This Privacy Policy explains how PURE ONE GROUP Ltd ("PURE ONE Business", "we", "us", "our") collects, uses and protects your personal data when you visit pureonebusiness.com or engage with our retreats, events and services. We comply with the UK GDPR, the Data Protection Act 2018, the EU GDPR (Regulation (EU) 2016/679), the UK Privacy and Electronic Communications Regulations (PECR) and the EU ePrivacy Directive.
1. Data controller
PURE ONE GROUP Ltd, company number 11479694, registered at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom, is the data controller for personal data collected via this website and our services. Contact: retreats@pureonegroup.com.
2. Personal data we collect
- Contact details you provide via forms, email or phone: name, company, job title, email, phone number, and message content.
- Event and retreat details you share when planning, booking or attending: dietary or accessibility requirements, travel preferences and, where relevant, passport and travel information.
- Marketing preferences including newsletter sign-up (via Brevo) and your consent history.
- Technical data such as IP address (truncated for analytics), device type, browser, referring URL and pages viewed - only when you consent to analytics cookies.
3. How we use your data and lawful bases
- To respond to enquiries and provide services - lawful basis: performance of a contract or steps taken at your request to enter into a contract.
- To send you the newsletter - lawful basis: your consent, which you may withdraw at any time.
- To operate and secure the website and prevent fraud - lawful basis: our legitimate interests in running a safe, functional website.
- To measure website performance using Google Analytics - lawful basis: your consent, requested via our cookie banner.
- To meet legal, accounting and regulatory obligations - lawful basis: legal obligation.
4. Cookies and similar technologies
We only set non-essential cookies (including Google Analytics) after you give consent via our cookie banner, as required by UK PECR and the EU ePrivacy Directive. Full details are in our Cookie Policy.
5. Who we share your data with
We share personal data only with trusted processors acting on our instructions:
- Hosting and infrastructure providers that operate this website.
- Google Analytics (Google Ireland Ltd / Google LLC) - only if you accept analytics cookies.
- Brevo (Sendinblue SAS, France) for newsletter delivery, if you sign up.
- WeTravel for retreat booking and payment processing where you choose to book online.
- Accommodation, ground handlers and event suppliers as strictly necessary to deliver a retreat or event you have booked.
- Professional advisers, auditors, and regulators or law enforcement where required by law.
6. International transfers
Some of our processors are based outside the UK or EEA (for example Google LLC in the United States). Where this occurs we rely on appropriate safeguards such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, adequacy decisions or the EU-US and UK-US Data Privacy Framework.
7. Data retention
We keep personal data only for as long as necessary for the purposes set out in this policy, then delete or anonymise it. Typical retention periods are: enquiry correspondence up to 24 months after last contact; booking and financial records for 7 years to meet UK tax law; newsletter data until you unsubscribe.
8. Your rights
Under the UK GDPR and EU GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Request erasure of your data in certain circumstances.
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority.
To exercise any of these rights, email retreats@pureonegroup.com.
9. Security
We use appropriate technical and organisational measures - including encryption in transit (HTTPS), access controls and vetted processors - to protect personal data against unauthorised access, loss or misuse.
10. Children
This website and our services are not directed at children under 16 and we do not knowingly collect their personal data.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent revision.
12. Contact
PURE ONE GROUP Ltd, 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom. retreats@pureonegroup.com.