Privacy & Cookie Policy

Art of Contemporary Yoga Limited (AOCY Ltd) | Updated 27 October 2026

Cookie policy and choices | Analytics details | Your rights | Contact and complaints

1. Who we are and what this notice covers

Art of Contemporary Yoga Limited (AOCY Ltd) operates the Joanne Avison website and is the controller responsible for the personal information described in this notice. Our company number is 06497818. Our registered office is 8 Bond Street Row, C/O Jo May Finance Limited, Brighton, England, BN1 1RD. Contact joanneavisonteam@gmail.com.

This notice covers joanneavison.com, its public pages, downloads, mailing lists, enquiries, associated Kajabi accounts and any products or services supplied by AOCY Ltd. Where we provide courses, teaching, coaching, events or communities, it also explains the relevant handling of participant information. It does not itself mean that a particular service is currently available for purchase.

Myofascial Magic and Myofascial Motion programmes are provided separately by Myofascial Motion Limited under that company's policies. Where we link to another website, retailer or provider, check its own privacy notice and the provider named before submitting information or buying. Visiting this website or buying a product does not itself give consent to optional marketing, analytics or public use of your image.

2. Information we collect

Depending on how you interact with us, we collect your name, email address, enquiry details, mailing-list and download preferences, and any other information you choose to provide. If you have an account or purchase from us, we process the account, billing, payment and fulfilment records needed for that service. Payment providers process card details; we do not store your full payment-card details ourselves.

Where relevant to a course or service, records may include enrolment, access and learning progress, attendance, submissions, coaching questions, feedback and community contributions. Our website and providers may also process technical information such as IP address, browser and device details, referral information, page visits and security logs.

Please do not submit confidential or identifiable client or patient information through public forms. We do not need health or other sensitive information for routine enquiries, newsletter sign-up or purchases. If sensitive information is needed for a particular service, we will explain the purpose and safeguards and establish the required legal basis and special-category condition before collecting it.

Where information comes from

Most information comes from you, including forms, emails, purchases and contributions to our services. Technical information comes from your use of our pages and the providers delivering them. Where someone introduces you or an organisation enrols a participant, we may receive the contact and enrolment details needed for that purpose. An introduction does not automatically subscribe you to marketing. If information comes from someone else, we will explain its source and use when required.

3. How we use information and our lawful bases

Contract: to process your purchase, administer agreed payments, provide programme access, teaching, coaching, assessments, membership and support, and respond to steps you request before purchasing.
Legitimate interests: to respond to general enquiries, administer and improve our services, maintain account and platform security, prevent misuse, manage community conduct, and establish or defend legal claims. We consider your rights when relying on these interests. This is not a substitute for consent where optional tracking requires it.
Legal obligation: to retain necessary financial records, comply with lawful requests and meet other applicable legal requirements.
Consent: for optional marketing where consent is required, optional analytics where consent is required, and agreed public use of identifiable testimonials, photographs or recordings. You can withdraw consent without affecting the lawfulness of processing already carried out.

If information is necessary for a purchase or programme and you do not provide it, we may be unable to supply that service. We will explain what is needed. Optional marketing and analytics are not a condition of buying or accessing a programme.

4. Marketing and service messages

We use the choices you make when joining a mailing list or registering interest to send the updates you requested. Any wider marketing must have an appropriate lawful basis and meet the applicable electronic-marketing rules. You can unsubscribe using the link in our marketing emails or by contacting us. We retain the minimum suppression information needed to respect an unsubscribe request. Essential purchase, account, payment and programme messages may continue after you unsubscribe from marketing.

5. Communities, assessments and session recordings

Community posts and contributions to group sessions may be visible to other participants, coaches and authorised team members. Please respect other participants' privacy and do not copy, record or share their contributions outside the programme without permission. A private community is not a public space, but we cannot guarantee that every participant will honour confidentiality.

Where a live teaching or coaching session is recorded, we will make the recording clear. Your name, voice, image and contributions may appear if you participate. Educational replays are made available to the relevant programme participants and authorised team members. Contact us before a session if you have privacy concerns or need to discuss how to participate without appearing in a recording. Public promotional use requires separate permission; attending a session is not blanket permission to use it in advertising.

