← Back to the retreat

简体中文

Privacy Policy — Himalaya Meets Dubrovnik Retreat 2027

Last updated: October 2026

1. Who we are

The Himalaya Meets Dubrovnik Retreat 2027 (27 May – 2 June 2027) is organised by Wild Orange d.o.o., Štikovica 20, 20235 Zaton, Croatia, OIB 82816753752 ("we", "us"). We are responsible for the personal information described in this policy. Contact: laylamrdbk@gmail.com.

2. What information we collect

When you book, we collect:

  • For the lead guest and each participant: full name and email address.
  • Optional: phone / WhatsApp number.
  • Package choice (retreat only, or retreat plus the Bosnia & Herzegovina Experience), any discount applied, and accommodation preferences or notes you choose to give.
  • Payment amounts, payment status and payment schedule.

We do not collect passport or identity document details through the booking form. We do not receive or store your card details — these are handled by Stripe (section 4).

If you contact us via WhatsApp, WeChat or Instagram, those services process your messages under their own privacy policies.

3. Why we need it

  • Names: to reserve a place for each participant and arrange rooms, meals and activities.
  • Email addresses: to identify each participant, send payment confirmations, and contact you about your booking, payment due dates and practical retreat information. Each participant's email is also used to ensure discounts are applied fairly.
  • Phone / WhatsApp (optional): to reach you quickly before or during the retreat, e.g. about travel or schedule changes.
  • Accommodation preferences: to plan room allocation (always subject to host confirmation).

Legal basis: performance of your booking contract, and compliance with our accounting and tax obligations. We do not use your information for marketing without your separate consent, and we never sell it.

4. How payments are processed

Payments are processed by Stripe, a certified payment provider. You enter your card details directly into Stripe's secure checkout. Stripe processes your payment details, may use them to prevent fraud, and emails you a payment receipt when your payment succeeds. We see only the payment result (amount, status and a Stripe reference), never your full card number. Stripe acts under its own privacy policy: https://stripe.com/privacy

5. How we store and protect your information

Booking information is stored in an access-restricted database provided by our website hosting provider. Website visitors cannot read, change or delete booking records: the database only accepts these operations from the website's own server when processing a booking, and from the organiser. Connections to the website are encrypted (HTTPS). Some of our service providers (website hosting, Stripe) may process data outside the European Economic Area; where they do, transfers are made only under safeguards recognised under the GDPR, as stated in each provider's own data-processing terms.

6. How long we keep it

We keep different information for different periods:

  • Unpaid or abandoned bookings (checkout started but no payment made): deleted within 6 months, unless we are legally required to keep them longer.
  • Confirmed bookings — retreat information (phone numbers, accommodation preferences and notes, and other details used only to run the retreat): deleted 12 months after the retreat ends, unless a dispute or legal obligation requires us to keep them longer.
  • Confirmed bookings — accounting records: invoices, payment records and the minimum identifying details they must contain (e.g. name, amount, date, service) are retained for the periods required by applicable Croatian accounting and tax laws. Nothing beyond what those laws require is kept for this period.

You can ask us to delete your information earlier (section 9); we will do so except for records we are legally required to keep.

7. Sharing with teachers, partners and accommodation providers

We share only the information each party needs to provide its part of the retreat, and nothing more:

  • Accommodation providers: We may share the minimum personal information necessary with our accommodation providers to arrange your stay and fulfil applicable guest registration requirements.
  • Excursion partners: we may share the minimum personal information necessary with our excursion partners to organise and provide optional activities booked by guests — for the Bosnia & Herzegovina Experience, the names of participants who booked it and, if needed, a contact number for the day.
  • Teachers and co-hosts: participant first names and any information you choose to share that is relevant to the sessions.
  • Stripe: to process payments.
  • Public authorities: only where required by law.

We never share one participant's details with another participant, other than within the same booking as needed for the lead guest to manage it.

8. Guest registration at accommodation

Under Croatian law, accommodation providers must register guests with the authorities (e.g. via the national eVisitor system), which normally requires identity document details. We do not collect these through our booking form. If required, the accommodation provider will request them directly from you at or before check-in, and will process them under its own legal obligations and privacy policy.

9. Your rights

Under the EU General Data Protection Regulation (GDPR), you may ask us to:

  • give you a copy of the personal data we hold about you;
  • correct inaccurate data;
  • delete your data, except where we must keep it by law (e.g. accounting records);
  • restrict or object to certain processing;
  • provide your data to you or another provider in a usable format.

Email laylamrdbk@gmail.com with your request. We will reply within one month. You may also complain to the Croatian data protection authority, AZOP (Agencija za zaštitu osobnih podataka, https://azop.hr), or the authority in your country.

10. Cookies

This website does not use advertising or analytics cookies, and does not track you across other websites. Fonts are served from our own website, so no font requests are sent to Google or other third parties. Stripe's checkout uses strictly necessary cookies and similar technology for secure payment and fraud prevention; these do not require consent.

11. Changes

We may update this policy. The current version and its date are always shown on this page.

12. Contact

Privacy questions or requests: laylamrdbk@gmail.com