Privacy Policy - Chommakh’bar

1. Introduction

Chommakh’bar ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

2.1 Information You Provide Directly

Booking Information: Name, email, phone number, home address, country of residence
Retreat Preferences: Package selection, yoga experience level, dietary preferences, special needs
Payment Information: Payment details (processed securely through third-party processors)
Contact Form: Any messages or inquiries sent through our website
Communication: Emails, phone calls, and correspondence related to your reservation

2.2 Automatically Collected Information

IP address and browser type
Pages visited and time spent on site
Referrer information and clickstream data
Device information (type, operating system, screen resolution)
Cookies and similar tracking technologies

2.3 Information from Third Parties

We may receive information about you from payment processors, email service providers, and other service partners.

3. How We Use Your Information

We use collected information for the following purposes:

Processing and confirming your retreat bookings
Sending confirmation emails, receipts, and retreat updates
Providing customer support and responding to inquiries
Facilitating payment transactions
Creating and maintaining your account
Improving our website and services
Sending newsletters or promotional content (with your consent)
Complying with legal obligations
Preventing fraud and protecting security

4. Disclosure of Your Information

4.1 Service Providers

We may share your information with trusted service providers who assist us with:

Payment processing and financial services
Email and communication services
Website hosting and data storage
Customer relationship management
Analytics and reporting

4.2 Legal Requirements

We may disclose information when required by law or to protect our legal rights and your safety.

4.3 What We Don't Do

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your information, including:

SSL/TLS encryption for data transmission
Secure password storage with encryption
Limited access to personal information (staff only as needed)
Regular security audits and updates
Compliance with data protection regulations

However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

Fulfill the purposes outlined in this policy
Comply with legal obligations
Resolve disputes and enforce agreements

Typically, we retain booking records for 7 years for accounting purposes. You may request deletion of your data at any time (subject to legal requirements).

7. Your Privacy Rights

7.1 Access & Portability

You have the right to access the personal information we hold about you and request a copy in a portable format.

7.2 Correction

You may request corrections to inaccurate or incomplete information.

7.3 Deletion

You may request deletion of your personal information, subject to legal retention requirements.

7.4 Opt-Out

You may opt out of promotional emails by clicking "unsubscribe" in any email or contacting us directly.

8. Cookies & Tracking Technologies

8.1 Cookie Usage

Our website uses cookies to enhance your experience, including:

Essential Cookies: Required for website functionality
Performance Cookies: Analyze site usage and performance
Marketing Cookies: Track your interests for personalized content

8.2 Cookie Control

You can manage cookie preferences in your browser settings. Disabling cookies may affect website functionality.

9. Third-Party Links

Our website contains links to external sites. We are not responsible for the privacy practices of these third-party websites. We encourage you to review their privacy policies.

10. Children's Privacy

Chommakh’bar does not knowingly collect information from individuals under 18 without parental consent. If we learn that we have collected information from a child, we will promptly delete it. If you believe we have collected information from a minor, please contact us immediately.

11. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, which may have different privacy laws. By booking with us, you consent to such transfers. We ensure appropriate safeguards are in place.

12. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights:

Right to know what information is collected and how it's used
Right to delete your personal information
Right to opt out of information sales
Right to non-discrimination for exercising your privacy rights

Contact us to exercise these rights.

13. European GDPR Compliance

If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR), including:

Right to access your data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing

Contact us for GDPR-related requests.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services constitutes acceptance of any changes.