Skip to content
Kamala

Legal

Privacy

This page explains what information we collect about you, why we collect it, how we keep it, and the rights you have under UK GDPR. If you have questions, write to hello@kamalaretreats.com.

Who we are

Kamala Retreats is the data controller for the information you give us through this site, by email, or in connection with a retreat booking.

What we collect

When you book a retreat: your name, email, phone (optional), the name of any guest sharing with you, dietary and access information, an emergency contact, and the booking and payment metadata that goes with the transaction.

When you join the newsletter: your email and the source (e.g. footer, popup) so we know where it came from.

When you write to us: your name, email, and the contents of your message.

Through your visit to the site we collect minimal technical information — IP address (hashed for rate-limiting), user agent, and the pages you view. We do not use third-party analytics or advertising trackers.

Why we collect it, and the lawful basis

Booking information is processed to fulfil the contract you've entered into with us — to deliver the retreat, communicate with you about it, and meet our legal obligations (tax, accounting). Lawful basis: contract, and legal obligation for the records we're required to keep.

Newsletter emails are sent on the basis of consent, captured by a double opt-in. You can withdraw consent at any time using the unsubscribe link at the bottom of every letter.

Operational essentials — securing the site, preventing abuse, and replying to enquiries — are processed under legitimate interests.

Where your data lives

Our website is hosted on Cloudflare, which means data may be processed in Cloudflare's UK and EU edge regions. We use the following sub-processors:

Each of these providers has its own privacy notice, all of which are UK GDPR compliant. We have data processing agreements in place with each.

How long we keep it

Booking records are kept for seven years to meet HMRC record-keeping requirements. After that they are deleted or anonymised. Newsletter records are kept for as long as you remain subscribed; once you unsubscribe we keep a minimal suppression record (your email) so we don't accidentally email you again. Contact-form messages are kept for two years unless you ask us to delete sooner.

Your rights

Under UK GDPR you have the right to: access the data we hold about you; have inaccurate data corrected; have your data erased where there is no overriding legal basis to keep it; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time.

To exercise any of these rights, write to hello@kamalaretreats.com. We'll respond within one month.

Complaints

If you're unhappy with how we've handled your data and we haven't been able to resolve it, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use a small number of strictly necessary cookies for the booking session. We do not use analytics or advertising cookies.

Last updated: 2026-05-09