Privacy Policy
Last updated: 23 August 2026
BABA Retreats respects your privacy and handles personal data carefully and transparently. This Privacy Policy explains what information we collect through babaretreats.com, why we collect it, and what rights you have.
1. Who we are
The data controller for this website is José Gomes, trading as BABA Retreats, based in Gozo, Malta.
For privacy-related questions or requests, please contact us through our contact page.
2. Information we collect
We may collect the following personal data when you use our contact form:
- Your name
- Your email address
- The service or subject you are interested in
- Information you include in your message
Our website and hosting provider may also process limited technical information, such as your IP address, browser type, device information and access logs, for security, website operation and spam prevention.
3. How we use your information
We use personal data to:
- Respond to enquiries and requests
- Discuss retreats, retreat hosting, coaching, classes or creative services
- Arrange and provide requested services
- Maintain the security and proper functioning of the website
- Meet applicable administrative, accounting or legal obligations
4. Legal basis
We process enquiries because it is necessary to respond to your request and, where relevant, to take steps before entering into an agreement with you. We may also process limited technical data based on our legitimate interest in keeping the website secure and operational.
Where consent is legally required, for example for optional marketing or non-essential cookies, we will request it separately.
5. Contact forms and email
Messages submitted through the website are sent to BABA Retreats by email. Email delivery is currently handled using Google’s Gmail services. Google may therefore process limited personal data required to transmit and store these communications.
Please do not submit sensitive personal, medical or financial information through the contact form unless it is genuinely necessary.
6. Sharing your information
We do not sell or rent personal data. Information may be processed by trusted service providers that help us operate the website and communicate with you, including our website hosting provider, WordPress-related services and email provider.
We may also disclose information where required by law or where necessary to protect our legal rights.
7. International data transfers
Some technology providers may process information outside Malta or the European Economic Area. Where this occurs, we rely on appropriate safeguards required under applicable data-protection law.
8. How long we retain information
General enquiries may be retained for up to 24 months after the last communication, unless a longer period is necessary for an ongoing relationship, a legal claim or a legal obligation.
Information connected with bookings, services, payments or accounting may be kept for the period required by applicable Maltese law. Technical and security logs are generally retained only for as long as reasonably necessary for their purpose.
9. Cookies
The website may use cookies that are necessary for security, administration and basic website functionality. Embedded third-party content may also set cookies or collect technical information.
Further information is available in our Cookie Policy.
10. Embedded content and external links
Pages may contain links to or embedded content from third-party services such as Instagram, YouTube or other websites. These providers may collect information about your interaction with their services in accordance with their own privacy policies.
11. Your data-protection rights
Subject to applicable law, you may have the right to:
- Request access to your personal data
- Correct inaccurate or incomplete information
- Request deletion of your information
- Restrict or object to certain processing
- Request data portability where applicable
- Withdraw consent where processing is based on consent
To exercise these rights, contact us through our contact page. We normally respond within one month.
12. Complaints
You may lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta: idpc.org.mt.
13. Changes to this policy
We may update this Privacy Policy when our services, website or legal obligations change. The latest version will always be published on this page.