Privacy Policy

Last updated: 9 Oct 2026

We collect as little personal data as we can, use it only to run our trainings, answer you and send the newsletter you asked for, and never sell it.

1. Who is responsible for your data

Body Awareness Institute is run by Body Awareness Center OÜ, registry code 14148717, Telliskivi tn 49-39, 10611 Tallinn, Estonia. We are the controller of your personal data. Email: info@bodyawareness.ee, phone: +372 529 9986.

We have not appointed a data protection officer, because the law does not require one for our activities. Write to us about anything in this policy.

2. What we collect, why, and for how long

When	Data	Why	Legal basis (GDPR)	How long we keep it
You send an enquiry (form or email)	Name, email, phone (optional), the training and date you choose, your message	Answering you and sending details and payment information	Art. 6(1)(b): steps before a contract, at your request; otherwise art. 6(1)(f): our legitimate interest in answering you	12 months after our last contact, if you don’t book
You register for a training	Name, email, phone, billing details (and your company’s details if you book as a business), training and dates, accommodation choice (BBTRS®), payments (deposit, fees), attendance and completed hours	Organising the training and your stay, invoices, confirming your hours and certificate	Art. 6(1)(b): performance of a contract; art. 6(1)(c): our legal obligation to keep accounting records; art. 6(1)(f): our legitimate interest in confirming your training hours later	For the training, then: invoices and payment records 7 years from the end of the financial year (Estonian Accounting Act, § 12); booking correspondence 3 years after the training (see below); attendance and completed hours: a minimum record (your name, the course, the completion date and the certificate date) for 10 years after your last training with us, so that we can confirm your certification; detailed attendance and hours records for 5 years, then deleted. We have documented a balancing test for this legitimate interest; it is available on request, and you can ask us to delete these records earlier
Health information you share	Only what you choose to tell us, e.g. a health condition, pregnancy or medication	Keeping you safe during the training (see section 4)	Art. 9(2)(a): your explicit consent	Deleted within 12 months after the training ends, unless an incident happened during the training (then see below)
You join the newsletter / get the free ebook	Email, first name (optional), date, time and source of sign-up, IP address, basic email statistics (opens, clicks)	Sending the free ebook and the Body Awareness Institute newsletter: news about trainings, dates and resources	Art. 6(1)(a): your consent; § 103¹ of the Estonian Electronic Communications Act	Until you unsubscribe; then a record of your consent and unsubscribe for 3 years, as proof
You buy in the shop	Checkout data collected by Payhip (email, country, order details)	Delivering your order, accounting	Art. 6(1)(b) and 6(1)(c)	As in the Breathe Privacy Policy; accounting records 7 years
Photos and videos at trainings	Images in which you can be recognised	Showing what our trainings look like (website, social media)	Art. 6(1)(a): your consent	Until you withdraw consent (see section 5)
You visit the website	IP address, browser and device data, pages requested, time (server logs)	Running the website securely	Art. 6(1)(f): our legitimate interest in a secure website	Kept by our host, Zone (Zone Media OÜ, Estonia), for a limited period under its own security rules. We don’t keep our own copies.

Booking a training or buying in the shop does not sign you up for the newsletter.
You don’t have to give us your data, but we need your name and contact details to answer an enquiry or book your place.
We don’t use automated decision-making or profiling.
If there is a complaint, a claim or an incident during a training, we keep the related correspondence and records for 3 years (the general limitation period), or up to 10 years where a claim could involve intentional breach (§ 146 of the Estonian General Part of the Civil Code Act), and in any case until the matter is closed. Our legal basis is our legitimate interest in establishing and defending legal claims (art. 6(1)(f); for health information art. 9(2)(f)).

When you sign up, we send you the free ebook The Issue Lives in the Tissue by email and add you to the Body Awareness Institute newsletter. Our newsletter tool is Flodesk, Inc. (USA), which stores the list and sends the emails for us as our processor, under Flodesk’s data processing addendum, which applies to our account. Flodesk tells us whether an email was opened and which links were clicked, so that we can see what is useful. Every email has an unsubscribe link, and you can unsubscribe at any time. You keep the ebook.

4. Health information

Our trainings involve breath, movement and touch. So that we can keep you safe, we ask you to fill in a written health questionnaire before the training. Sharing it is voluntary, but we may not be able to let you take part safely without it. We ask for your explicit consent when you share it, use it only for your safety, share it only with the facilitator and assistants who need it, keep it confidential, and delete it within 12 months after the training ends (unless section 2 says otherwise). Please don’t send health details through the enquiry form — use the registration form instead.

5. Photos and videos at trainings

We always ask participants for consent before taking or using photos. We take photos or videos at trainings only when the group has been told, and we publish photos in which you can be recognised only with your consent.
Saying no has no effect on your participation.
We don’t publish photos of participants in a state of undress or in vulnerable moments.
You can withdraw your consent at any time by writing to info@bodyawareness.ee. We then stop using the photos and remove them from our website and our own social media accounts as soon as we can, at the latest within one month. We can’t recall material already printed or shared by others.
Please don’t photograph or film other participants without their consent.

6. Who receives your data

Zone Media OÜ (Zone.ee, Estonia) hosts this website, as our processor, and processes server logs (IP addresses).
Flodesk, Inc. (USA) runs our newsletter and free ebook delivery, as our processor. We have accepted Flodesk’s data processing agreement.
Enquiry and registration form submissions are sent by our website on Zone’s servers (Zone Media OÜ, Estonia) straight to our email (info@bodyawareness.ee). They are not stored on the web server.
Zone Media OÜ (Zone.ee, Estonia) also hosts our email (info@bodyawareness.ee), as our processor.
Payhip Limited (UK) runs our shop checkout and delivery, and PayPal or the card provider used by Payhip processes payments. Each acts as an independent controller under its own privacy policy (payhip.com/privacy).
The facilitator’s assistants and the interpreter at your training, only as far as they need it to run the training.
The training venue (Männiku Metsatalu for BBTRS®), only the names, room type and dietary needs needed to arrange your stay. Accommodation is booked and handled through us, so the venue does not charge you separately.
Kajabi, LLC (USA) hosts the portal through which we issue BBTRS® certificates, as our processor. Students get access when they register. We do not pass your name or hours to a separate BBTRS® or MER® organisation for certification.
Our bank, our accountant (under a confidentiality obligation), and authorities or courts when the law requires it.

Links to Instagram, Facebook, YouTube and LinkedIn on our site are plain links: nothing loads from those services until you click. Our fonts are hosted on our own website, so no font service receives your IP address.

7. Cookies

This website sets no cookies of its own and uses no advertising tools. To understand which pages are useful, we count visits with cookieless statistics from PostHog (EU cloud, Frankfurt, under a data processing agreement, Art. 28 GDPR): nothing is stored on your device, no profile is created, and your IP address is not kept. PostHog Inc. is a US company; any access from outside the EU is protected by the EU Standard Contractual Clauses. The shop checkout (Payhip) and the newsletter sign-up form (Flodesk), once the form is embedded, may use cookies that are strictly necessary for them to work. If we ever add analytics or embedded content (such as videos or maps), we will ask for your consent first where the law requires it and update this policy.

8. Transfers outside the EU/EEA

Flodesk stores and processes newsletter data in the USA. The transfer is protected by the European Commission’s standard contractual clauses (module 2, controller to processor), which are part of Flodesk’s data processing addendum (accepted on our account).
Kajabi stores and processes BBTRS® certificate-portal data in the USA. The transfer is protected by the European Commission’s standard contractual clauses (module 2, controller to processor), which are part of Kajabi’s data processing agreement.
PayPal and the card provider used by Payhip may transfer payment data outside the EU under their own safeguards, as described in their privacy policies.
Payhip is in the United Kingdom, which the European Commission recognises as providing adequate protection.

Write to us if you’d like a copy of these safeguards.

9. Your rights

You have the right to:

access your data and get a copy;
have it corrected or erased;
restrict its processing;
receive it in a portable format;
object to processing based on our legitimate interests; and
withdraw your consent at any time (newsletter, photos, health information). This doesn’t affect what happened before.

Write to info@bodyawareness.ee. We reply within one month.

You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI), Tatari 39, 10134 Tallinn, Estonia, www.aki.ee, or to the data protection authority in the EU country where you live or work.

10. Changes

We update this policy when our tools or the law change. The current version and its date are always on this page.

Body Awareness Center OÜ · registry code 14148717 · Telliskivi tn 49-39, 10611 Tallinn, Estonia · Board member: Eryk Wiesław Dobosz · info@bodyawareness.ee · +372 529 9986