Privacy Policy

1. Who We Are

UpsideDown Retreat ("we", "us", "our") is the data controller responsible for your personal data. We operate luxury handstand and freediving retreats. Contact: upsidedownretreat@gmail.com

2. Data We Collect

We collect the following personal data: • Newsletter sign-up: email address • Event registration: first name, last name, email address, phone number (optional), chosen event and room type • Waitlist: name, email address, requested event We do not use tracking cookies or third-party analytics. Accessibility preferences (font size, contrast) are stored locally in your browser only and never transmitted to us.

3. Why We Collect It (Legal Basis)

• Newsletter: based on your explicit consent (GDPR Article 6(1)(a)). You can withdraw consent at any time by clicking "Unsubscribe" in any email or contacting us directly. • Event registration and waitlist: based on pre-contractual steps at your request and our legitimate interest in managing participation (GDPR Article 6(1)(b) and 6(1)(f)).

4. How We Use Your Data

• To send you retreat updates and news (newsletter only, with consent) • To process your event registration and communicate with you about your participation • To notify you if a spot opens (waitlist) • To send our team internal notifications about new registrations

5. Third-Party Processors

We share data with the following processors under data processing agreements: • Supabase (database hosting) — data stored on EU-region servers • Brevo (email and contact management) — EU-based platform, GDPR compliant We do not sell your data to third parties.

6. How Long We Keep Your Data

• Newsletter subscribers: until you withdraw consent • Registration data: for the duration of the retreat plus 12 months for administrative purposes • Waitlist data: until the event is no longer available or you ask us to remove you You can request deletion at any time by emailing us.

7. Your Rights

Under GDPR you have the right to: • Access — request a copy of the personal data we hold about you • Rectification — correct inaccurate or incomplete data • Erasure — request deletion of your data ("right to be forgotten") • Restriction — ask us to limit how we process your data • Portability — receive your data in a machine-readable format • Objection — object to processing based on legitimate interest • Withdraw consent — at any time, for consent-based processing To exercise any right, email us at: upsidedownretreat@gmail.com We will respond within 30 days.

8. Supervisory Authority

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority. In Israel: the Privacy Protection Authority (PPA). In the EU: the supervisory authority in your country of residence.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the revised policy.

For any questions about this privacy policy, contact us at upsidedownretreat@gmail.com