Effective Date: 23 June 2026
Last Updated: 25 July 2026
1. Introduction
Welcome to Rumi Residence (“we”, “our”, “us”).
Your privacy is important to us. This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you visit our website, purchase one of our retreats, subscribe to our mailing list or otherwise interact with us.
We are committed to processing your personal data lawfully, fairly and transparently in accordance with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- EU GDPR (where applicable)
By using our website or booking one of our retreats, you acknowledge that you have read this Privacy Policy.
2. Data Controller
Rumi Residence is the Data Controller responsible for your personal information.
Business Name
Rumi Residence
Website
www.rumiresidence.com
3. Information We Collect
Depending on how you interact with us, we may collect the following information.
Identity Information
- Full name
- Date of birth
- Nationality
- Passport information (where required for travel arrangements)
Contact Information
- Email address
- Telephone number
- Postal address
- Emergency contact details
Booking Information
- Retreat booked
- Room preference
- Payment schedule
- Booking history
- Special requests
Payment Information
Payments are securely processed by our payment providers.
We do not store your full payment card details.
Our payment providers may collect:
- Card details
- Billing address
- Payment status
Health Information
For your safety during our retreats we may ask for information regarding:
- Allergies
- Dietary requirements
- Medical conditions
- Disabilities
- Mobility requirements
- Medications relevant to the retreat
- Mental health considerations that may impact participation
- Fitness limitations
Because this information is considered special category personal data, we only process it with your explicit consent and where necessary for health and safety.
Travel Information
Where required, we may collect:
- Flight details
- Arrival information
- Departure information
- Visa information
- Transfer preferences
Marketing Information
If you subscribe to our newsletter we may collect:
- Email address
- Name
- Marketing preferences
Website Usage Data
When you visit our website we may automatically collect:
- IP address
- Browser type
- Device information
- Operating system
- Pages visited
- Time spent on pages
- Referral source
- Cookies
- Analytics information
Social Media Information
If you interact with us on social media we may receive publicly available information including:
- Username
- Profile picture
- Messages you send us
- Comments
- Likes
- Shares
4. How We Collect Information
We collect information when you:
- Make a booking
- Complete a booking form
- Join our waiting list
- Subscribe to our newsletter
- Contact us
- Submit an enquiry
- Complete questionnaires
- Fill in medical forms
- Participate in surveys
- Attend one of our retreats
- Use our website
- Interact with our social media
5. Why We Use Your Information
We use your information to:
- Process bookings
- Arrange accommodation
- Organise transportation
- Coordinate activities
- Manage payments
- Provide customer support
- Respond to enquiries
- Ensure guest safety
- Meet legal obligations
- Improve our retreats
- Improve our website
- Detect fraud
- Prevent abuse
- Send booking updates
- Send newsletters (where you have opted in)
- Manage waitlists
- Handle complaints
- Manage refunds
- Maintain business records
6. Lawful Bases for Processing
We process personal information under one or more of the following lawful bases:
Contract
Where processing is necessary to fulfil your booking.
Examples include:
- Confirming reservations
- Contacting hotels
- Organising airport transfers
- Booking activities
Legal Obligation
Where required by law, including:
- Accounting
- Tax reporting
- Fraud prevention
- Regulatory compliance
Legitimate Interests
Where necessary for our legitimate business interests, including:
- Improving our services
- Website analytics
- Customer service
- Security
- Preventing fraud
- Business administration
Consent
Where we rely on consent, including:
- Marketing emails
- Health information
- Photography permissions (where separate consent is obtained)
You may withdraw consent at any time.
7. Sharing Your Information
We only share information where necessary.
This may include:
Accommodation Providers
Hotels
Villas
Resorts
Property managers
Activity Providers
Tour operators
Boat companies
Pilates instructors
Private chefs
Transport providers
Photography partners
Experience hosts
Payment Providers
Secure payment processors
Technology Providers
Website hosting
Email providers
CRM software
Booking software
Analytics providers
Cloud storage
Professional Advisers
Lawyers
Accountants
Insurance providers
Auditors
Government Authorities
Where required by law.
We never sell your personal information.
8. International Transfers
Some of our retreats take place outside the United Kingdom.
Your information may therefore be transferred internationally where necessary to organise your booking.
Where transfers occur outside the UK, we take appropriate safeguards to ensure your data remains protected, including:
- UK adequacy regulations
- Standard Contractual Clauses
- Reputable international service providers
- Contractual protections with suppliers
9. Cookies
Our website uses cookies to:
- Remember preferences
- Improve website performance
- Analyse website traffic
- Improve user experience
- Support booking functionality
Cookies may include:
- Essential cookies
- Performance cookies
- Analytics cookies
- Marketing cookies
You can control cookies through your browser settings.
10. Email Marketing
If you subscribe to our mailing list we may send:
- Retreat announcements
- Early access opportunities
- Travel inspiration
- Exclusive offers
- Company updates
You may unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us.
11. Data Retention
We only retain personal information for as long as necessary.
Typical retention periods include:
Booking records: up to 7 years
Accounting records: up to 7 years
Marketing data: until consent is withdrawn
Health information: only for as long as necessary to safely deliver the retreat unless a longer retention period is required by law
Customer correspondence: up to 6 years
Website analytics: according to the relevant analytics provider’s settings
12. Keeping Your Information Secure
We implement appropriate technical and organisational security measures including:
- SSL encryption
- Password protection
- Limited staff access
- Secure payment providers
- Two-factor authentication where available
- Secure cloud storage
- Regular software updates
However, no internet transmission can ever be guaranteed to be completely secure.
13. Your Rights
Subject to applicable law, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Restrict processing
- Object to processing
- Request portability of your data
- Withdraw consent
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights please contact:
14. Children’s Privacy
Our retreats are intended for adults unless specifically advertised otherwise.
We do not knowingly collect information from children under the age of 18.
If we become aware that information has been collected from a child without appropriate consent, we will delete it promptly.
15. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.
16. Automated Decision Making
We do not make booking decisions based solely on automated processing or profiling.
17. Data Breaches
If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will comply with our legal obligations, including notifying the relevant supervisory authority and affected individuals where required by law.
18. Photography and Social Media
Photographs and videos may be taken during retreats for promotional purposes where you have provided consent or where another lawful basis applies.
You may withdraw consent for future promotional use at any time by contacting us. Withdrawal will not affect materials already published before your request where continued use is lawful.
Please also note that other guests may independently capture photographs or videos during retreats. While we encourage respectful behaviour and can ask guests to honour privacy requests where reasonably possible, we cannot control or accept responsibility for images or content shared independently by attendees on their personal social media accounts or other platforms.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will always be published on our website.
Your continued use of our services constitutes acceptance of any updates.
20. Contact Us
If you have any questions about this Privacy Policy or the way we process your personal information, please contact us.
Rumi Residence
Email: hello@rumiresidence.com
Website: www.rumiresidence.com
21. Complaints
If you believe your personal information has been handled unlawfully, please contact us first so we have the opportunity to resolve your concerns.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
Website: https://ico.org.uk
Telephone: 0303 123 1113
rumi residence 