Privacy policy

MyRetreatDesk is a booking platform for retreats. Retreat organizers use it to sell and run their retreats; travelers use it to book them. This page explains what personal data we handle, why, and the choices you have.

Who is responsible

For your MyRetreatDesk account, MyRetreatDesk is responsible for your data. For a booking, the retreat organizer is also responsible for the details you give them (they need them to host you), and we process those details on their behalf.

What we collect

• Account: your name, email address and, for organizers, your organization name.
• Bookings: name, email, phone, your room and add-ons, payment plan, and your signed waiver.
• Trip details you choose to give: flight arrival, dietary needs and allergy notes (which can be health information, shared only so the venue can feed you safely), and roommate preferences.
• Passport number, when the venue must register foreign guests with local authorities. It is stored encrypted and shown only to the organizer.
• Payments: handled by Stripe. We never see or store your full card number; we keep a reference to the saved card so scheduled installments can be charged.
• Messages you send to an organizer through your trip page.

Why we use it

• To make and manage your booking, charge the payments you agreed to, and send you booking, payment and pre-arrival emails (performing our contract with you).
• To prevent fraud and abuse, such as fake bookings holding beds (our legitimate interest).
• To meet legal obligations, such as keeping financial records and guest registration.

We don't sell personal data or use it for advertising.

Who we share it with

• The organizer of the retreat you book.
• Service providers that run the platform for us: Stripe (payments), Supabase (database and sign-in), our email provider, and our hosting provider. They may process data outside your country under standard contractual safeguards.

How long we keep it

• Passport numbers are erased automatically 30 days after the retreat ends.
• Booking and payment records are kept as long as tax and accounting law requires.
• When you delete your account, your name and contact, passport and travel details are removed from your bookings; only the anonymous payment record remains.

Your rights

You can access, correct, download or delete your data, object to how we use it, and complain to your data protection authority (in the UK, the ICO; in the EU, your country's authority). Signed in as a traveler, go to My trips to download your data or delete your account. For anything else, email myretreatdesk@gmail.com.

Cookies

We use only the cookies needed to keep you signed in and remember your currency choice. No advertising or tracking cookies.