Privacy policy.

Introduction

At Retreats by Noctua ("we," "us," or "our"), we are committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and other relevant data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website [www.retreatsbynoctua.co.uk] ("Website") or use our services.  

Information We Collect

We may collect the following types of personal information:

  • Information you provide to us: This includes information you provide when you fill in forms on our Website, make a booking, contact us, or otherwise interact with us. This may include your name, email address, phone number, postal address, payment information, dietary requirements, health information relevant to your participation in the retreat, and any other information you choose to provide.  

  • Information we collect automatically: When you visit our Website, we may automatically collect certain information about your device, including your IP address, browser type, operating system, and referring website. We may also collect information about how you use our Website, including the pages you visit, the links you click, and the time you spend on each page. We may use cookies and similar technologies to collect this information.  

How We Use Your Information

We may use your personal information for the following purposes:

  • To provide and manage your retreat bookings: To process your bookings, communicate with you about your retreat, provide customer support, and manage your account.  

  • To process payments: To process your payments securely and prevent fraud.

  • To send you marketing communications: To send you newsletters, promotional offers, and other marketing communications if you have opted in to receive them. You can opt-out of these communications at any time.

  • To improve our Website and services: To analyse Website usage, conduct research, and improve our offerings.  

  • To comply with legal obligations: To comply with applicable laws, regulations, and legal processes.

Lawful Basis for Processing

We will only process your personal information where we have a lawful basis to do so. The lawful bases we rely on are:

  • Contract: To fulfil a contract we have with you, or to take steps at your request before entering into a contract.

  • Consent: Where you have given us your consent to process your personal information for a specific purpose.

  • Legitimate interests: To pursue our legitimate interests, provided your interests and fundamental rights do not override those interests.

  • Legal obligation: Where we need to comply with a legal or regulatory obligation.  

Sharing Your Information

We may share your personal information with:

  • Third-party service providers: We may share your information with trusted third-party service providers who assist us in operating our Website, conducting our business, or providing services to you, such as payment processors, IT service providers, and marketing platforms. These third parties are contractually obligated to protect your personal information and only use it for the purposes for which we disclose it to them.  

  • Other parties involved in organising the retreat: We may share your information with other people involved in organising and running the retreat, such as taxi drivers, teachers, chefs, and accommodation providers. We will only share the minimum amount of information necessary for them to provide their services and they are obligated to keep your information confidential.

  • Legal requirements: We may disclose your information if required to do so by law or in response to a valid legal request, such as a court order or a request from a law enforcement agency.  

Data Retention

We will only retain your personal information for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.  

Your Rights

Under the UK GDPR, you have certain rights regarding your personal information, including the right to:

  • Access your information: You can request access to the personal information we hold about you.

  • Rectify your information: You can request that we correct any inaccurate or incomplete personal information we hold about you.

  • Erase your information: You can request that we erase your personal information in certain circumstances.

  • Restrict processing: You can request that we restrict the processing of your personal information in certain circumstances.  

  • Object to processing: You can object to the processing of your personal information in certain circumstances.

  • Data portability: You can request that we provide you with a copy of your personal information in a structured, commonly used, and machine-readable format, or transmit it directly to another controller.  

  • Withdraw consent: If we are relying on your consent to process your personal information, you can withdraw your consent at any time.

Security

We take appropriate technical and organisational measures to protect your personal information from unauthorised access, use, disclosure, alteration, or destruction.  

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.  

Contact Us

If you have any questions or concerns about this Privacy Policy or our data protection practices, please contact us at retreats@noctua.co.uk

Last Updated: 18th September 2024