Love My Greece
Privacy Policy
We collect what we need to run our retreats and look after our guests, and we never sell your personal information.
This Privacy Policy explains how Love My Greece and Love My New Zealand Art Retreats (together, “Love My Greece”, “we”, “us”), run by Sue MacDougall and based in New Zealand, collect, use and share personal information when you visit our website (lovemygreece.com), subscribe to our emails, book a discovery call with Sue, reserve and pay for a place on a retreat, or otherwise get in touch with us. We are responsible for the personal information described here.
We keep this simple: we collect what we need to run our retreats and look after our guests, we do not sell your personal information, and you can ask us about your data at any time by contacting Sue on +64 21 0239 4549 or at [email protected].
01 Information we collect
Depending on how you interact with us, we may collect:
- Details you give us. Your name, email address, phone number and any message or answers you submit through our Stay Connected subscribe form or Get In Touch enquiry form, when you book a discovery call with Sue, or when you otherwise contact us.
- Booking and payment information. When you reserve your place, we receive your name, email, phone number, billing details, the retreat you choose (Aegina 5-day or 8-day, or New Zealand), your room choice, your payment option (pay in full, or 2 or 4 monthly payments) and your payment status. If you are coming with a friend, we also receive their name so we can arrange your rooms. Your card details are entered with our payment provider; we do not see or store your full card number.
- Health and wellbeing information. So we can adapt yoga, activities and meals for you, you may tell us about dietary needs, allergies, injuries, medical conditions, medication or pregnancy. This is sensitive information. We only collect it with your consent, and you choose what to share, although the less we know, the less we can adapt the retreat for you.
- Travel and arrival details. Your flight and arrival times and anything you tell us about getting to Piraeus Port, Aegina or Tauranga, so Sue can meet you and arrange transfers, plus details of any extra nights before or after the retreat you ask us to help with.
- Photos, video and testimonials. Photographs and video taken during the retreat, as described in the photo and video release in our Terms and Conditions, and any testimonial or review you agree to give us.
- Technical and usage information. Standard information your browser sends when you visit, such as your IP address, device and browser type, the pages you view and the page that referred you, including any campaign details in the link you clicked (for example UTM tags).
- Email activity. If you receive our emails, our email platform may record whether messages are delivered, opened or clicked, so we can see what is useful and stop sending what is not.
02 How we use your information
We use personal information to:
- respond to your enquiries and book and run discovery calls with Sue;
- reserve your place, take payment, run your payment plan, send confirmations and receipts, and keep the financial records we are required to keep;
- run the retreat, including arranging your room at The Beachhouse Apartments or Hotel on Devonport, your meals, your transfers and meeting you on arrival, and sending you practical information before you travel;
- adapt workshops, yoga, meals and activities to your health and dietary needs;
- help with any extra nights or travel you ask Sue to assist with;
- send you emails you have asked for and, where the law allows, information about future retreats;
- understand how our website is used and improve it;
- keep our website and systems secure; and
- comply with legal obligations and protect our legal rights.
We handle your information in line with the New Zealand Privacy Act 2020. Where the law of your country requires a legal basis for using your information (for example under the UK or EU GDPR), we rely on: performing our contract with you or taking steps you request before a contract; our legitimate interests in running, securing and improving our business and telling people about our retreats; your consent (for example when you opt in to marketing emails, which you can withdraw at any time); your explicit consent for any health information you share; and compliance with legal obligations. We do not make decisions about you based solely on automated processing that has legal or similarly significant effects.
03 Who we share your information with
We do not sell your personal information. We share it only with the people and service providers needed to deliver what you have asked for:
- HighLevel (LeadConnector), which provides the forms, booking calendar, payment links and customer records we use to manage enquiries, bookings and email communications. Most information you submit through our website forms and booking pages is stored there.
- Our payment provider, which processes your payments through the secure payment links on our website, under its own privacy policy.
- Our accommodation providers: The Beachhouse Apartments in Vagia, Aegina, for our Greece retreats, and Hotel on Devonport in Tauranga for our New Zealand retreat. They receive the details needed to arrange your stay, such as your name, room type and arrival information.
- Our teachers, restaurants and activity partners, including our yoga instructor. We share only what is needed, for example your dietary requirements and allergies with restaurants, or relevant health information with the instructor leading an activity you take part in.