6. Testimonials and promotional material

Providing feedback or participating in a programme does not automatically grant permission for public promotional use of your name, image, voice or personal story. We will seek permission for the use we propose, including the form of identification. You can withdraw consent by contacting us. We will stop new consent-based promotional use and remove material from channels we control where reasonably practicable and legally required. Withdrawal does not undo lawful past processing or guarantee recall of printed material or copies held independently by others.

7. Who receives information

Information is accessed by authorised team members, coaches and contractors where necessary for their work. We use Kajabi for websites, accounts, course delivery, communications and communities; payment providers identified at checkout for payments; and services such as Zoom where used for live sessions. Embedded video, testimonial and booking services may receive technical information when their content loads or you interact with them. Microsoft and Google receive optional analytics information on pages where their tools are enabled, as described below.

We may also share necessary information with professional advisers, regulators and authorities where required, and in connection with a lawful business transfer with appropriate safeguards. We do not sell your personal information. Some providers act as our processors and others as independent controllers for their own services. Their privacy notices explain their own processing.

8. International processing and security

Some providers process information outside the UK. Where a restricted international transfer occurs, UK data protection law requires an appropriate transfer mechanism, such as applicable adequacy regulations or approved contractual safeguards. Contact us for information about the arrangements relevant to your data and how to obtain a copy of applicable safeguards. We use appropriate access controls and technical and organisational measures to protect information, but no online system can guarantee complete security.

9. How long we keep information

We retain information for as long as needed for the purpose for which it was collected, taking account of programme access, support, accounting requirements, legal claims and any applicable rights requests. Account and learning records are generally needed while access or support continues; financial records are retained for the applicable accounting and legal periods. Community posts and educational replays may remain available while the relevant programme or community is provided. Enquiries and support records are retained according to their ongoing purpose and any dispute or legal requirement.

We review retention and remove or anonymise information when no longer needed. An erasure request does not necessarily require deletion of records we must lawfully retain. Optional analytics have the provider-specific retention periods below.

This cookie policy applies to joanneavison.com. Cookies store information in your browser; similar technologies include local storage and identifiers read by scripts or embedded services. A cookie may end with the browser session or remain until its expiry or deletion. The provider, page, browser settings and any feature you use affect which technologies are present.

Essential website and account functions

Kajabi hosts this site and supports account sessions, sign-in, security, forms, course access and purchase functions where provided. Technologies needed to supply or secure a function you request can be used without optional analytics consent where a legal exception applies. This does not make every Kajabi or third-party technology essential. Blocking essential storage can prevent sign-in or other requested features working.

Optional analytics and your choice

The analytics banner on public Joanne Avison pages controls our Clarity and Google Analytics installation. We exclude login, account, course and checkout areas from that installation.

Where our analytics banner appears, select Accept analytics to enable Clarity and Google Analytics, or Reject analytics to leave them off. Browsing, scrolling or accepting purchase terms does not count as analytics consent. Use Analytics settings on the tracked page to change your choice later. Your choice applies to this browser and website, not to other devices or our separately hosted sites.

Storage used by our optional analytics installation

ja_analytics_consent_v1: our first-party local-storage record of your accept or reject choice, valid for up to 180 days on pages using this installation. It is a preference record, not a tracking identifier.
_clck and _clsk: Microsoft Clarity first-party cookies that recognise a browser on the site and connect page views into a replay session, when analytics is accepted. Microsoft may also use cookies on its own domains, including CLID, MUID, MR, SM or ANONCHK, depending on consent, browser and service configuration. Microsoft's cookie documentation explains these identifiers.
_ga and _ga_*: Google Analytics first-party identifiers for measuring visits and sessions when analytics is accepted. Google's main _ga cookie has a standard lifetime of two years; actual storage can end sooner through browser limits, withdrawal or deletion. Cookie duration is different from retention of analytics reports.

Our custom analytics installation keeps advertising consent denied and does not enable Google advertising signals. It does not grant permission for advertising pixels or remarketing.

