GDPR Data Protection Policy – Yoga Retreat

We take your privacy seriously and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, and protect your information when you book and attend our yoga retreat.

1. Data Collection & Use

We collect and process your personal data only when necessary for:

• Processing retreat bookings and payments

• Communicating retreat details and updates

• Ensuring your safety, including health-related information (if voluntarily provided)

• Meeting legal and financial obligations

Your data will never be shared with third parties for marketing purposes.

2. Data Storage & Security

• Your data is stored securely and only accessible by authorized personnel.

• We implement technical and organizational measures to prevent unauthorized access, loss, or misuse.

3. Data Retention & Deletion

• We retain your data only as long as necessary for legal and operational purposes.

• Upon request, we will delete or anonymize your personal data, unless required by law to retain certain records.

4. Your Rights

Under GDPR, you have the right to:

• Access your personal data and request details on how it’s used

• Rectify any incorrect or outdated information

• Withdraw consent for data processing (where applicable)

• Request deletion of your data (subject to legal retention requirements)

5. Contact & Questions

If you have any questions about how we handle your data or wish to exercise your rights, please contact us.

By booking our yoga retreat, you acknowledge and agree to this GDPR-compliant data protection policy.