Rooted with Julia is a one-person yoga practice run by Julia Giurleo, a sole proprietor in Massachusetts. She is the person responsible for the information described here, and she handles all of it herself.
This page explains, in plain language, what is collected when you use this site, why, who it goes to, how long it is kept, and what you can ask to have done about it. The short version: very little is collected, none of it is sold, and there is no tracking on these pages at all.
The short version
- No cookies, no analytics, no advertising pixels, no tracking of any kind on this site.
- Your name, email and message, if you write to Julia.
- Your name, email and payment history, held by Stripe, if you buy something. Card numbers never touch this site.
- Your email address, if you join the newsletter.
- Nothing is sold, rented, or passed to anyone for advertising, ever.
- You can ask to see it, correct it, or have it deleted, by writing one email.
What is collected, and why
If you write to Julia
The enquiry and contact forms ask for your name, your email address, and whatever you choose to tell her about the class you have in mind — a date, a group size, a location, a question. If you email her directly, she has whatever your email contains. It is used for one thing: replying to you and arranging what you asked about. Nothing is inferred from it, and nothing further is asked for.
If you buy a class or a membership
Payment is handled entirely by Stripe. Stripe collects your name, your email address, your card details and your billing information, and keeps your payment history on its own systems. Card numbers go straight to Stripe and are never seen by, transmitted through, or stored on this site. Julia can see in her Stripe dashboard who has paid for what and when, along with your name and email address; she cannot see your card number.
For a single class, the class you chose is passed along with the payment so the right Zoom link can be sent. Your email address is passed to Resend, which sends that email. For a membership, Stripe also holds your subscription status and the billing page where you cancel.
If you join the email list
Only your email address, and only if you asked. It is held by MailerLite, which sends the newsletter. Every email carries an unsubscribe link, and using it removes you immediately and permanently. Your address is never used for anything else and never shared with another sender.
If you take a class
Classes are taught live over Zoom. Zoom holds the meeting itself — the fact that you joined, the display name you chose, your IP address, and the technical data it needs to run a call — under its own privacy policy. Julia sees what any host sees during the class, and keeps no record of it afterwards.
When you simply read the site
Nothing. There is no analytics, no advertising pixel, no tracking cookie, no session cookie, and nothing stored in your browser by these pages. No profile is built, and no record is kept of which pages you read.
Two things are worth being precise about. Vercel, which hosts the site, keeps standard server logs — IP address, the page requested, the time, your browser's user-agent string — for a short period, as every web server does, for security and to keep the site running. And the typefaces are loaded from Google Fonts, which means your browser asks Google's servers for the font files and Google receives your IP address in doing so. Neither is used by Julia to identify or track anybody, and she looks at neither.
The buy buttons load nothing until you click them. Until that moment, Stripe knows nothing about your visit.
Cookies and tracking
This site sets no cookies. It uses no local storage. It runs no analytics, no heatmaps, no session recording, no advertising or retargeting pixels, and no social media trackers. There is no consent banner on these pages because there is nothing to consent to.
Because nothing here tracks you across sites, there is no cross-site behavioural advertising to opt out of, and a "Do Not Track" or Global Privacy Control signal from your browser has nothing to change. Stripe and Zoom set their own cookies on their own pages, once you are on them, under their own policies.
The legal basis for using it
Where the law requires a basis to be named — the GDPR and the UK GDPR, if you are writing from Europe or the United Kingdom — it is one of these:
- To perform a contract, for everything needed to give you what you paid for: taking the payment, sending the Zoom link, running the class, managing the membership.
- Your consent, for the newsletter and for nothing else. You can withdraw it at any time with the unsubscribe link.
- Legitimate interests, for answering your enquiry, keeping the site secure, and preventing fraud and abuse.
- Legal obligation, for keeping payment and tax records as long as the law requires.
Health information you volunteer — an injury, a pregnancy, a condition that affects your practice — is used only to teach you safely, is told to nobody else, and is kept no longer than it is useful for that. You are never obliged to share it, though section 3 of the terms of service explains why it helps.
Who it is shared with
Your information is never sold, never rented, and never passed to anyone for advertising or marketing. It is shared only with the services the practice cannot run without, and only with the part of it each one needs:
- Stripe — payments, memberships, and the billing page where you cancel. Receives your name, email, card and billing details.
- Resend — the email that carries your Zoom link. Receives your email address and the contents of that email.
- Zoom — the live classes. Receives whatever you provide on joining a meeting.
- MailerLite — the newsletter, if you joined it. Receives your email address.
- Vercel — hosting for this site. Handles the server logs described above.
- Google Fonts — the typefaces. Receives your IP address when your browser fetches a font.
