Privacy Policy

1. Overview & Data Controller

rankdshteamtonc.xyz is operated by Silva Sauna Retreats Ltd ("we," "us," or "our"), registered in the United Kingdom under company number 12948194. Our registered office is located at 14 Pine Needle Way, Aviemore, PH22 1ST, United Kingdom. We act as the data controller for any personal information processed through this website.

2. Information We Collect

We deliberately minimize the personal data collected from visitors. Depending on how you interact with our website, we may collect the following categories of information:

• Contact Form Information: When you submit an enquiry via our contact form, we collect your full name, email address, preferred retreat type, preferred travel season, approximate group size, and any personal message you provide.
• Technical & Log Data: Like most web servers, our systems automatically log basic technical parameters, including your IP address, browser type and version, referring URL, time and date of requests, and operating system. These server logs are maintained strictly for security maintenance, diagnosing network faults, and preventing malicious activity.
• Local Storage Preferences: We use local browser storage (localStorage) solely to record your cookie consent choice so the banner does not repeatedly prompt you across page views.

3. Lawful Basis for Processing (GDPR)

Under the General Data Protection Regulation (EU/UK GDPR), our lawful bases for collecting and using your data include:

• Legitimate Interests: To maintain website security, prevent spam submissions, and answer direct reader questions.
• Consent: When you explicitly submit an enquiry or opt-in to optional analytical preferences.
• Legal Obligation: If required to retain certain records for tax, accounting, or statutory legal disclosures.

4. How We Use Your Information

Your information is used strictly for legitimate editorial and communication purposes:

• To respond directly to your queries regarding forest retreat planning, editorial feedback, or guidance questions.
• To ensure our website functions cleanly across various browser types and mobile screen resolutions.
• To defend against cyber attacks, denial-of-service attempts, and automated spam submissions.

We never sell, rent, lease, or trade your personal information to third-party advertisers, data brokers, or marketing syndicates.

5. Cookies & Tracking Technologies

We do not deploy invasive tracking beacons, pixel trackers, or cross-site behavioral advertising cookies. For complete details regarding our minimal cookie implementation, please review our dedicated Cookie Policy.

6. Third-Party Service Providers

We may employ vetted third-party infrastructure providers to support our operations (such as secure web hosting facilities located within the United Kingdom and European Economic Area). These providers are bound by strict contractual data processing agreements and may only process information in accordance with our explicit instructions.

7. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the specific purposes for which it was gathered:

• Contact Enquiries: Retained for up to twelve (12) months following the resolution of your correspondence, after which emails and form records are permanently deleted.
• Server Access Logs: Retained for a maximum of ninety (90) days before automatic rotation and secure erasure.
• Cookie Preferences: Stored locally on your personal device until you manually clear your browser storage or for up to twelve (12) months.

8. Your Statutory Rights (GDPR & UK DPA)

Subject to applicable data protection laws, you possess the following legal rights regarding your personal information:

• Right to Access: You may request a copy of any personal data we hold concerning you.
• Right to Rectification: You may request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your personal data where retention is no longer justified.
• Right to Restriction of Processing: You may request that we temporarily suspend active processing of your data under specific statutory conditions.
• Right to Object: You may object to data processing grounded in our legitimate interests.

To exercise any of these statutory rights, please send your request directly to our Data Privacy Desk at [email protected]. We respond to all verified inquiries within thirty (30) calendar days.

9. Notice for California & US Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding personal data. We do not sell personal data, nor do we share personal data for cross-context behavioral advertising. We do not collect "sensitive personal information" as defined by California statutes. You retain the right to request disclosure of categories of information collected, as well as the right to request deletion without discrimination.

10. Data Security & International Transfers

We maintain appropriate technical and administrative safeguards to protect your personal information against unauthorized access, loss, destruction, or alteration. All web transmissions are encrypted via Transport Layer Security (TLS/HTTPS). Where data is transferred outside the European Economic Area or UK, we ensure adequate protection mechanisms (such as Standard Contractual Clauses) are in place.

11. Contacting Our Data Privacy Desk

If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact: