Privacy Policy

1. What data we collect

We collect information you provide directly when using our platform: your name, email address, phone/WhatsApp number (optional), and form responses — including preferences, intentions, and other details you choose to share through our questionnaires, contact form, or newsletter signup. We do not collect payment information from individual retreat clients; payments between you and a retreat owner are handled directly between you, outside our platform.

Sensitive information you may share voluntarily. Some of our forms include open text fields (for example, describing what brings you to a retreat). If you choose to share information about your health, religious or philosophical beliefs, or similar sensitive topics in these fields, we treat this as information you have knowingly and voluntarily provided to help us match you with a suitable retreat, and we handle it with the same restricted access as the rest of your data. You are never required to share this level of detail — general answers are enough for matching.

Referee contacts. Facilitators may optionally provide the name and email of one or two referees so we can verify their experience. Facilitators confirm they have each referee's permission before sharing these details. We use referee contacts only to verify a facilitator's experience, keep them private (never shown publicly), and delete them on request. If you are a referee and want your details removed, contact us using the details below.

2. How and why we use your data (legal basis)

We process your data for the following purposes:

• Matching and communication (legal basis: performance of a contract, or steps taken at your request before entering one) — to match seekers with retreats, respond to your inquiries, and coordinate between retreat owners, facilitators, and seekers.
• Newsletter and updates (legal basis: consent) — only if you sign up for updates. You can unsubscribe at any time using the link in any email or by contacting us.
• Service improvement and security (legal basis: legitimate interest) — to keep the platform secure, prevent abuse, and understand how our forms are used so we can improve them.

3. Where your data is stored and who processes it

Your data is stored in our database, hosted by Supabase on servers in the EU (Frankfurt, Germany). Transactional emails (confirmations, notifications) are sent through our mail server, also hosted in the EU. Some form submissions are also automatically forwarded to internal workflow-automation tooling used by our team to coordinate follow-up — we are in the process of confirming and documenting exactly where this tooling is hosted so this section can name it precisely.

Data is accessed only by our team, for the purposes described in this policy, and is protected by access controls (only authorised team members can view submissions through our admin system).

4. How long we keep your data

We keep your data for as long as necessary to fulfil the purpose it was collected for — for example, seeker and retreat submissions are kept while we may still act on them (matching, follow-up), and you can ask us to delete your data at any time using the contact details below. We do not keep data indefinitely once it is no longer needed.

5. Your rights

Under data protection law, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data ("right to be forgotten").
• Ask us to restrict how we use your data.
• Receive your data in a portable format, where technically feasible.
• Object to processing based on our legitimate interest.
• Withdraw consent at any time (for newsletter/marketing communications), without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at grow@retreatyourself.network. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been mishandled.

6. Contact for data questions

For any questions about how we handle your data, please email grow@retreatyourself.network.