1. Introduction
Your privacy matters to us. This policy explains what information HavenNexus collects, how we use it, and the choices you have. By using this site you agree to the practices described here.
2. Information We Collect
We collect information you provide directly - such as your name, email, phone, country, and any messages or preferences you submit through our review, waitlist, interest, reservation, questionnaire, partner-application, and contact forms. Reservation notes may include dietary or accessibility details you choose to share. For spam protection we briefly record the IP address attached to a review submission. If you create an account, we store your email and a securely hashed password - never your password in readable form.
3. How We Use Your Information
We use your information to respond to enquiries, process retreat reservations and waitlist requests, publish reviews you choose to submit, run your account, send updates you opt in to, and protect the site from spam and abuse. We do not sell your data.
4. Reviews You Submit
Reviews you submit are published publicly on this site, including your chosen display name and location. Do not include private information in a review. Your email is used for contact only and is never displayed publicly.
5. Cookies & Sessions
We use a single essential session cookie to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising cookies and we do not sell your data.
6. How We Share Information
We share information only with the service providers who help us operate the site (for example, our web host and email delivery), and only as needed to provide our services. We do not sell personal information.
7. Data Retention
Review IP addresses are automatically deleted after 90 days, as they exist only to limit spam. Other submissions are kept only as long as needed to operate the retreats and meet legal and accounting obligations, then deleted.
8. Security
Data is stored using parameterised database queries, passwords are hashed, and sensitive administrative access is role-restricted and session-limited. No system is perfectly secure, but we take reasonable safeguards.
9. Your Rights
You may ask us to access, correct, or delete the personal information you gave us, and you can unsubscribe from marketing emails at any time. Email us and we will action your request across our records.
10. Children's Privacy
This site is not directed to children under 16, and we do not knowingly collect their information.
11. Contact Us
Questions about this policy, or an access or deletion request? Email info@havennexus.com.