P
Legal · Transparency

Privacy Policy

How we collect, use, and protect your personal information — written plainly, because you deserve to understand it.

Version 1.0 Effective May 2026
Governing Law UK GDPR & Data Protection Act 2018
Controller KinnSoul · kinnsoul.asia
01

Who We Are

KinnSoul ("we", "us", "our") is a wellness retreat company offering immersive retreat programmes including KinnSoul CNX (Chiang Mai, Thailand) and KinnSoul Mini (UK/Europe). We are based in North Devon, UK and Chiang Mai, Thailand, and operate under the domain kinnsoul.asia.

For the purposes of UK data protection law, KinnSoul is the data controller — meaning we determine how and why your personal data is processed. We are committed to handling your information with care, honesty, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this Policy or how we handle your data, please contact us at info@kinnsoul.asia.

02

Data We Collect

We only collect information that is necessary for us to deliver our retreats and communicate with you effectively. This includes:

Identity Data
Your full name, preferred name, nationality, and date of birth (where relevant to visa or participation requirements).
Contact Data
Email address, phone number, and postal address.
Booking Data
Retreat selection, room preferences, deposit and payment records, booking confirmation details.
Health Data
Medical conditions, physical limitations, allergies, dietary requirements, and any other health information you disclose to ensure your safe participation. This is special category data under UK GDPR and is handled with additional care.
Communication Data
Emails, messages, and enquiries you send to us, including any personal information contained within them.
Marketing Preferences
Whether you have opted into our waitlist, newsletter, or other communications, and your stated interests.
Technical Data
IP address, browser type, and basic analytics data collected when you visit kinnsoul.asia (see Section 9: Cookies).
Photography / Video
Images or footage taken during retreats for promotional use, subject to your consent (see Section 3).

We do not collect payment card details directly. All deposit and balance payments are processed securely through our third-party payment provider, who is subject to their own data protection obligations.

03

How We Use It

We use your personal data only for the purposes described below. We will never use it for anything that would surprise you or that you haven't consented to where consent is required.

  • To manage and fulfil your booking — processing your deposit, confirming your place, sending pre-retreat information, and delivering the retreat programme itself.
  • To ensure your safety and wellbeing — sharing relevant health and dietary information with retreat teachers and venue staff so that the programme can be appropriately tailored.
  • To communicate with you — responding to enquiries, sending booking confirmations, pre-arrival guides, and post-retreat follow-up.
  • To send you marketing communications — seasonal updates, retreat announcements, recipes, and wellness content, but only if you have opted in. You may unsubscribe at any time.
  • To improve our retreats — using feedback and general patterns to refine our programmes and communications.
  • To use photographs and video — promoting KinnSoul across our website and social channels. If you do not wish to appear in any materials, please inform us at the time of booking or at any point before or during the retreat.
  • To comply with legal obligations — retaining records as required by UK law, including for tax and accounting purposes.
04

Lawful Basis

Under UK GDPR, we are required to have a lawful basis for processing your personal data. The bases we rely on are:

Contract
Processing your identity, contact, and booking data is necessary to fulfil the contract we have with you when you book a retreat.
Legitimate Interests
We have a legitimate interest in communicating with prospective guests, improving our services, and using retreat photographs for promotional purposes — balanced against your rights and expectations.
Consent
We rely on your explicit consent for marketing communications. You may withdraw consent at any time by emailing us or clicking "unsubscribe" in any email.
Legal Obligation
Some processing is required to comply with our legal obligations, such as maintaining financial records.
Vital Interests / Explicit Consent
Health and dietary data (special category data) is processed on the basis of your explicit consent, given when completing our booking form, and in some cases to protect your vital interests.
05

Who We Share With

We do not sell your data. We do not share your data with any party for their own marketing purposes. We share your data only where necessary to deliver our services:

  • Retreat venues and accommodation providers — to arrange your stay, meals, and room allocation.
  • Retreat teachers and practitioners — to share relevant health or dietary information so sessions can be safely tailored.
  • Transport providers — for airport transfers on arrival and departure days, where applicable.
  • Payment processors — to securely handle deposit and balance payments. These providers operate under their own privacy policies and are subject to UK/international data protection standards.
  • Email and communications platforms — we may use third-party tools to manage our newsletter and communications. These are contractually bound to protect your data.
  • Legal and regulatory authorities — where required by law.

