Hestia Darkness Hotel (we, us, our, or Hestia) is committed to protecting your privacy and ensuring you have a positive experience on our website and during your retreat booking and participation. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services or book a retreat.
When you book a darkness retreat with us, we collect:
During your mandatory preparation consultation, we collect sensitive health information including:
Legal Basis: This health information is collected under the legal basis of contract performance (necessary to deliver safe retreat services) and legitimate interest (ensuring participant safety and wellbeing). Processing is necessary to assess your suitability for darkness retreat and manage your safety during the experience.
We collect emergency contact details including name, relationship, phone number, and email address of a close family member or trusted friend. This information is used solely for genuine emergency communication during your retreat.
Notes from your preparation consultation with Greg Manning or other qualified Hestia member of staff may be recorded and retained to support your retreat experience and ensure continuity of care. These notes document your intentions, any health concerns discussed, preparation recommendations, and any special accommodations agreed.
When you visit our website, we automatically collect:
We use your information to:
With your explicit consent, we may use your information to:
We will only send marketing communications if you have explicitly opted in. You may unsubscribe from marketing emails at any time by clicking the unsubscribe link or contacting us directly.
We may anonymize and aggregate your data (removing all personally identifiable information) to improve our services, understand retreat outcomes, and enhance the guest experience. This anonymized data cannot be used to identify you.
Under UK GDPR, we process your information on the following legal bases:
Processing is necessary to perform the retreat services contract. This includes collecting and using booking details, health information, emergency contacts, and payment information to deliver your Darkness retreat experience.
We process certain information based on our legitimate interest in:
For optional uses such as marketing communications, testimonials, and research participation, we obtain your explicit written consent. You may withdraw consent at any time.
We process certain information to comply with legal requirements, including tax and accounting obligations, and emergency response requirements.
In case of medical emergency, we may process your health information as necessary to protect your vital interests or the vital interests of others.
We take the security of your personal information seriously. Your data is protected through:
Your health and medical information is treated with the highest level of confidentiality. This sensitive data is:
In the unlikely event of a data breach affecting your personal information, we will notify you without undue delay in accordance with GDPR requirements (within 72 hours of discovering the breach, unless not likely to result in risk to your rights and freedoms).
While we implement robust security measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining the highest reasonable standards.
We do not sell, trade, or rent your personal information. Your data is shared only in the following circumstances:
We may share information with third-party service providers who assist us in operating our website and delivering retreat services, including:
All service providers are contractually bound to maintain your data confidentiality and use your information only as necessary to provide services to Hestia.
We may disclose your information if required by law or in response to valid legal process (court orders, subpoenas). In genuine medical emergencies, we may share health information with emergency services personnel as necessary to protect your health or safety.
Your emergency contact information will be shared only with the emergency contact you designate, and only in case of genuine emergency during your retreat.
Your personal information is stored and processed within the UK and EU. We do not transfer data to countries outside the UK/EU except where strictly necessary and with appropriate safeguards in place.
If Hestia is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of such changes and any resulting changes to this Privacy Policy.
Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that allow us to recognize you on return visits.
You can control cookie settings through your browser. Most browsers allow you to refuse cookies or alert you when a cookie is being sent. Please note that disabling essential cookies may impair website functionality. You may withdraw consent to non-essential cookies at any time through our cookie consent tool.
We use Google Analytics to understand website usage patterns. Google may collect data about your website visits for its own purposes. Google's privacy policy governs their use of this data.
You have the right to request a copy of all personal information we hold about you. Submit a Subject Access Request (SAR) by emailing hello@hestiaretreat.co.uk with "Data Subject Access Request" in the subject line. We will respond within 30 days.
You have the right to request correction of inaccurate or incomplete personal information. Contact us to request corrections.
You may request deletion of your personal information in certain circumstances, such as when data is no longer necessary or when you withdraw consent. However, we may retain certain data where required by law (tax, legal obligations) or where we have a legitimate interest in retention.
You may request that we restrict how we use your data in certain circumstances (e.g., while you contest accuracy of data).
You have the right to request your personal information in a portable, machine-readable format and to transmit it to another organization.
You may object to processing of your data based on legitimate interest or marketing purposes. We will cease such processing unless we have compelling legal grounds to continue.
Where we process data based on your consent (marketing, testimonials, research), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
If you believe we have violated your data protection rights, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk.
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected:
When data is no longer needed, it is securely deleted or anonymized to prevent recovery. Physical records are destroyed through secure document shredding.
Hestia Darkness Hotel services are not directed at individuals under 18 years of age. We do not knowingly collect information from minors. If we become aware that we have collected personal information from a minor without proper parental consent, we will take steps to delete such information and terminate the minor's access to our services. For UK GDPR purposes, Darkness retreat is not suitable for anyone under 18.
Our website may contain links to third-party websites. This Privacy Policy applies only to Hestia's website and services. We are not responsible for the privacy practices of external websites. We encourage you to review the privacy policies of any third-party sites before providing personal information.
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. The "Last Updated" date will be changed accordingly. Your continued use of our services constitutes your acceptance of the updated Privacy Policy. Significant changes will be communicated to you via email if they substantially affect your rights or how we process your information.
If you have questions about this Privacy Policy, wish to exercise your GDPR rights, or have privacy concerns, please contact us:
Email: hello@hestiaretreat.co.uk
Location: Hestia Darkness Hotel, Robins Folly, Semley, Shaftesbury, Dorset, SP7 9AQ
Data Protection Officer availability: We do not have a formally appointed Data Protection Officer, but all data protection inquiries will be handled by Greg Manning with the utmost care and attention to your privacy rights.
Last Updated: January 2026
≡