudulent or malicious activity and ensure that the website functions correctly.

The legal basis may be my legitimate interest in operating and securing my website or, where applicable, compliance with a legal obligation.

4.5 Cookies and similar technologies

The website uses cookies and similar technologies for purposes including security, website functionality and, where applicable, other purposes described in Section 9 below.

Where consent is legally required, non-essential cookies or trackers are only used after you have given your consent.

​

5. Legal bases for processing

Depending on the purpose concerned, personal data may be processed on one or more of the following legal bases:

• Performance of a contract – where processing is necessary to provide a product or service you have purchased or to take steps at your request before entering into a contract;

• Legal obligation – where processing is necessary to comply with an obligation imposed by law, such as accounting or tax requirements;

• Consent – where you have given your consent to a specific processing activity, such as certain marketing communications or non-essential cookies;

• Legitimate interests – where processing is necessary for my legitimate business interests, provided that these interests do not override your fundamental rights and freedoms.

The applicable legal basis depends on the specific processing activity.

​

6. Who may receive your personal data?

Your personal data may be accessed by me and, where necessary, by service providers that process data on my behalf or provide services necessary to operate my business.

Depending on the service concerned, these may include:

• website hosting and website service providers, including Wix;

• email marketing and communication providers, including Kit;

• payment service providers;

• platforms used to provide online courses, workshops or digital products;

• professional advisers and service providers, such as accountants or technical service providers;

• public authorities or other recipients where disclosure is required by law.

These providers only receive the information necessary for the services they provide.

Your personal data is not sold or rented to third parties.

​

7. International transfers

Some of the service providers used to operate my business may process personal data outside the European Economic Area (EEA), including in countries such as the United States.

Where personal data is transferred outside the EEA, I take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law. Depending on the circumstances, this may include relying on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

​

8. How long your personal data is kept

Personal data is retained only for as long as necessary for the purposes for which it was collected, or for the periods required by applicable law.

Different retention periods may therefore apply depending on the type of data and the purpose for which it is processed.

For example:

• information relating to purchases may be retained for the period necessary to manage the contractual relationship and for the statutory accounting and tax retention periods;

• information relating to enquiries may be retained for as long as reasonably necessary to manage the enquiry and any resulting relationship;

• newsletter subscription data is retained while you remain subscribed, unless a longer period is required or permitted by law;

• records of consent may be retained for as long as necessary to demonstrate that consent was obtained;

• technical and cookie-related data is retained according to the lifespan of the relevant cookie or the applicable retention period.

Personal data is not retained indefinitely.

​

9. Cookies and similar technologies

9.1 What are cookies?

Cookies are small files or pieces of information stored on or accessed from your device when you visit a website. Similar technologies, such as certain pixels or identifiers, may also be used for comparable purposes.

Cookies may be placed by the website itself or by third-party service providers.

9.2 Cookies currently used on this website

Based on the cookies currently identified on the website, the following cookies may be used:

• hs — Provider: Wix. Purpose: website security. Duration: session. Category: necessary.

• XSRF-TOKEN — Provider: Wix. Purpose: website security. Duration: session. Category: necessary.

• svSession — Provider: Wix. Purpose: website functionality and session management. Duration: approximately 1 year. Category: necessary.

• client-session-bind — Provider: Wix. Purpose: session and security functionality. Duration: session. Category: necessary.

• server-session-bind — Provider: Wix. Purpose: session and security functionality. Duration: session. Category: necessary.

• __cf_bm — Provider: Cloudflare. Purpose: security and bot detection. Duration: approximately 30 minutes. Category: necessary.

• __Secure-ENID — Provider: Google. Purpose: Google service functionality and security. Duration: approximately 13 months. Category: third-party.

• SEARCH_SAMESITE — Provider: Google. Purpose: Google service functionality and security. Duration: varies. Category: third-party.

The cookies used by the website may change when the website, its services or third-party integrations are changed. The cookie information should therefore be reviewed and updated when relevant.

9.3 Managing cookie preferences

When required by law, you can choose whether to accept or refuse non-essential cookies through the website's cookie consent mechanism.

You can also configure your browser to block or delete cookies. Please note that blocking certain cookies may affect the functioning of the website.

For information about cookies and your rights regarding their use, you can also consult the guidance provided by the French data protection authority, the CNIL.

​

10. Your rights

Subject to the conditions provided by applicable data protection law, you have the following rights concerning your personal data:

• the right to obtain confirmation as to whether your personal data is being processed and to request access to it;

• the right to request correction of inaccurate or incomplete data;

• the right to request deletion of your personal data in certain circumstances;

• the right to request restriction of processing in certain circumstances;

• the right to object to certain processing activities, including processing based on legitimate interests;

• the right to data portability where applicable;

• the right to withdraw consent at any time where processing is based on consent;

• the right to define instructions concerning the storage, deletion and communication of your personal data after your death, where applicable.

To exercise your rights, please contact:

julia@yogajulia.com

I may ask you to provide information necessary to verify your identity before responding to your request.

You also have the right to lodge a complaint with the French data protection authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

Website: www.cnil.fr

​

11. Automated decision-making

Your personal data is not used to make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

​

12. Security

I take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

However, no method of transmission or storage can be guaranteed to be completely secure.

​

13. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to my business, the services I use, the personal data processed or applicable legal requirements.

​

Last updated:  7/10/2026

​