All third parties we share data with are required to keep it confidential and to use it only for the specific purpose for which it was shared.

06

International Transfers

KinnSoul operates retreats in Thailand. Delivering the KinnSoul CNX programme requires us to share certain booking and health data with local venue and practitioner partners based in Chiang Mai.

Thailand is not currently recognised by the UK as providing an equivalent level of data protection to the UK. Where we transfer data internationally, we put in place appropriate safeguards, including contractual obligations on the receiving party to protect your data to a standard equivalent to UK GDPR.

By booking a KinnSoul CNX retreat, you acknowledge that limited personal data will be shared with Thai-based partners solely for the purpose of delivering your retreat. You may contact us at any time to request details of the safeguards in place.

07

How Long We Keep It

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law.

Booking Records
Retained for 7 years from the date of your retreat, as required for tax and accounting compliance under UK law.
Health Data
Retained for the duration of your retreat and deleted within 12 months of your retreat end date, unless you have an ongoing relationship with us.
Marketing Data
Retained until you withdraw consent or unsubscribe. We may carry out periodic list reviews to remove inactive contacts.
Enquiry Data
Retained for 2 years from your last contact if you did not proceed to book, and then securely deleted.
Photography / Video
Retained indefinitely for promotional use unless you withdraw consent, at which point we will remove identifiable images from active use where reasonably practicable.
08

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at info@kinnsoul.asia. We will respond within one calendar month.

Access
Request a copy of the personal data we hold about you (a Subject Access Request).
Rectification
Ask us to correct inaccurate or incomplete data we hold about you.
Erasure
Request deletion of your data where there is no compelling reason for us to continue processing it. Note this right may be limited by legal retention obligations.
Restriction
Ask us to restrict processing of your data in certain circumstances — for example while a complaint is being resolved.
Portability
Request your data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
Objection
Object to processing based on legitimate interests, including direct marketing. We will stop unless we have compelling legitimate grounds.
Withdraw Consent
Where processing is based on your consent (e.g. marketing), you may withdraw at any time. This does not affect the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data has been mishandled. Visit ico.org.uk or call 0303 123 1113. We would always appreciate the opportunity to address your concern directly first.

09

Cookies

Our website at kinnsoul.asia uses cookies — small text files placed on your device — to ensure the site functions correctly and to understand how visitors use it.

  • Essential cookies — necessary for the website to function. These cannot be disabled.
  • Analytics cookies — help us understand how visitors navigate our site (e.g. which pages are most visited). We use anonymised, aggregated data only. No individual is identified.
  • Preference cookies — remember choices you have made (e.g. language or form state) to improve your experience.

We do not use advertising or tracking cookies. You can control or delete cookies through your browser settings at any time. Disabling cookies may affect some functionality of the site.

10

Children

KinnSoul retreats are designed for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18.

If you believe a minor has provided us with personal data without appropriate parental consent, please contact us immediately at info@kinnsoul.asia and we will delete it promptly.

11

Changes to This Policy

We may update this Privacy Policy from time to time — for example, if our data practices change or if there are updates to UK data protection law. The current version will always be available at kinnsoul.asia.

If we make material changes that significantly affect how we use your data, we will notify active guests and mailing list subscribers by email before the changes take effect.

Current Version
1.0 — Effective May 2026
12

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your rights, or have a concern about how your data has been handled, please get in touch. We are a small, human team and we will always reply personally.

Website
Based in
North Devon, UK & Chiang Mai, Thailand
ICO (UK Regulator)
ico.org.uk · 0303 123 1113