Privacy notice.

Who is responsible

The operator responsible for your personal information is Dhuha Retreats. For privacy questions or to exercise your rights, email admin@dhuha-retreats.co.uk.

Information you choose to share

We use your name, email address, optional phone number, proposed dates, group size and message to answer your enquiry and arrange your stay. Please do not include bank-card details, identity documents, health information or other sensitive information in this form.

Providing enquiry information is voluntary. We need your name and email address to reply, and relevant stay details to discuss availability. Booking decisions are made by the host, not solely by an automated system.

The enquiry form does not ask for your religion. Please discuss any needs that involve sensitive information directly with the host using an agreed, appropriate channel.

Why we use it

When you ask about booking, we use the information to take steps at your request before entering into a contract, and to administer a booking if you proceed. For general questions and protection against spam or misuse, we rely on our legitimate interests in responding and operating a reliable service. We use information to meet legal obligations where these apply.

Submitting an enquiry does not subscribe you to marketing. We do not sell enquiry information.

Delivery, storage and service providers

Enquiries are delivered to Dhuha’s designated inbox using its website hosting and email services. Authorised people managing enquiries and these service providers may process the information for that purpose. Our website hosting and business email providers process enquiries to deliver, store and protect correspondence. Enquiries are sent to two inboxes controlled by Dhuha Retreats, including a Microsoft Outlook/Hotmail inbox. The website uses its configured business SMTP service to send them. Only people authorised to handle Dhuha enquiries may access that correspondence. Contact us if you need further information about these service providers..

The enquiry service stores a short-lived random submission identifier and a hashed network address to prevent duplicates and abuse. It does not store the message body in a separate website enquiry database. Hosting and email providers may maintain security and delivery logs.

International processing

Our Microsoft Outlook/Hotmail service may process email in the United States and other countries where Microsoft operates. Microsoft describes its international safeguards, including the UK Extension to the EU–US Data Privacy Framework and contractual safeguards, in its privacy statement. You can contact us for further details or information about applicable safeguards.

How long information is kept

We keep enquiry correspondence while answering your request and resolving related follow-up. If you book, relevant correspondence becomes part of the booking record and is retained while needed to administer the stay, meet applicable accounting or legal obligations, or resolve a complaint or dispute. Once those purposes end, we delete information we no longer need. Website email delivery logs are configured for deletion after 14 days. Copies in restricted backups remain until those backups are replaced or deleted and are not used for routine enquiries.

The enquiry service’s duplicate and rate-limit records expire within 24 hours. We keep records longer only where required by law or reasonably needed to establish, exercise or defend legal claims.

Your rights

Depending on the circumstances, you can ask to access, correct or erase your personal information, restrict its use, object to processing based on legitimate interests, or receive transferable data. Where processing relies on consent, you may withdraw that consent. Contact us using the email above.

Your right to object: you can object to processing based on our legitimate interests by contacting the email above.

You can complain to the UK Information Commissioner’s Office at ico.org.uk. You do not have to contact us first.

Cookies and other websites

The Dhuha page code does not add advertising or analytics cookies, load third-party maps, or download fonts from another website. The map is an ordinary link: Google receives your visit when you choose to open it, under its own privacy terms.

WordPress uses necessary cookies when authorised administrators sign in. CookieAdmin records cookie preferences and provides a control to review those choices. The enquiry form uses a temporary token held in the page, rather than an advertising cookie. Optional cookies, if introduced, must remain off until you choose to allow them. You can also remove cookies through your browser settings. Any optional tracking introduced later must be explained and managed as required.

External visitor-information and photography-credit websites have their own privacy practices.

Updates

This notice was prepared on 13 October 2026. We will update it if our services or information handling change.