Each holds your information under its own privacy policy and acts as a processor for the practice. Beyond that list, information may be disclosed only in two narrow cases: where the law genuinely requires it, such as a valid legal request or a tax obligation; and if the practice were ever sold or transferred, in which case the buyer would be bound by this policy and you would be told by email before anything moved.
Where it is held
The practice is run from the United States and the services above store information on servers in the United States and elsewhere. If you are writing from outside the United States, your information will be transferred to and held there, where privacy law differs from your own. Each provider named above maintains its own transfer safeguards, including standard contractual clauses where they apply.
How long it is kept
- Enquiries and emails — as long as they are useful for answering you and for any booking that follows, and then no longer than three years, so a returning client's history makes sense.
- Payment and booking records — as long as tax and accounting law requires, which in practice means at least seven years. These cannot be deleted on request while that obligation runs.
- Membership records — for as long as the membership is active, and then with the payment records above.
- Newsletter addresses — until you unsubscribe, after which the address is removed.
- Health information you volunteered — only as long as it is needed to teach you safely.
- Server logs — the short period Vercel keeps them, measured in days to weeks.
How it is kept safe
Payment details are held by Stripe, which is PCI-DSS compliant, and never by this site. The site is served over HTTPS throughout. Access to the Stripe dashboard, the email account and the hosting account is Julia's alone, protected by strong passwords and two-factor authentication. No information is kept on a spreadsheet that travels, and none is kept on a device that is not locked.
No system is perfectly secure, and nobody can honestly promise otherwise. If a breach ever affected your information, you would be told promptly and plainly, along with what happened and what to do about it.
What you can ask for
Whatever the law where you live says, Julia will do all of this for anybody who asks:
- See it — a copy of what is held about you, and where it came from.
- Correct it — anything wrong put right.
- Delete it — removed, except for payment and tax records the law requires her to keep.
- Take it with you — a copy in a form you can use elsewhere.
- Stop the emails — the unsubscribe link, or just ask.
- Object, or ask her to restrict what she does with it, where the law gives you that right.
Write to hello@rootedwithjulia.com and Julia will deal with it herself, normally within a few days and in any event within 30 days (45 days where a law allows longer and the request is complicated). She may need to confirm you are who you say you are before handing anything over, which usually means replying from the address the information is held under. Making a request costs nothing and changes nothing about how you are treated — no worse service, no different price.
Deleting booking records may mean losing your class history and any membership attached to it, so she will tell you exactly what will happen before doing it.
If you are in California
Under the CCPA and CPRA you have the rights above, and also the right to know the categories of personal information collected, the purposes, and the categories of third parties it is disclosed to — all of which are set out on this page. For the record: Rooted with Julia does not sell personal information, and does not share it for cross-context behavioural advertising. It has not done so in the past twelve months, and there is nothing here to opt out of. No sensitive personal information is collected beyond health details you volunteer in order to be taught safely, and those are used for that purpose alone. You may use an authorised agent to make a request on your behalf.
If you are elsewhere in the United States
Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and a growing number of other states give their residents similar rights to access, correct, delete and port their information, and to opt out of targeted advertising, sale and profiling. Julia honours those rights for everybody who asks, from any state. There is no targeted advertising, sale or profiling here to opt out of. If a request is refused, you may ask her to reconsider by replying to her answer.
If you are in Europe or the United Kingdom
You have the rights above under the GDPR or UK GDPR, and you also have the right to complain to your own supervisory authority — your national data protection authority in the EU, or the Information Commissioner's Office in the UK. Julia would rather you came to her first, and will try to put it right.
About the classes
Classes are taught live and are not recorded. Julia keeps no copy of any class, and participants are not permitted to record one either. Your camera is entirely optional, and nobody is ever asked why it is off. If you choose to have it on, the other people in that class see you, and only for as long as the class lasts.
Children
Classes, accounts and memberships are intended for adults. This site is not directed at children, no account is knowingly created for anyone under 18, and no information is knowingly collected from a child under 13. Teenagers between 13 and 17 may take part in a private or family session only with a parent or guardian, who provides any information involved. If you believe a child has given information through this site, write to hello@rootedwithjulia.com and it will be deleted.
Changes to this policy
If this policy changes, the date at the top changes with it. Anything that meaningfully affects people who already hold an account, a membership or a booking will be sent by email rather than quietly edited in. The version on this page is always the current one.
Getting in touch
Questions about any of this, or a request about your own information, go to hello@rootedwithjulia.com. Julia reads every one.
Rooted with Julia
Julia Giurleo, sole proprietor
Massachusetts, United States
hello@rootedwithjulia.com
The terms of service sit alongside this policy and cover booking, classes, memberships and events.