Privacy Policy — Recover Rest Reset Retreat

Last updated: 12 June 2026

1. Who we are

This website is operated by Recover Rest Reset ("we", "us", "our"). We are the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your information, you can contact us at hello@recoverrestreset.com.

2. What personal data we collect

We collect the following categories of information when you make a booking enquiry or reserve a place on the retreat:

Identity and contact information

Full name
Email address
Phone number
Home address (where provided, for invoicing purposes)

Booking information

The room you've selected and your payment schedule
If you're sharing a room, the name and email of the friend you're booking with
Any special requests or notes you provide

Special category data (health information)

We also ask for dietary requirements and emergency contact details, and you may choose to tell us about medical conditions or mobility needs relevant to your stay. This is "special category data" under UK GDPR, and we only collect it with your explicit consent, given when you submit the booking form. We use this information solely to plan catering and to be able to act quickly in an emergency during the retreat — it is not used for any other purpose.

Payment information

Payments are processed securely by Stripe. We do not see or store your full card details at any point — these are handled entirely by Stripe in line with their own security standards and privacy policy.

3. How we collect your data

We collect your information when you complete our online booking form (processed via Formspree), when you pay a deposit or balance via Stripe, or when you email or message us directly with an enquiry.

4. How and why we use your data

We use your personal data for the following purposes, and on the following legal bases under UK GDPR:

To provide our services (contract): to process your booking, manage payments, plan meals and activities, and communicate with you before, during and after the retreat.
To meet legal obligations: we keep booking and payment records as required for accounting and tax purposes.
Legitimate interests: to respond to enquiries, improve our service, and maintain the security of our booking systems.
Consent (special category data): we process dietary, health, and emergency contact information only with your explicit consent, given at the point of booking. You can withdraw this consent at any time, though this may affect our ability to accommodate you safely.

5. Who we share your data with

We do not sell or rent your personal data to third parties. We share information with the following trusted services solely to operate our booking and payment process:

Stripe (payment processing) — Stripe processes your payment details directly. Stripe may be based outside the UK; where this is the case, appropriate safeguards (such as Standard Contractual Clauses) are in place. See Stripe's privacy policy.
Formspree (booking form processing) — Formspree securely transmits your booking form submission to us by email. Formspree may be based outside the UK; appropriate safeguards apply. See Formspree's privacy policy.

We may also need to share relevant information (such as dietary requirements or emergency contact details) with on-site catering or venue staff at the castle, solely for the purpose of delivering the retreat safely.

6. International data transfers

Some of the services we use (Stripe and Formspree) may store or process data outside the UK and European Economic Area, including in the United States. Where this happens, these providers maintain appropriate legal safeguards, such as Standard Contractual Clauses approved for use in the UK, to ensure your data remains protected to UK standards.

7. How long we keep your data

Booking and payment records: kept for 6 years in line with UK tax and accounting requirements (HMRC guidance).
Dietary and health information: kept only for as long as needed to plan and run the retreat, and securely deleted within a reasonable period afterwards unless you book again.
Marketing communications: if you've opted in to hear about future retreats, we'll keep your contact details until you unsubscribe or ask us to remove you.

8. Your rights

Under UK GDPR, you have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate or incomplete data
Request erasure of your data, where applicable
Request that we restrict or stop processing your data in certain circumstances
Request a copy of your data in a portable format
Object to processing based on legitimate interests
Withdraw consent at any time where we rely on consent (such as for dietary/health data)

To exercise any of these rights, contact us at hello@recoverrestreset.com. We'll respond within one month as required by law.

If you're unhappy with how we've handled your data, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

9. Security

We take reasonable technical and organisational steps to protect your personal data, including using reputable third-party providers (Stripe and Formspree) who maintain high security standards for handling sensitive information such as payment and health data.

10. Cookies

This site uses a small number of cookies and similar technologies, mainly relating to payment processing and website fonts. See our Cookie Policy for full details.

11. Children

Our retreat and website are intended for adults aged 18 and over. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time, for example to reflect changes in our booking process or in the law. The "last updated" date at the top of this page will show when changes were made.

13. Contact us

If you have any questions about this privacy policy or how we handle your personal data, please email hello@recoverrestreset.com.