Privacy Policy
Last updated: 26 July 2026
This policy explains what personal information Atria Retreats (“we”, “us”, “our”) collects when you visit atriaretreats.com, why we collect it, and what rights you have over it. We have kept it short and in plain English deliberately.
The short version
This is a simple informational website. We do not sell anything through it, we do not run advertising or analytics trackers on it, and we do not sell or rent your information to anyone. The only personal information we hold is what you choose to type into one of our two forms.
What we collect
Information you give us. If you use our contact form we collect the name, email address and message you enter. If you sign up to hear from us, we collect the name and email address you enter. Nothing more, and nothing is required beyond those fields.
Technical information. Like every website, ours is delivered by a hosting provider that automatically records basic request data — your IP address, browser type, the page requested and the time of the request. This is used to serve the site and to protect it from attacks and abuse. We do not use it to build a profile of you.
Why we use it, and our legal basis
- To reply to you. If you send us an enquiry, we use your details to respond. Our legal basis is our legitimate interest in answering people who contact us, and in taking steps at your request before entering into any agreement.
- To send you updates, if you asked for them. Our legal basis is your consent, which you may withdraw at any time.
- To keep the site running and secure. Our legal basis is our legitimate interest in operating a functioning, protected website.
Cookies and browser storage
We do not use advertising cookies, analytics cookies, or third-party tracking pixels on this site. We do not operate a cookie consent banner because we do not set the kind of cookies that require one.
The site stores one or two small functional values in your browser’s local storage so that a sign-up prompt does not reappear once you have dismissed or completed it. That value stays on your device, is not personal information, and is not transmitted to us. Clearing your browser storage removes it.
Who else is involved
We keep the number of third parties to a minimum. Those we do rely on act as our service providers and are not permitted to use your information for their own purposes:
- Cloudflare — hosts and delivers this website and protects it against attacks. It processes the technical request data described above.
- Web3Forms — receives submissions from our two forms and delivers them to our mailbox as email. It handles the contents of the form at the moment you submit it.
- Our email provider — stores the resulting messages in our inbox, in the same way as any email you might send us directly.
We may also disclose information where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.
We do not sell or share your personal information for advertising, marketing or profiling by others.
Where your information goes
Our service providers may process data on servers outside the United Kingdom. Where information is transferred outside the UK or the European Economic Area, we rely on the safeguards those providers have in place — typically the UK International Data Transfer Addendum or the European Commission’s Standard Contractual Clauses, or a finding that the destination country offers adequate protection.
How long we keep it
Enquiries are kept for as long as needed to deal with them and to maintain a reasonable record of our correspondence, and are then deleted. Sign-up details are kept until you unsubscribe or ask us to remove them. Technical logs held by our hosting provider are short-lived and are deleted on that provider’s own rolling schedule.
Your rights
Under UK and EU data protection law you have the right to:
- ask what personal information we hold about you and get a copy of it;
- have inaccurate information corrected;
- have your information deleted;
- object to, or ask us to restrict, how we use it;
- receive your information in a portable format;
- withdraw consent at any time, where we relied on your consent.
To exercise any of these, get in touch using our contact form. We will respond within one month. There is no charge, and we will not treat you any differently for asking.
Children
This site is not directed at children, and we do not knowingly collect information about anyone under 16. If you believe a child has sent us their details, contact us and we will delete them.
Security
The site is served over an encrypted HTTPS connection and hardened against common web attacks. No system can be guaranteed perfectly secure, so please do not send us sensitive personal information — health details, financial details, identification documents — through the website forms.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the UK’s Information Commissioner’s Office at ico.org.uk, or to the data protection authority in your country if you are in the EEA.
Changes to this policy
If we change how we handle personal information we will update this page and revise the date at the top.
Contact
Atria Retreats is the data controller for the information described here. The quickest way to reach us about anything in this policy is our contact form.