Effective Date: 7 September 2026
PRIVACY POLICY
1. ABOUT THIS PRIVACY POLICY

This Privacy Policy explains how PT Uttama Yoga Nusantara, operating under the brand Uttama Yoga Academy (“Uttama”, “we”, “us”, or “our”), collects, uses, stores, shares, and protects personal information when you visit our website, contact us, apply for or participate in our programs, book a consultation, make a payment, or otherwise interact with us.


Company details:

PT UTTAMA YOGA NUSANTARA

Established in Indonesia under Notarial Deed No. 26 dated 29 July 2026.

Legal Entity Approval Number: AHU-0065018.AH.01.01.TAHUN 2026

Company Register Number: AHU-0199522.AH.01.11.TAHUN 2026

Business Identification Number (NIB): 1808260009432

Tax Identification Number (NPWP): 1000000010774609


Registered office / business address:

Jalan Achmad Yani, Galiran

Subagan, Karangasem

Kabupaten Karangasem

Bali 80813

Indonesia


Website: uttama.yoga


Privacy and general enquiries: care@uttama.yoga

Telephone: +62 851 1934 1836


PT Uttama Yoga Nusantara is the personal data controller responsible for the processing of personal information described in this Privacy Policy.


2. PERSONAL INFORMATION WE MAY COLLECT

Depending on how you interact with us, we may collect the following categories of information.


2.1 Identification and Contact Information

This may include:

• full name;

• email address;

• telephone number;

• WhatsApp or other messaging contact information;

• country of residence;

• nationality where relevant to participation or travel arrangements.


2.2 Application and Enrollment Information

When you apply for a Yoga Teacher Training or another Uttama program, we may collect:

• information provided in your application form;

• yoga experience and training background;

• your reasons and goals for joining the program;

• preferred program dates;

• preferred accommodation category;

• dietary preferences or requirements;

• information provided during consultations or one-to-one calls;

• communications between you and our admissions or support team.


2.3 Health and Safety Information

You may voluntarily provide information about injuries, medical conditions, pregnancy, allergies, dietary restrictions, or other health-related circumstances where this information is relevant to your safe participation in a program.

We collect and use such information only when reasonably necessary for participant safety, program administration, accommodation of relevant needs, or where otherwise permitted by applicable law.

Under Indonesian law, health information may be treated as specific personal data and receive additional protection.

Where applicable law requires explicit consent for processing health-related information, we will request that consent.


2.4 Payment and Transaction Information

We may collect:

• payment status;

• amount paid;

• transaction reference;

• payment date;

• selected program and accommodation category;

• billing-related information necessary for administering the transaction.


Payments may be processed by third-party payment providers.

Uttama does not normally store complete credit or debit card details where those details are processed directly by an authorised third-party payment provider.


2.5 Website and Technical Information

When you use our website, we or our service providers may automatically collect information such as:

• IP address;

• browser and device type;

• operating system;

• pages visited;

• approximate location derived from IP address;

• referral source;

• interaction with website features;

• cookie identifiers;

• analytics and advertising information.


3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

• directly from you when you complete a form;

• when you apply for or enroll in a program;

• when you book a consultation or call;

• when you contact us by email, WhatsApp, social media, or another communication channel;

• when you make a payment;

• during your participation in a program;

• automatically through our website and related technologies;

• from service providers acting on our behalf where permitted by law.


4. WHY WE USE PERSONAL INFORMATION

We may use your personal information for the following purposes.


4.1 Applications and Enrollment

To review and process applications, communicate with applicants, arrange consultations, confirm enrollment, manage accommodation choices, administer payments and balances, and provide information about upcoming programs.


4.2 Program Administration

To organize and deliver Yoga Teacher Training programs, communicate schedules and operational information, manage accommodation and meals, maintain attendance and assessment records, administer certification requirements, and respond to participant questions and requests.


4.3 Health and Safety

To understand relevant health conditions or restrictions voluntarily disclosed by participants, assist teachers in providing appropriate modifications where reasonably possible, respond to health or safety incidents, and protect participants, teachers, staff, and other persons.


4.4 Customer Service

To answer enquiries, manage complaints, process cancellation, refund, or transfer requests, and provide administrative and post-program support.


4.5 Payments and Accounting

To process or confirm transactions, maintain accounting and financial records, prevent fraud, and comply with tax, accounting, banking, and other legal requirements.


4.6 Website Operation and Analytics

To operate and maintain our website, understand how visitors use the website, improve website performance and user experience, and measure the effectiveness of advertising and marketing campaigns.


4.7 Marketing

Where permitted by applicable law and, where required, with your consent, we may use your contact information to send information about Uttama Yoga Teacher Training programs, retreats, workshops, educational programs, future Uttama events, relevant offers, and program updates.

You may withdraw your marketing consent or opt out of marketing communications at any time by using an unsubscribe option where provided or by contacting care@uttama.yoga.

Withdrawing marketing consent does not affect operational communications relating to a program for which you have applied or enrolled.


5. LEGAL GROUNDS FOR PROCESSING

Where Indonesia’s Law No. 27 of 2022 on Personal Data Protection (“Indonesia PDP Law”), the General Data Protection Regulation (“GDPR”), or substantially similar data protection legislation applies, we rely on one or more applicable legal grounds:

Performance of a Contract — where processing is necessary to process your application, enrollment, payment, accommodation, participation, or other services requested by you.

Consent — where you have given us permission, including where consent is required for certain marketing communications, non-essential cookies or advertising technologies, certain health-related information, or photographs and videos. You may withdraw consent at any time.

Legal Obligations — where processing is necessary for compliance with accounting, tax, regulatory, law-enforcement, corporate, or other legal obligations.

Legitimate Interests — where processing is reasonably necessary for our legitimate business interests, including operating and improving our services, responding to enquiries, maintaining security, preventing fraud, administering our programs, and understanding the effectiveness of our website and services. We consider these interests against your privacy rights before relying on this basis.

Vital Interests — where processing is reasonably necessary to protect the life, health, or safety of you or another person, including in an emergency.


6. DIRECT MARKETING

We do not intend to use your personal information for direct marketing where applicable law requires consent unless we have first obtained the required consent or indication of no objection.

Where required, we will identify the categories of personal information intended to be used and the types of services being promoted.

You may ask us at any time to stop using your personal information for direct marketing. There is no charge for making an opt-out request.


7. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies, pixels, analytics technologies, and similar tools.

These technologies may be used to operate essential website functionality, remember preferences, measure website traffic, understand visitor behaviour, improve website performance, measure advertising performance, and deliver or optimise advertising where permitted.

Where required by applicable law, non-essential cookies and similar technologies will only be activated after you provide the required consent.

You may manage cookies through the cookie controls provided on our website or through your browser settings. Disabling certain cookies may affect some website functions.


8. WHEN WE SHARE PERSONAL INFORMATION

We may share personal information only where reasonably necessary with service providers and other parties such as:

• customer relationship management providers;

• website hosting and technology providers;

• email and communication platforms;

• WhatsApp or other messaging providers;

• payment processors and financial institutions;

• accounting and professional advisers;

• analytics providers;

• advertising platforms where legally permitted;

• instructors, administrators, and operational team members who need the information to deliver the program;

• accommodation, meal, transportation, or other operational providers where necessary for the program;

• government authorities, regulators, courts, or law-enforcement bodies where legally required.


Service providers are expected to process information only for legitimate purposes associated with the services they provide to us and to implement appropriate safeguards.

We do not sell personal information as an ordinary part of our business.


9. INTERNATIONAL DATA TRANSFERS

PT Uttama Yoga Nusantara is established in Indonesia and operates international programs.

Our participants, teachers, staff, technology providers, and service providers may be located in different countries. As a result, personal information may be processed or stored outside the country where it was originally collected.

Where the Indonesia PDP Law applies to a transfer of personal data outside Indonesia, we will take the steps required by applicable law, which may include ensuring an equivalent or higher level of personal data protection, putting adequate and binding safeguards in place, or obtaining the data subject’s consent where required.

Where required by other applicable data protection law, we take appropriate steps designed to protect personal information transferred internationally, including contractual safeguards or other lawful transfer mechanisms.

Where GDPR applies, transfers of personal data outside the European Economic Area will be handled using an applicable lawful transfer mechanism where required.


10. DATA RETENTION

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, administering your application and participation, maintaining academic, attendance, or certification records where appropriate, accounting and financial obligations, resolving disputes, enforcing agreements, and complying with applicable law.

Retention periods may vary depending on the nature of the information.

Information that is no longer reasonably required will be deleted, anonymised, or otherwise securely disposed of, subject to applicable legal retention requirements.


11. DATA SECURITY

We take reasonable and practicable organisational and technical measures designed to protect personal information against unauthorised access, accidental access, unlawful processing, loss, alteration, disclosure, and destruction.

Access to personal information is limited to persons who reasonably need it for their role.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.


12. YOUR PRIVACY RIGHTS

Depending on where you live and the laws applicable to your personal information, you may have the right to:

• ask whether we hold personal information about you;

• request access to your personal information;

• request correction of inaccurate information;

• request deletion of certain information;

• request restriction of processing;

• object to certain processing;

• withdraw consent;

• opt out of direct marketing;

• request portability of certain information;

• lodge a complaint with an appropriate data protection authority.


Some rights may be subject to legal conditions and exceptions.


Indonesia

Under the Indonesia PDP Law, subject to applicable conditions and exceptions, data subjects may have rights to obtain information about processing; access and receive copies of their personal data; correct or update inaccurate data; end processing and request deletion or destruction; withdraw consent; object to decisions based solely on automated processing that have legal or significant effects; delay or restrict processing; obtain and transfer certain personal data in a commonly used format; and seek compensation for unlawful processing.


European Economic Area

Where GDPR applies, you may exercise the rights provided by GDPR, subject to applicable conditions and exemptions.

To exercise your privacy rights, contact care@uttama.yoga. We may need to verify your identity before fulfilling certain requests.


13. CHILDREN

Our Yoga Teacher Training programs are primarily intended for adults.

We do not knowingly collect personal information from children where parental or guardian consent would be required by applicable law without obtaining the required authorisation.


14. PHOTOGRAPHY AND VIDEO

Photography or video recording may occur during Uttama programs.

Where images or recordings are intended to be used for promotional or marketing purposes and applicable law requires consent, we will obtain appropriate permission.

Participation in a training program does not automatically require a participant to consent to the commercial use of their image where applicable law provides otherwise.

Participants should notify us if they have questions or concerns regarding photography or recording.


15. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, booking platforms, social media platforms, payment services, or other external services.

Those organisations operate under their own privacy policies. Uttama is not responsible for the privacy practices of independent third parties.


16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our services, technology, or legal requirements.

The latest version will be published on uttama.yoga with an updated effective date. Material changes may also be communicated through other appropriate channels.


17. CONTACT US

Questions, requests, or complaints relating to privacy may be sent to:

PT UTTAMA YOGA NUSANTARA

Jalan Achmad Yani, Galiran

Subagan, Karangasem

Kabupaten Karangasem

Bali 80813

Indonesia

Email: care@uttama.yoga

Telephone: +62 851 1934 1836

Website: uttama.yoga