Last updated: 25 October 2026
This Privacy Policy explains how YogaHolidays.com handles personal data when you browse the website, create an account, send an inquiry, book a retreat, use the site chat, leave a review, contact us or list retreats as an organizer.
YogaHolidays.com is operated by GLOBAL RETREATS SRL, Strada SperanČei nr. 9C, 907195 Mihail KogÄlniceanu, ConstanČa County, Romania, EU, Trade Register No. J2017003897135, VAT ID RO38591710.
For privacy questions or requests, contact office@yogaholidays.com.
We are the controller of the personal data we use to operate the Platform. The organizer of your retreat is a separate, independent controller of the data it receives from us and uses to provide your retreat. An organizer may have its own privacy notice.
If you are a Guest, depending on how you use the website, we may collect:
Contact and account details, such as your name, email address, phone number and account information.
Inquiry details, such as the retreat you are interested in, preferred dates, number of guests and messages you send.
Booking and payment details, such as the retreat, dates, room, names of travellers, amounts paid, refunds and booking status. Card payments are processed by Stripe. We do not see or store your full card number.
Information about your needs that you choose to share, such as dietary requirements, allergies, accessibility needs or health information relevant to your participation. We collect health information only with your explicit consent (see section 3).
Reviews you submit after a retreat.
Communications, including emails, contact form submissions and messages sent through the site chat.
Technical information, such as your IP address, browser and device information, security logs, pages visited and cookie preferences.
If you are an Organizer, we collect business and contact details, listing content, payout and invoicing details, records of your acceptance of our Partner Terms, and communications with us.
Please do not send passport scans or complete payment card numbers by email or chat.
We use personal data to:
Answer inquiries and pass them to the relevant organizer: to take steps you request before a contract.
Process your booking and deposit, send your booking confirmation and handle changes, cancellations and refunds: to perform our agreement with you.
Share relevant needs with your organizer, such as dietary requirements, allergies or accessibility needs: to perform the booking. Where this includes health information, we share it only with your explicit consent, which you can withdraw at any time.
Provide your account and the websiteās features: to perform our agreement with you.
Invite you to review a retreat you booked, once our verified review system is live, and publish your review with your first name and the initial of your last name: our legitimate interest in providing reliable, verified reviews.
Remind you once about a booking you started but did not complete: our legitimate interest. You can opt out at any time.
Handle support requests, complaints, reports and listing corrections: our legitimate interest and our legal obligations.
Protect the website and accounts against misuse or fraud: our legitimate interest.
Keep accounting, tax and payment records: our legal obligations.
Understand website use and measure advertising: only with your consent, through optional cookies.
Send promotional emails: only with your consent, or where the law otherwise allows it, always with an option to unsubscribe. Sending an inquiry or making a booking does not automatically subscribe you to promotional emails.
We do not make decisions about you with legal or similarly significant effects based solely on automated processing.
Retreat organizers. When you send an inquiry or book, we share the details needed to answer or provide your retreat with the relevant organizer and its authorized team.
Stripe, our payment provider, processes card payments and refunds and may use payment data to prevent fraud, under its own privacy policy.
Service providers acting on our behalf for website hosting, email, the site chat and its AI assistant, customer support, security, analytics, advertising and accounting. Analytics and advertising providers receive information only when you enable the relevant cookie category.
Authorities, courts or advisers, when required by law or necessary to establish, exercise or defend legal claims, or to address a serious safety issue.
We do not sell your personal data.
The āRetreat conciergeā chat is an AI assistant that helps you search for retreats. Messages you send in the chat are processed by our AI service provider to generate replies and are stored by us to improve search results and answer follow-up questions. Please do not share health information or other sensitive personal data in the chat.
Retreats are offered worldwide, so some organizers and service providers are located outside the European Economic Area. When you book a retreat with an organizer outside the EEA, we share the booking details needed to provide your retreat with that organizer.
Where a transfer requires safeguards, we rely on an adequacy decision of the European Commission, the European Commissionās Standard Contractual Clauses, or another lawful mechanism, such as a transfer necessary for a contract concluded in your interest. You can email office@yogaholidays.com to ask about the safeguards used for a particular transfer.
We apply the following retention periods:
ā¢ Inquiries that do not lead to a booking and ordinary support messages: up to 24 months after the last meaningful interaction.
ā¢ AI concierge conversations: up to 12 months after the last interaction, after which we delete or irreversibly anonymize them.
ā¢ Account profile information: while the account remains active and for up to 90 days after closure, except for records retained separately for the purposes below.
ā¢ Booking records, accepted terms and evidence needed to handle contractual claims: generally for 3 years after the retreat ends or the contractual relationship ends, whichever is later, unless a different legal limitation period applies.
ā¢ Accounting, invoicing and tax records: for the retention periods required by applicable Romanian law.
ā¢ Health information processed with explicit consent: only for as long as necessary to handle the relevant request or booking, normally until 30 days after the retreat ends, unless a specific legal obligation or claim requires longer retention.
ā¢ Marketing contact details: until you unsubscribe or withdraw consent. We may retain a minimal suppression record to respect your opt-out.
ā¢ Published reviews and external testimonials: while the relevant listing remains active, subject to applicable removal rights and our review rules.
ā¢ Cookie records: for the durations listed in our Cookie Policy.
Where information is needed for an ongoing complaint, payment dispute, investigation or legal claim, we retain the relevant records until the matter is resolved and any applicable legal retention period expires. Access to these records is restricted.
Deleted information may remain in protected backups until those backups are overwritten under our backup schedule. It is not used for ordinary business purposes.
Subject to applicable law, you may ask to access, correct or delete your personal data, restrict its use or receive a portable copy. You may object to uses based on our legitimate interests, including reminders and marketing, and withdraw your consent at any time. Withdrawing consent does not affect processing that was lawful before withdrawal.
To make a request, email office@yogaholidays.com with āPrivacy requestā in the subject. We may need to verify your identity before disclosing or changing personal data. We reply within one month, as required by the GDPR.
You may also complain to the Romanian data protection authority, ANSPDCP, or to the supervisory authority in your country.
We use reasonable technical and organizational measures to protect personal data and limit access to it. No online service can guarantee absolute security. If you suspect unauthorized access to your account or receive a suspicious payment request, contact us promptly.
YogaHolidays.com is intended for adults arranging travel. A parent or guardian may contact us if a child has provided personal data without appropriate authorization.
We may update this policy when our services or data practices change. The updated version will be published on this page with a new date, and we will provide additional notice where required.
For questions, contact office@yogaholidays.com.