Privacy Policy

Introduction

Danby & Sons, operating as Onze Retreats, respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and share your information when you interact with our website, make a booking, or use our services. This policy complies with applicable privacy laws, including those in Mexico, where Onze Retreats is a registered corporation.

1. Information We Collect

We collect the following types of personal data when you interact with us:

• —1.1 Personal Identification: Name, email address, phone number, home address, and passport information required for booking purposes.
• —1.2 Booking Information: Details of your reservations, including dates, guest count, and any special requests or preferences.
• —1.3 Payment Information: Payment details necessary to process your booking. All credit card transactions are processed securely — we do not store full payment card details on our servers.
• —1.4 Technical Information: IP address, browser type, device information, and browsing history collected through cookies and similar technologies.
• —1.5 Special Category Data: For certain retreat bookings, we may collect information related to health, dietary needs, or spiritual preferences. We collect this data only with your explicit consent.

2. How We Use Your Information

• —2.1 To Provide Services: We use your personal data to process bookings, manage reservations, and provide customized services.
• —2.2 Payment Processing: Your payment information is used to process transactions for deposits, final payments, and any additional charges.
• —2.3 Marketing and Promotions: With your consent, we may use your contact information to send newsletters or promotional offers. You may opt-out at any time.
• —2.4 Customer Support: We use your contact information and booking details to assist with inquiries and handle any issues during or after your stay.
• —2.5 Legal Compliance: We may use or disclose your personal data when required to comply with legal obligations, such as tax reporting or lawful requests from public authorities.

3. How We Share Your Information

• —3.1 Service Providers: We share data only as needed with the providers that run our services: Supabase (booking database and accounts), Stripe (payment processing), Resend (transactional email), Vercel (website hosting), Google Analytics and PostHog (website analytics), Sentry (error monitoring), and Anthropic (the website's AI assistant). These providers process data on our behalf under confidentiality and data-processing terms.
• —3.2 Business Transfers: In the event of a merger, acquisition, or sale, your personal data may be transferred to the new owners as part of the transaction.
• —3.3 Legal Obligations: We may disclose your personal data to comply with applicable law, enforce our Terms of Service, or protect the rights and safety of Onze Retreats or our guests.
• —3.4 Consent-Based Sharing: With your explicit consent, we may share your information with specific third parties, such as specialized retreat facilitators or wellness practitioners.

4. Data Security and Retention

• —4.1 Security Measures: We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction — including encryption, secure servers, and regular security audits.
• —4.2 Data Retention: We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy. Financial records may be retained for a minimum of five years in compliance with Mexican law.
• —4.3 International Transfers: As a business registered in Mexico, your data may be stored and processed in our facilities in Mexico. If you are accessing our services from outside Mexico, your data may be transferred across borders and will be protected as described in this policy.

5. Your Rights

You have certain rights regarding your personal data under applicable privacy laws:

• —Right to Access: Request a copy of the personal data we hold about you.
• —Right to Rectification: Request correction of inaccurate or incomplete data.
• —Right to Erasure: Request that we delete your personal data, subject to legal obligations.
• —Right to Restriction: Request that we restrict the processing of your personal data under certain circumstances.
• —Right to Data Portability: Request your data in a structured, commonly used, and machine-readable format.
• —Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

As a business registered in Mexico, we also honour your ARCO rights under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP): Access, Rectification, Cancellation, and Opposition. To exercise any of these rights, contact us using the details in section 8.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience, analyze website performance, and deliver targeted advertising. You can manage your cookie preferences through your browser settings, although disabling cookies may affect your user experience.

7. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other reasons. We encourage you to review this policy periodically. If we make significant changes, we will notify you through our website or by other means.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: