FACE THE BARRE'S TUSCANY BALLET RETREAT PRIVACY POLICY. 23.04-30.04.2027

Last updated: 15.07.2026

1. Introduction This Privacy Policy explains how Face The Barre ("we," "us," "our") collects, uses, shares and protects personal information in connection with the Face The Barre Tuscany Retreat (the "Retreat") and our website. It applies to anyone who books, registers for or otherwise submits personal information to us in relation to the Retreat. We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection law.
2. Who We Are - Face The Barre is the data controller responsible for the personal information described in this Policy. For any question about this Policy or how your data is handled, contact us at [email protected]. 
3. Information We Collect - We collect the following categories of personal information:

• Identity and contact details: full name, email address and phone number provided at booking.
• Booking and payment information: selected package, room preferences, roommate requests and payment status (card details themselves are collected and processed directly by our payment processor, Stripe and are not stored on our own systems).
• Health and medical information: any medical conditions, allergies, dietary requirements or physical limitations you disclose to us.
• Travel information: flight or transfer details you provide to coordinate airport transfers.
• Communications: any emails, messages or forms you submit to us before, during or after the Retreat.
• Photographs, video, and audio recordings: content captured during the Retreat, as described in Section 6.
• Website and technical data: information collected automatically when you visit our website, such as IP address, browser type and cookie data, as described in Section 7.

4. How We Use Your Information - We use personal information for the following purposes and on the following legal grounds:

• To process your booking, collect payment and administer your place on the Retreat (performance of a contract).
• To coordinate logistics such as room and roommate assignments, meals and transfers (performance of a contract).
• To ensure participant safety, including accommodating medical conditions, allergies or physical limitations (performance of a contract and where the information is health-related, your explicit consent — see Section 5).
• To communicate with you about your booking, the Retreat itinerary or any changes (performance of a contract).
• To send you promotional communications about future retreats or offerings, where you have opted in to receive these (consent, which you may withdraw at any time).
• To use photographs, video or audio from the Retreat for promotional or educational purposes (consent, as set out in our Terms and Conditions and Section 6 below).
• To meet our legal, accounting or tax obligations (legal obligation).
• To protect the safety, rights or property of Face The Barre, our participants, or our venue partners (legitimate interest).

5. Special Category Data (Health and Medical Information) Information about your health, including medical conditions, allergies, dietary requirements and physical limitations, is treated as a special category of personal data under GDPR. We only collect and use this information with your explicit consent, given at the time of booking or when you provide it to us and only for the purpose of ensuring your safety and wellbeing during the Retreat, including sharing relevant details with Terzo di Danciano where necessary to arrange meals or accommodations. You may withdraw this consent at any time, though this may affect our ability to safely accommodate your needs.
6. Photography, Video and Recordings - As set out in our Terms and Conditions, photographs, film footage and audio recordings may be taken throughout the Retreat. By registering, you consent to appearing in this material and to its use by Face The Barre for promotional or educational purposes, including on our website and social media. If you wish to withdraw consent for future use of specific images or footage, contact us at [email protected] and we will remove them from future use where reasonably possible.
7. Cookies and Website Data - Our website, hosted via Kajabi, may use cookies and similar technologies to operate correctly, remember your preferences and understand how visitors use the site, including basic analytics. You can control or disable cookies through your browser settings; doing so may affect certain website functionality.
8. Who We Share Your Information With - We share personal information only where necessary, with the following categories of recipients:

• Stripe, to process payments and manage instalment billing
• Kajabi, to host our website, manage bookings and communicate with participants
• Terzo di Danciano, to arrange accommodation, meals and on-site logistics, including relevant dietary or medical information
• Professional advisers (such as accountants or legal counsel), where necessary for our legitimate business purposes
• Authorities, where required by law or where necessary to protect the safety of participants or staff. We do not sell personal information to third parties.

9. International Data Transfers - Some of the third parties listed above, including Stripe and Kajabi, may process personal data outside the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards recognised under GDPR, such as Standard Contractual Clauses or the third party's own adequacy certifications, to ensure your information remains protected.
10. How Long We Keep Your Information - We retain personal information only as long as necessary for the purposes described in this Policy. Booking and payment records are kept for as long as required to meet our legal, accounting and tax obligations. Health and medical information is retained only for the duration of the Retreat and a reasonable period afterward, then securely deleted. Photographs and video used for promotional purposes may be retained for as long as they remain in active use, unless you request their removal.
11. Your Rights - Under GDPR, you have the right to: access the personal information we hold about you; request correction of inaccurate information; request deletion of your information; restrict or object to certain processing; request a copy of your information in a portable format; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your information has been mishandled.
12. Data Security - We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss or misuse. Payment information is handled directly by Stripe under its own security standards and is not stored on our systems.
13. Children's Privacy - The Retreat is only open to participants aged 18 and over and we do not knowingly collect personal information from children.
14. Changes to This Policy - We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "last updated" date.
15. Contact Us - If you have any questions about this Privacy Policy or how your personal information is handled, contact us at [email protected].