Security
How we protect payments and guest data
Retreat bookings involve money, passports and health details. Here is how MyRetreatDesk handles each of them.
Payments
We never see card numbers
Card details are entered on Stripe's or PayPal's own checkout and stored by them. MyRetreatDesk keeps only a reference to the saved card for scheduled installments.
Verified payment confirmations
A booking is confirmed only when the payment provider's signed notification arrives. Messages that fail the signature check are rejected.
Paid to the organizer
Guests pay the organizer's own Stripe or PayPal account. MyRetreatDesk does not hold guests' money.
Guest data
Hosted in the EU
Data is stored in our database in Ireland (European Union).
Encrypted passport numbers
Passport numbers are encrypted (AES-256-GCM) before they are stored, shown only to the retreat's organizer, and erased 30 days after the retreat ends.
Strict access
Organizers see only their own guests. Other guests appear by first name and initial. Platform staff tools never show passport numbers.
Export and deletion
Travelers can download everything we hold about them or delete their account from their trip page.
Abuse protection
Limits on bookings, holds and code checks stop anyone tying up beds or guessing promo codes.
Report a security issue
If you think you have found a vulnerability, please tell us privately at myretreatdesk@gmail.com and give us a chance to fix it before disclosing it. Read our privacy policy for how personal data is used.
Open bookings for your next retreat this week
Start from our template, set your rooms and prices, and share your booking page. Free on Starter, no card required.