Kajabi platform measurement

Kajabi also loads its own platform measurement code through RudderStack, separately from the Clarity and Google Analytics installation described here. This was observed on public pages and a programme checkout. Kajabi may use browser identifiers and page or click events for its platform measurement. Our Analytics settings choice does not currently control that native Kajabi code. Contact us for information about the platform processing relevant to your use of the site; we are seeking clarification of its storage, purposes and available controls.

Embedded media, bookings and checkout

Public video content uses Vidalytics and Kajabi’s Wistia players. Vidalytics videos on the programme-information and profiling-masterclass pages load only when you select Load video. This is a separate choice from optional Clarity and Google Analytics. We configure Wistia’s public-page players with its doNotTrack option to disable viewing-session analytics; providing a video still involves technical requests to the host.

Video, podcast, testimonial, booking and payment services can receive technical information and use their own storage when embedded content loads or a requested feature is used. The services available vary by page. Our analytics banner controls the two tools named above, not every third-party embed, Kajabi feature or checkout. Any consent required for another purpose must be obtained separately; merely describing a service in this notice is not consent to it. External sites have their own notices and choices.

Changing browser settings

You can inspect, block and remove cookies and local storage in your browser's privacy settings. Deleting our preference record means we may ask again on a tracked page. Rejecting or withdrawing through Analytics settings stops future collection by our installation and removes accessible first-party analytics cookies. It does not erase data already collected or cookies held on third-party domains; those can be managed through the browser and provider. If our purposes change, we will update this policy and seek fresh consent where required.

Provider information: Microsoft Clarity cookies; Google cookies; Kajabi cookie information.

11. Optional website analytics

With your consent, we use Microsoft Clarity to understand clicks, scrolling and page navigation through heatmaps and session replays, and Google Analytics to measure visits and engagement on our public website. Both tools stay off in this installation until you select Accept analytics. We rely on consent for this optional processing.

Clarity reconstructs interactions with our website using page, timing, browser and device information. It does not record your camera, microphone or other applications. Sensitive content is masked by default, and forms are additionally masked in this installation. These tools may use cookies such as _clck, _clsk, _ga and _ga_*. We keep advertising consent denied and do not enable Google advertising signals.

Your choice is remembered in this browser using local storage (ja_analytics_consent_v1) for up to 180 days, after which we ask again. You can withdraw consent using Analytics settings on a public page. Withdrawal stops future collection by these tools and removes their accessible first-party analytics cookies; it does not retrospectively erase information already collected.

Microsoft and Google receive the analytics information and may process it outside the UK. Read the Microsoft Privacy Statement and Google Privacy Policy. Clarity normally retains replay data for 30 days and heatmaps for 9 months; labelled or favourited recordings may be retained for 9 months. Contact us about retention relevant to other analytics records.

12. Your rights

Depending on the circumstances, you have rights to access and obtain a copy of your personal information, correct inaccuracies, request erasure, restrict processing, object to processing and request portability. Where processing relies on consent, you may withdraw it. These rights are subject to the conditions and exemptions in data protection law. We normally respond within one month; if a lawful extension or clarification is needed, we will explain it. Requests are normally free. We only charge a reasonable fee or refuse a request where the law permits.

You can object to direct marketing at any time, including by using the unsubscribe link. We may make proportionate checks that a request comes from you before releasing or changing personal information. Contact us if you have a concern about automated processing or a decision affecting you.

13. Questions and complaints

Contact joanneavisonteam@gmail.com or write to Art of Contemporary Yoga Limited at the address above. You can complain to the Information Commissioner's Office at any time; you do not have to contact us first.

Children and security concerns

Our websites and adult programmes are not directed at children. Please contact us if you believe a child has provided information inappropriately, so we can investigate and take appropriate action. We restrict access to people who need information for their work. If a personal-data breach occurs, we assess the risk and make any reports or notifications required by law.

14. Updates

We may update this notice to reflect our services, providers or legal requirements. The current version is available on our websites and programme platform. Significant changes will be brought to affected users' attention where appropriate. This version was updated on 27 October 2026.