Privacy Policy

01Who is responsible for your data

Nefertiti Retreats (“we”, “us”, “our”), based between Egypt and Italy, is responsible for the personal information collected through this website. For any privacy question or request, contact us at hello@nefertitiretreats.com.

02What we collect

Information you give us. When you send an enquiry through our contact form we collect:

• your name and email address;
• your phone / WhatsApp number (optional);
• the type of retreat you are interested in and, if relevant, the specific retreat you are enquiring about;
• your message and the date and time it was sent.

If you contact us by email or WhatsApp, we receive your name, contact details and whatever you choose to share in the conversation. If you go on to book a retreat, we may ask for further details needed to organise it (such as passport details, dietary needs or health information you choose to share); these are handled as described in this policy and in your booking agreement.

Information collected automatically. Like most websites, our hosting provider records basic technical data such as your IP address, browser type and the pages you request, for security and to keep the website running. We also use privacy-friendly visitor statistics (see Cookies and similar technologies).

03How we use your information

We use your information to:

• reply to your enquiry and discuss your retreat or booking;
• prepare proposals, organise retreats and provide the services you ask for;
• keep the website secure and protect it against spam and misuse;
• understand, in aggregate, how the website is used so we can improve it;
• meet our legal, accounting and tax obligations.

We do not sell your personal information, and we do not add you to a marketing mailing list without your clear permission.

04Legal basis

Where the EU General Data Protection Regulation (GDPR) or Egypt's Personal Data Protection Law (Law No. 151 of 2020) applies, we rely on the following grounds:

• Steps before a contract and the contract itself — answering your enquiry and organising your retreat;
• Legitimate interests — running, securing and improving our website and business;
• Consent — where you choose to share optional information, such as health or dietary details; you may withdraw consent at any time;
• Legal obligation — keeping records required by law.

05Who we share it with

We only share your information where needed, with:

• Service providers that run our website and tools on our behalf — Vercel (website hosting and visitor statistics), Sanity (secure storage of the content management system, including enquiries) and our email provider;
• Retreat partners such as hotels, transport companies and guides, but only the details they need to provide your retreat, and only once you are booking with us;
• Retreat leaders, where you join a retreat that we produce for them and they need your details to run it;
• Authorities, where we are required to by law.

If you message us on WhatsApp, that conversation is also subject to WhatsApp's own privacy policy.

06International transfers

We work between Egypt and Italy, and some of our service providers store data in other countries, including the United States. Where your information is transferred outside the country it was collected in, we rely on appropriate safeguards offered by those providers, such as the European Commission's Standard Contractual Clauses.

07Cookies and similar technologies

We keep cookies to a minimum:

• Visitor statistics — we use Vercel Web Analytics, which measures page views in aggregate without using cookies and without identifying individual visitors.
• Language — if you switch the website to Italian, Google Translate stores a small preference cookie (googtrans) so the translation stays on as you browse. Choosing English again removes it.
• Google services — the translation tool and our web fonts are loaded from Google, so Google receives your IP address and basic browser information when the page loads. See Google's privacy policy for how Google handles this data.

You can block or delete cookies at any time in your browser settings.

08How long we keep it

We keep enquiries for as long as we need them to talk with you about your retreat, and generally no longer than 24 months after our last contact if no booking follows. Information related to bookings is kept for as long as required for accounting, tax and legal purposes. When we no longer need your information, we delete it.

09How we protect it

The website is served over a secure (HTTPS) connection. Enquiries are stored privately and can only be accessed by authorised people through our password-protected admin area. No system is completely secure, but we take reasonable steps to protect your information.

10Your rights

Depending on where you live, you have the right to:

• access the personal information we hold about you;
• ask us to correct or update it;
• ask us to delete it;
• object to or ask us to limit how we use it;
• receive a copy of it in a portable format;
• withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email us at hello@nefertitiretreats.com. We will reply within one month. You also have the right to complain to a data protection authority — in Italy, the Garante per la protezione dei dati personali; in Egypt, the Personal Data Protection Centre; or the authority in your own country.

11Children

This website is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us their details, please contact us and we will delete them.

12Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on this page, with the date it was last updated.