PRIVACY POLICY

Last updated: [September 4, 2026]

We at Levante Experiences respect your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclosure, and safeguard your information when you visit our website [Website URL] and submit requests for our retreats, hosting, activities, or newsletter.

1. Data Controller Information

The entity responsible for processing your personal data (the Data Controller) is:

• Legal Name / Entity: VJW Consulting Limited
• Registered Address: [To be updated]
• Registration / Tax ID (VAT): [Optional/If applicable]
• Contact Email: hello@levanteexperiences.com
• Phone Number: [Contact Phone Number]

2. Information We Collect

We collect personal data that you voluntarily provide to us when filling out booking request forms, contacting us, or subscribing to our newsletter.

• Booking & Excursion Requests: Name, email address, phone number, preferred dates, number of guests, dietary preferences/restrictions, and any specific inquiries or accessibility requests you submit in the message field.
• Newsletter Subscriptions: Email address and (optionally) first name.
• Technical & Usage Data: IP address, browser type, device information, operating system, and general browsing interaction collected via essential website log files or cookies.

3. How and Why We Use Your Data (Legal Basis)

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, we process your personal data under the following legal bases:

Purpose of Processing	Data Categories	Legal Basis (GDPR Art. 6)
Handling Booking Requests & Hosting Inquiries	Name, contact info, retreat preferences, dietary/special requests	Contractual Necessity: Processing is necessary to take steps at your request prior to entering into a contract (handling reservations and logistics).
Newsletter & Direct Marketing	Email address, name	Consent: You have given explicit consent by checking the box to receive marketing communications.
Customer Support & Communications	Name, email address, message history	Legitimate Interest: Responding to inquiries and maintaining effective guest relations.
Website Security & Performance	IP address, browser logs, technical data	Legitimate Interest / Legal Duty: Ensuring website security, network integrity, and preventing fraud.

4. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal information. We only share data with trusted service providers who act as data processors bound by confidentiality agreements:

• Web Hosting & Infrastructure: Gandi to securely host our website and database.
• Email & SMTP Providers: [e.g., FluentSMTP, Google Workspace, Mailchimp] to deliver system emails, transactional responses, and newsletter broadcasts.
• Local Excursion/Activity Partners: Third-party guides or accommodation partners strictly on a need-to-know basis to fulfill your specific retreat arrangements (e.g., activity organizers).

5. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Booking Enquiries: Retained for the duration of the retreat organization process and up to [e.g., 1 year / 5 years] thereafter for accounting, legal, and operational purposes.
• Newsletter Subscriptions: Stored until you withdraw consent by clicking the “unsubscribe” link in any newsletter or emailing us directly.
• Server Logs: Automatically deleted after [e.g., 30 to 90 days].

6. Your Rights Under GDPR

If you reside in the European Union or EEA, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure (“Right to be Forgotten”): Request deletion of your data when it is no longer needed or if consent is withdrawn.
• Restriction: Request restriction of processing under certain conditions.
• Data Portability: Request transfer of your data to another controller in a structured format.
• Object to Processing: Object to processing based on legitimate interests or direct marketing.
• Withdraw Consent: Withdraw consent at any time for newsletter subscriptions without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at [Privacy Email Address]. You also have the right to lodge a complaint with your national Data Protection Authority (DPA).

7. Cookies and Tracking

We use essential cookies necessary for the basic operation of our website. Non-essential cookies (such as analytics or marketing cookies) are only enabled if you explicitly consent through our cookie consent banner. You can manage or disable cookies via your browser settings at any time.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or relevant laws. Updates will be posted on this page with an updated revision date