Privacy Policy

This Privacy Policy explains how Sacred Emotions (“we”, “us”, “our”) collects, uses, and shares personal information when you visit our website, inquire about, or book our retreats, events, and related services (the “Services”).

1. Who we are (Controller)

Controller: Sacred Emotions LLC, 30 N Gould St Ste N, Sheridan, WY 82802, United States of America
Contact: info@sacred-emotions.com

If you have privacy questions, contact us at info@sacred-emotions.com.

2. Personal data we collect

Depending on how you use our Services, we may collect:

• Identity & contact data: name, email, phone number, country of residence
• Booking data: retreat selected, dates, preferences, messages you send us, for example through our enquiry and contact forms
• Payment data: payment status, transaction identifiers (we do not store full card details; payments are processed by our payment providers)
• Technical data: IP address, device/browser information, pages visited, approximate location, cookies
• Marketing preferences: newsletter opt-in status, consent records
• Health & dietary information: dietary requirements, allergies, or health conditions you choose to share with us so we can keep you safe and comfortable during a retreat
• Questionnaire answers: if you complete our questionnaire, “What is your body trying to tell you?”, we receive your answers, which include information about your health, only with your explicit consent. The questionnaire’s own privacy policy, on the questionnaire page, explains how we handle them.

If you voluntarily share sensitive information (e.g., health-related information), we will handle it with care and only for the purpose you provided it for. We recommend you avoid sharing sensitive medical details via website forms unless requested.

3. Why we use your data (purposes)

We use personal data to:

• Provide and manage bookings and customer support
• Send booking confirmations, updates, and service communications
• Accommodate dietary requirements and health needs during a retreat
• Process payments and prevent fraud
• Protect our enquiry form from spam and automated abuse
• Improve our website and Services (analytics, troubleshooting)
• Send marketing communications where permitted (newsletter, offers)
• Comply with legal obligations and enforce our terms

4. Legal bases (EEA/UK visitors)

Where GDPR/UK GDPR applies, our legal bases include:

• Contract: to provide the Services you request (e.g., booking administration)
• Legitimate interests: improving our Services, security, fraud prevention, and protecting our enquiry form against spam
• Consent: for non-essential cookies and certain marketing
• Explicit consent (Art. 9(2)(a) GDPR): for health information, such as your questionnaire answers or the health details you share for a retreat
• Legal obligation: compliance with laws and accounting requirements, and keeping proof of the choices you make in our cookie banner

5. Cookies & tracking

We use cookies and similar technologies. Some cookies are strictly necessary for the website to function; others (e.g., analytics and marketing) are used only if you consent (where required). In the EU/UK, non-essential cookies generally require prior consent.

On this website that means Google Ads, the Meta Pixel and Microsoft Clarity, which you can accept or reject in our cookie banner. Our questionnaire page sets no cookies and runs none of them. See our Cookie Policy for details and how to change your preferences.

When you make a choice in the cookie banner, we keep a record of it, so that we can show that you consented, as the GDPR (Art. 7(1)) and Google’s EU User Consent Policy require. The record holds a random ID, which your browser keeps with your choice, whether you accepted or rejected, the version of the banner, the page you were on, the country your connection comes from, and the time. It doesn’t hold your IP address or anything else that names you. We keep each record for three years, and then it’s deleted automatically. The legal basis is our legal obligation to be able to demonstrate your consent (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR).

6. Sharing your data

We may share personal data with trusted service providers, such as:

• Website hosting: Vercel Inc. (USA)
• Payment processors: Stripe, which runs the checkout behind “Pay deposit”, and PayPal
• Email and marketing tools: MailerLite for our newsletter, and our email delivery provider for enquiry and booking emails
• Enquiry records: Supabase, where we keep the enquiries you send through our forms, and Notion, where we keep a copy of them
• Consent records: Supabase, which keeps the records of your cookie choices in a database in Frankfurt, Germany
• Call scheduling: Calendly, when you book a call with us
• Questionnaire answers: Formspree, which delivers your questionnaire answers to us, and Supabase, where we keep them to read them, in a database in Frankfurt, Germany
• Analytics and advertising: Google Ads, the Meta Pixel (Facebook and Instagram) and Microsoft Clarity, only where you have consented as required
• Maps: Google Maps, which shows our retreat location
• Security: our enquiry form can be protected by Cloudflare Turnstile, a service of Cloudflare, Inc. that checks whether a submission comes from a person rather than an automated program. To do this, Cloudflare processes technical data such as your IP address, browser information, and technical details of your connection. Cloudflare states that it uses this data only to detect and block bots and to improve that protection, not to identify, profile, or target individuals. See the Turnstile Privacy Addendum and Cloudflare’s Privacy Policy.
• Retreat venues: limited information necessary for your accommodation and dietary needs
• Professional advisers: accountants, legal advisers
• Authorities: when required by law

We do not sell your personal data.

7. International transfers

Your data may be processed outside your country (e.g., where our service providers operate). Several of the providers above are based in the United States. Where required, we use appropriate safeguards for international transfers, such as the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

8. Data retention

We keep personal data only as long as needed for the purposes above, including:

• Booking and customer support records: for as long as necessary to manage the relationship
• Health and dietary information: deleted within 30 days after the retreat concludes
• Questionnaire answers: until you ask us to delete them, and in any case no longer than we need them to support you
• Accounting/tax records: as required by law
• Marketing data: until you unsubscribe or withdraw consent
• Records of your cookie choices: three years, then deleted automatically

Exact retention periods may vary depending on the context and legal requirements.

9. Your rights

Depending on your location, you may have rights such as:

• Access, correction, deletion
• Objection and restriction of processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority (EEA/UK)

To exercise your rights, contact info@sacred-emotions.com. We will respond within 30 days.

10. Marketing communications

If you opt in, we may send marketing messages. You can unsubscribe anytime via the link in our emails or by contacting us. Where consent is required, we will only send marketing with your consent.

11. Security

We use reasonable technical and organizational measures to protect personal data, including encrypted connections (SSL/TLS), secure payment processing, and restricted access to personal data. No method of transmission is 100% secure.

12. Children

Our Services are not intended for children under 18. We do not knowingly collect children’s data.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date shows when changes were made.

14. Contact

For privacy questions or requests: info@sacred-emotions.com