Privacy Policy
1. Introduction
This Privacy Policy explains how we collect, use, and protect your personal data when you visit https://www.fionamelrose.com (the “website”) or contact us. We are committed to handling your information lawfully, transparently, and in accordance with the General Data Protection Regulation (GDPR).
2. Personal Data We Collect
We may collect the following categories of personal data:
Information you provide directly
Such as your name, email address, phone number, or any details submitted through contact forms or booking enquiries.
Information collected automatically
Such as IP address, browser type, device information, and pages visited. This may be collected through cookies, web beacons, and similar technologies.
Communication data
Such as emails or messages you send to us.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
To respond to enquiries or provide information you request
To manage bookings or retreat‑related communication
To improve the website and user experience
To maintain security and prevent misuse
To comply with legal obligations
We do not sell or rent your personal data.
4. Legal Bases for Processing
We process your personal data on one or more of the following legal bases:
Your consent (e.g., non‑essential cookies, marketing communications)
Performance of a contract (e.g., handling retreat bookings or enquiries)
Legitimate interests (e.g., improving the website, ensuring security)
Compliance with legal obligations
5. Sharing Your Personal Data
We may share your data with trusted third‑party service providers who assist us in operating the website or delivering services (e.g., hosting providers, analytics tools). These parties process data only on our instructions and in accordance with GDPR.
We do not share your data for unrelated marketing purposes.
6. International Transfers
If personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. When data is no longer needed, it is securely deleted.
8. Your Rights Under GDPR
If you are located in the European Union, you have the following rights:
Right of Access
Right to Rectification
Right to Erasure
Right to Restrict Processing
Right to Object
Right to Data Portability
Right to Withdraw Consent
Right to Lodge a Complaint
To exercise these rights, please contact us.
9. Security
We take appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, or disclosure.
10. Contact Details
For questions about this Privacy Policy or your personal data, please contact us at: