Flower Den Retreats

Privacy Policy

Last updated: July 24, 2026. This document is a template provided for structural guidance and should be reviewed by a qualified legal professional before use. It does not constitute legal advice.

1. Introduction

Flower Den Retreats (“we,” “us,” “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Services.

By using our Services, you consent to the practices described in this policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

  • Contact Information: Name, email address, phone number.
  • Booking Information: Property preferences, dates, special requests, number of guests.
  • Correspondence: Messages you send through our contact form, including subject and message content.
  • Experience Host Applications: Experience type, biography, portfolio URL, availability.
  • Newsletter Subscriptions:Name and email address provided when joining our “Tribe.”
  • Chatbot Interactions: Questions and messages sent through our chat feature.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, time spent, referral source, browser type, device type, and operating system.
  • Cookies & Tracking Technologies: We use cookies and similar technologies to improve your experience and analyse site traffic. See Section 7 for details.
  • Analytics Data: Aggregated, anonymised data about how users interact with our site, collected through analytics providers such as PostHog.

2.3 Information from Third Parties

We may receive information about you from third-party platforms when you book through Airbnb or other partner services, in accordance with their privacy policies.

3. How We Use Your Information

We use your information for the following purposes:

  • To process and manage bookings, reservations, and payments.
  • To communicate with you about your booking, including confirmations, reminders, and updates.
  • To respond to your enquiries, requests, or complaints.
  • To send you marketing communications (with your consent) including our newsletter.
  • To improve our website, services, and user experience.
  • To detect, prevent, and address technical issues, fraud, or abuse.
  • To comply with legal obligations and enforce our Terms of Service.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for processing your personal data is:

  • Consent: For marketing communications, cookies (where required), and newsletter subscriptions.
  • Contractual Necessity: To fulfil your booking, reservation, or service request.
  • Legitimate Interest: To improve our services, prevent fraud, and ensure website security.
  • Legal Obligation: To comply with applicable laws and regulations.

5. Data Sharing & Third Parties

We may share your information with the following categories of third parties:

  • Service Providers: Companies that help us operate our website and business, including Supabase (database hosting), Resend (email delivery), Vercel (website hosting), Cal.com (booking calendar), and PostHog (analytics).
  • Third-Party Platforms: If you book through Airbnb or similar platforms, your information is handled according to their privacy policies.
  • Legal Compliance: When required by law, court order, or governmental authority.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

We do not sell your personal information to third parties for their own marketing purposes.

6. Data Retention

We retain your personal information only as long as necessary to fulfil the purposes described in this policy, or as required by law. Specifically:

  • Booking and transaction records: 7 years (legal and tax obligations).
  • Contact form submissions: 2 years after the last communication.
  • Newsletter subscriptions: Until you unsubscribe.
  • Analytics data: Aggregated indefinitely; identifiable data up to 26 months.

When data is no longer needed, it is securely deleted or anonymised.

7. Cookies & Tracking

7.1 What Are Cookies

Cookies are small text files stored on your device by your web browser. They help us remember your preferences and understand how you use our site.

7.2 Types of Cookies We Use

  • Essential Cookies: Required for the website to function, such as maintaining your session.
  • Analytics Cookies: Help us understand how visitors interact with our site (e.g., PostHog).
  • Functional Cookies: Remember your preferences and settings.

7.3 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. Where required by law, we will request your consent before placing non-essential cookies.

8. Your Rights

8.1 General Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Portability: Request a machine-readable copy of your data.
  • Objection: Object to processing based on legitimate interests or direct marketing.
  • Restriction: Request restriction of processing in certain circumstances.

8.2 California Privacy Rights (CCPA)

If you are a California resident, you have the additional right to:

  • Know what personal information we collect, use, and share.
  • Request deletion of your personal information.
  • Opt out of the sale of your personal information (we do not sell personal information).
  • Non-discrimination for exercising your CCPA rights.

To exercise your rights, contact us at hello@flowerdenretreats.com. We will respond within the timeframes required by applicable law.

9. Children’s Privacy

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete it promptly.

For participants under 18 in our experiences or retreats, we require parental or guardian consent as outlined in our Terms of Service.

10. Data Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (HTTPS), access controls, and secure data storage providers.

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your data.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. Where required by law, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes will be notified via email or a prominent notice on our website.

13. Contact Us

If you have questions, concerns, or wish to exercise your privacy rights, please contact us at:

Flower Den Retreats
Email: hello@flowerdenretreats.com