- Transport providers, such as ferry, transfer or minivan operators, who may receive your name and travel details where needed to get the group where it needs to go.
- Other guests, only through any welcome call or group chat you choose to join, where your name and the contact details you use there will be visible to the group.
- Google Fonts. Your browser connects to Google to load our fonts, and Google receives your IP address and browser details, which it handles under its own policy.
- Professional advisers and authorities, such as accountants and lawyers, and public authorities where we are legally required to disclose information.
- A buyer or successor, if our business is ever sold or reorganised, subject to this policy.
With your permission, we may publish your name, photo, story or review as a testimonial. We will not do that without asking first, and you can ask us to remove it later.
04 Cookies and similar technologies
- Essential. Our forms, booking calendar and cookie preferences may store small items in your browser so they work properly, for example remembering your choices during your visit.
- Analytics. We may use analytics to count visits and see which pages are used.
- Embedded and third-party services. Embedded forms, calendar widgets, payment pages and fonts loaded from other providers may set their own cookies or collect technical information under their own policies.
- Advertising. If we run paid advertising, the ad platforms (such as Meta or Google) may place their own cookies or pixels on pages where we install their tags, to measure results and show relevant ads. You can control these through your browser settings and the ad platform’s own settings.
You can block or delete cookies in your browser settings. If you block essential cookies, some features, such as our forms and booking calendar, may not work.
05 Marketing emails
If you subscribe to our emails or book a place on a retreat, we may send you emails about future Love My Greece and Love My New Zealand retreats and offers. You can unsubscribe at any time using the link at the bottom of every email, or by contacting Sue. Unsubscribing from marketing does not stop service emails related to something you have booked, such as confirmations, payment reminders, receipts and practical information about your retreat.
06 International transfers
We are based in New Zealand, our Greece retreats take place in the European Union, and some of our service providers operate internationally, including in the United States. Your information may therefore be processed in countries other than your own. Where required, we rely on appropriate safeguards for these transfers, such as New Zealand’s adequacy status with the EU and UK, standard contractual clauses, or the provider’s certification under a recognised data-transfer framework, and we take reasonable steps to ensure overseas providers protect your information in a way comparable to the New Zealand Privacy Act 2020.
07 How long we keep your information
We keep personal information only as long as we need it for the purposes above. In practice: enquiry and email-list records are kept until you unsubscribe or ask us to delete them, or until they become inactive; booking and payment records are kept as long as our legal, tax and accounting obligations require (in New Zealand, generally seven years); health information is kept only as long as needed to deliver the retreat and is then deleted or anonymised, or sooner if you ask us to; and testimonials and photographs are kept until you ask us to remove them. When information is no longer needed, we delete or anonymise it.
08 Keeping your information secure
We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS) and access controls on our systems. We take particular care with any health information you share with us. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a privacy breach is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner as required by law.
09 Your rights and choices
Under the New Zealand Privacy Act 2020 you can ask to access the personal information we hold about you and ask us to correct it. Depending on where you live, you may also have the right to ask us to delete your information, restrict or object to how we use it, and provide it in a portable format. Where we rely on your consent, including for health information, you can withdraw it at any time. To make a request, contact Sue on +64 21 0239 4549 or at [email protected]. We may need to confirm your identity first, and we will respond within the time required by law (in New Zealand, within 20 working days).
If you live somewhere with similar privacy laws (for example the UK, the EU or California), we will honour your requests as those laws require. You also have the right to complain to a data protection authority. In New Zealand this is the Office of the Privacy Commissioner (privacy.org.nz); in the UK it is the Information Commissioner’s Office (ico.org.uk); in Greece it is the Hellenic Data Protection Authority (dpa.gr). We would appreciate the chance to put things right first.
10 Children
Our website and retreats are intended for adults. They are not directed at anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us information, please contact us and we will delete it.
11 Links to other websites
Our website links to other sites and services, including our booking calendar and secure payment pages. We do not control these sites and are not responsible for their privacy practices, so please read their policies.
12 Changes to this policy
We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page. If a change is significant, we will take reasonable steps to let you know.
13 Contact us
Questions about this policy or your personal information? Contact Sue MacDougall, Love My Greece, on +64 21 0239 4549 or at [email protected], or use the enquiry form on our Contact page.
Questions about your data?
Contact Sue and she will be happy to help.