Privacy Policy

Effective Date: August 30, 2026

​

RetreatIstria respects your privacy and is committed to handling personal information with care, transparency, and responsibility. This Privacy Policy explains how we collect, use, store, and share personal information when you visit our website, submit a booking inquiry or application, join our mailing list, communicate with us, or participate in a RetreatIstria retreat experience.

 

01 | About Us

RetreatIstria curates all-inclusive luxury wellness escapes and retreats in private villas across Istria.

RetreatIstria is formally registered as a Dah Istra d.o.o. , VAT ID: 76162237530, Address: Ciscuttijeva 15, Pula, Croatia.

​

02 | Information We Collect

Information you provide directly. This may include:

• Full name

• Email address

• Phone number / WhatsApp contact

• Country, city, or general location

• Social media profile or website (optional)

• Preferred retreat dates, room selection, and guest arrangements

• Dietary restrictions, allergies, and lifestyle preferences relevant to your stay

• Emergency contact information

• Responses submitted through booking or contact forms

• Payment and transaction verification details

• Feedback, reviews, testimonials, or media shared with consent

 

Please do not share sensitive medical records, government ID numbers, or financial credentials unless specifically requested for secure booking verification or emergency readiness.

 

Information collected automatically

When you visit our website, standard analytical and technical data may be collected:

• IP address

• Browser and device configuration

• Operating system

• General geographic location

• Pages viewed, links clicked, and duration of visit

• Cookie identifiers and online tracking metrics

​

03 | How We Collect Information

We collect personal information through:

• The RetreatIstria website forms

• Direct email, WhatsApp, or telephone communication

• Registration, inquiry, or intake forms (e.g., Google Forms)

• Direct booking and payment processing platforms

• Social media inquiries (Instagram, Facebook)

• Meta Pixel and standard web analytics tools

• Guest intake forms completed upon arrival

​

04 | How We Use Personal Information

We process your personal information to:

• Review, manage, and respond to retreat inquiries and applications

• Coordinate room assignments, villa transfers, and guest arrival details

• Share itinerary schedules, packing suggestions, villa rules, and regional guidance

• Tailor private chef menus to accommodate specific dietary requirements or allergies safely

• Process booking deposits and final retreat payments

• Send essential operational updates, payment reminders, and pre-arrival details

• Send optional marketing communications or newsletters (where opt-in consent is provided)

• Protect guest safety, villa security, and operational integrity

• Comply with Croatian and EU accounting, tax, legal, and tourism reporting obligations

​

We do not use automated decision-making or profiling to evaluate booking requests.

​

05 | Our Legal Bases for Processing

Where EU Data Protection Law (GDPR) applies, we rely on the following legal bases:

• Consent: For sending optional marketing communications, placing non-essential analytics/advertising cookies, or processing voluntarily submitted health/dietary details. Consent can be withdrawn at any time.

• Contractual Necessity: To take necessary steps prior to booking, confirm reservations, process payments, and deliver retreat services as agreed.

• Legitimate Interests: To operate, secure, and improve RetreatIstria, manage guest inquiries efficiently, and protect our legal and commercial interests.

• Legal Obligation: To meet statutory record-keeping, tax, legal, and guest reporting regulations required by local authorities.

​

06 | Cookies and Analytics

• Essential Cookies: Required for basic site navigation, security, and preference retention.

• Analytics & Performance Cookies: Help us evaluate traffic patterns, popular retreat pages, and site performance.

• Marketing Technologies: Tools such as Meta Pixel may be used to measure advertising effectiveness and build relevant audiences.

​

You may adjust or revoke your cookie preferences at any time via your browser settings or our site's cookie interface.

​

07 | Booking Forms & Third-Party Platforms

We utilize third-party productivity tools (such as Google Workspace, Google Forms, and secure messaging platforms) to process applications and host schedules. These providers store and process data in compliance with standard security frameworks.

​

08 | Email & Marketing Communications

• Operational Communications: Important messages regarding your booking, payment schedules, transfers, or itinerary updates are essential to your stay and will always be delivered.

• Marketing Emails: Promotional updates or edition announcements are sent only with your explicit consent. You can opt out anytime using the "unsubscribe" link or by emailing istriaretreat@gmail.com.

​

09 | How We Share Information

We strictly limit access to personal data. Information is only shared when necessary with:

• Core RetreatIstria operational team members

• Co-hosts, facilitators, and our private chef (specifically for dietary and hospitality coordination)

• Villa property managers and local transfer/tour partners

• Payment processors, banking institutions, and accounting advisers

• Web hosting, system administrative, and tech service providers

• Relevant legal or tax authorities where required by Croatian law

​

We never sell or trade your personal information.

​

10 | International Data Transfers

While our retreats take place in Croatia, we utilize global technology platforms (e.g., Google, Meta, cloud infrastructure). Where data is transferred outside the European Economic Area (EEA), standard contractual clauses or equivalent legal safeguards are employed.

​

11 | Data Retention

• Booking & Guest Records: Retained for the duration of the retreat, and up to 11 years post-retreat to comply with statutory accounting, tax, and legal obligations.

• General Inquiries & Unconfirmed Applications: Retained for up to 24 months.

• Marketing Contact Lists: Retained until you unsubscribe or request data deletion.

​

12 | Data Security

We maintain appropriate technical, physical, and administrative measures—including encrypted storage, password control, and restricted access—to protect your personal information against unauthorized disclosure, loss, or misuse.

​

13 | Your Data Rights (GDPR / EEA Residents)

Under European data protection laws, you have the right to:

• Access the personal data we hold about you

• Request corrections to inaccurate information

• Request erasure ("right to be forgotten") under applicable conditions

• Request restrictions on processing

• Withdraw consent previously provided

• Receive a portable copy of your data

• File a complaint with your local Data Protection Authority

​

To exercise your privacy rights, please contact us at istriaretreat@gmail.com.

​

14 | Media & Photography Consent

During retreat editions, photos or videos may be captured for brand storytelling. Explicit photo/video consent will be requested prior to or upon arrival. Guests may opt out of appearing in marketing materials at any time.

​

15 | Children’s Privacy

RetreatIstria experiences are designed exclusively for adults (18+). We do not knowingly collect personal data from minors.

​

16 | Changes to This Policy

We may update this policy periodically to reflect operational, legal, or technology changes. The updated version will be published on our site with a revised effective date.

​

17 | Contact Us

• Data Controller: Tomislav Milosevic

• Brand Name: RetreatIstria

• Email: istriaretreat@gmail.com

• Phone / WhatsApp: +385 98 133 4780

• Location: Istria, Croatia