Privacy and Data Protection: Information Notice
Key points
- We only collect what you share in an enquiry or what your browser shares to load the site, nothing more.
- We send transactional emails (booking and contact confirmations). Our newsletter goes only to people who subscribe to it, and you can unsubscribe at any time.
- You can ask for access, correction, or deletion at any time via [email protected] or /privacy-request.
- We never sell your details and we run no advertising trackers on this site.
We run a small wellness studio and retreats in Mauritius and a simple website to tell you about them. This notice explains what information we collect, why we collect it, who helps us handle it, and what choices you have. We wrote it in plain language using British English. It is not legal advice. If you need legal advice about your rights, talk to a qualified professional where you live.
Who we are
- Controller: Arna Holistic Wellness LTD, Forbach Road, Fond Du Sac, Pamplemousses, Mauritius 20603
- Phone: +230 5804 9815
- Email for privacy questions: [email protected] (we handle privacy enquiries here; there is no separate data protection officer)
- Established: 2024
We are the team that reads and replies to your enquiries, runs your bookings, and looks after the website and inbox. We do not have a separate IT company acting as processor, enquiries sent to [email protected] stay with our own small team.
If you contact us, your message goes to our team only.
What we collect
We only collect what you give us or what your browser shares to load the site.
Contact and booking enquiry details (you give us):
- First name, last name, email address, phone number if you include it
- Country of residence, billing address only if needed for a future invoice (we do not take payment on the site)
- What you are enquiring about, a Service, Course or Retreat as listed on /services, /courses and /retreats (for example, Yoga & Movement, Meditation, Sound Baths, Breathwork, Massage, Nutrition, and related Workshops), plus any testimonial you share with consent.
- Preferred date, time, experience level, and any message you write
- Newsletter: if you subscribe, your email address, optional first name, language and the record of your consent.
- Testimonials: if you choose to share a testimonial, we publish your name, words and any photo you provide only with your clear consent. You can ask us to remove or update it at any time.
Optional health and goals (only if you choose to share):
- Dietary needs, allergies, physical limits, health conditions, prior injuries, pregnancy, or goals you type into the booking or contact form
- This is optional. Share it only if you want us to adapt the session, for example, to modify Hatha Yoga, Breathwork Session or Deep Tissue Massage for an injury or condition. If you leave it blank, we do not infer it.
- For Retreats and Courses with a physical component, such as an intensive Retreat or Teacher Training Course, you may share relevant health information so we can suggest safer modifications. You can also tell us in person instead if you prefer.
Technical information (your browser shares automatically):
- IP address, browser type and version, device, pages you view, and approximate location derived from IP
- Turnstile check result when you submit a form (to confirm you are human)
- Cookie preference (Accept / Reject for analytics)
We do not collect payment card details on this site. We do not create behavioural profiles or make automated decisions that have legal effects. We do not run an Events post type, there are no tribe_events on this site.
Why we ask for it
- To reply to your enquiry and arrange a booking: we use your contact details to answer, to confirm by email if a place is available for your chosen Service, Course or Retreat, and to send you practical information (timings, what to bring, directions to Forbach Road, Fond Du Sac, Pamplemousses, Mauritius 20603). Legal basis in plain words: contract-steps, what you asked us to do before any agreement.
- To adapt the session if you ask us to: we use optional health and goal information only to suggest safer modifications, for example, a gentler variation in Restorative Yoga or Breathwork Session. You can tell us in person instead if you prefer. Legal basis in plain words: consent, only what you freely choose to share.
- To send you the newsletter: only if you subscribe. Legal basis in plain words: consent, which you can withdraw at any time by unsubscribing.
- To manage testimonials with care: we use your testimonial content only where you have given consent, and we remove it promptly if you withdraw consent. Legal basis in plain words: consent, publishing only with your permission.
- To keep the site safe and working: we use IP and browser information, nonces and bot checks to prevent spam, block attacks, and count visits in aggregate. Legal basis in plain words: legitimate-interest, keeping the site secure for everyone.
- To understand what is useful (only if you Accept analytics): with your consent, we count which Services, Courses and Retreat pages are visited most so we can improve descriptions and navigation. Legal basis in plain words: consent, only after you click Accept.
We keep things simple: we ask for what we need to reply and to keep the session safe. We do not use your data for advertising.
Email from us
Our transactional emails confirm a booking or contact enquiry and share practical details about your visit. Booking and contact confirmations travel through our Resend send-pipe, and we read and reply from our Zoho inbox.
Newsletter. You can subscribe on our Newsletter page or by ticking the box on the booking form. To subscribe you accept our terms and conditions, this privacy notice and our cookie policy. We then send you a confirmation email, and we receive a notification of your subscription. We store your email address, your first name if you give it, your language and a record of your consent (date, IP address and browser). Every confirmation email carries an unsubscribe link; you can also ask us at [email protected]. After you unsubscribe we stop sending the newsletter and keep only a note that you unsubscribed, unless you ask us to delete it. We run no other marketing list.
Who helps us (processors and other recipients)
We work with a small set of providers. Each only handles the part they are needed for. There is no separate IT processor, we manage the site ourselves.
| Provider | What they do | Where they operate | Visitor data? |
|---|---|---|---|
| OVH Groupe SAS, 2 rue Kellermann, 59100 Roubaix, France | Hosts the website and stores its files | France (EU) | Yes, site content stored on OVH servers. Form submissions are not saved there: they are sent by email (see Zoho and Resend) |
| GoDaddy LLC | Domain registrar (WHOIS) | USA | No content, only domain registration lookup |
| Github Inc. | Stores our website code (no visitor data) | USA | No, code only |
| Cloudflare Inc. | Delivers pages quickly, blocks bots, provides Turnstile human check and Insights visit counts | USA | Yes, IP and browser when delivering pages; Turnstile check on /contact and /book; Insights beacon |
| Zoho Corporation | Provides our inbox: booking and contact form submissions arrive there, and we read and reply to your emails there | USA / India | Yes, form submissions and emails you send to info@ |
Resend Inc. (api.resend.com) | Sends booking and contact form submissions to our inbox by email (the sending pipe) | USA | Yes, email content while sending |
| Google LLC (via Site Kit) | Counts visits with Google Analytics (_ga family) only if you Accept | USA | Only if you Accept analytics, then pages viewed and IP (anonymised where set) |
OpenStreetMap (tile.openstreetmap.org) | Map tiles on our contact page | Germany / community | When map loads, your IP is seen by their tile servers |
YouTube LLC (youtube.com, i.ytimg.com) | Video player and thumbnails where we embed video | USA | Thumbnail load contacts YouTube; full player loads only after Accept or when you click where gated |
| Yoast SEO | Builds sitemap and breadcrumbs | Runs locally in WordPress | No, sets no cookies, no external data send |
| Outbound links: Meta (Facebook/Instagram/WhatsApp), LinkedIn, TikTok, Unsplash | Links and images we point to in footer or content | USA / various | Only if you click the link or load the image, then their privacy rules apply |
No marketing pixel and no cross-site tracker is running on our site. If that changes, we will update this notice and the cookie policy.
Where your information goes
We are based in Mauritius. Our website lives on OVH servers in France (EU). Some of the providers above run servers in the United States and, for Zoho, also in India. That means when you email us or browse the site, your information may be handled in Mauritius (where we read it), in France (where the site is hosted), and in the United States or India (because those providers run there). This is a factual description of where the services operate. It is not a legal guarantee. Our site is hosted in France (EU); some providers operate in the United States and India, so please note that enquiries may be handled there. We choose providers that commit to protecting your information, and you can ask us how at [email protected].
Code on Github (USA) does not contain visitor information, it is just the site’s software.
How long we keep it
- Optional health information: we use it only to adapt your session. You can ask us to delete it at any time (see “Your choices” above).
- Booking and contact emails: we keep them for up to 7 years. We do this to meet Mauritius tax and business record keeping for bookings across Services, Courses and Retreats (this is informational, we are required to keep commercial records).
- Newsletter: we keep your subscription until you unsubscribe or ask us to delete it.
- Testimonials: we keep them only while your consent lasts. If you withdraw consent, we remove your testimonial promptly from the site and from cached copies where we can.
- Technical logs and Turnstile / Cloudflare security data: kept for a short period to investigate abuse, then removed or aggregated.
- Analytics (if you Accepted): Google Analytics keeps aggregated counts for up to 14 months; Cloudflare Insights is cookieless and session-based.
If you ask us to delete something earlier, we will do so unless we have a legal reason to keep a business record of the transaction. We will tell you if that happens.
Your choices
You can:
- Ask us what information we have about you
- Ask us to correct it if it is wrong
- Ask us to delete it
- Ask us to limit how we use it or to send you a copy
- Withdraw consent for your testimonial or for optional health details at any time
How to ask: email [email protected] with the subject "Privacy request". You can also use our page at /privacy-request. We try to reply within 60 days. We may need to verify it is you (for example, replying to the email you used) before we share or delete anything.
Withdrawing optional information: if you shared health or goal information and change your mind, just email us and we will delete that part.
Cookie choices: see our Cookie Policy and the footer link "Cookie Preferences" to Accept or Reject analytics (_ga is set only after Accept). We do not respond to Do-Not-Track browser signals; your CookieYes Accept/Reject choice governs analytics.
Social logins: we offer none, there are no accounts to register for or log in to.
How we keep it safe
We take practical steps, but no system is perfect:
- The site uses TLS (https) to encrypt data in transit
- Cloudflare acts as a firewall and checks forms with Turnstile to block bots
- Forms use WordPress nonces to prevent forgery
- Access to inboxes and hosting is limited to our own small team, no external IT processor has standing access
If we learn of a security incident that affects your information, we will look into it and, where appropriate, tell you and take steps to reduce the impact.
Health and booking information is your choice
You do not have to tell us about health conditions to ask about a Service, Course or Retreat. Only share what you want us to use to adapt the session. If you are unsure whether a practice, such as Breathwork, a Sound Bath or Deep Tissue Massage, is suitable, check with your doctor or relevant clinician before you book, and let us know what adaptations you need.
Booking is for adults 18+ unless we agree otherwise in writing; see Booking Terms.
Changes to this notice
We may update this notice when we change providers or how we handle enquiries. The date at the top shows the last update. If we make a significant change, we will note it here and, for people with an upcoming Service, Course or Retreat, mention it in email.
Contact us
For any privacy question or request, contact: [email protected], Arna Holistic Wellness LTD, Forbach Road, Fond Du Sac, Pamplemousses, Mauritius 20603, +230 5804 9815.
Visitors from the EU/UK
If you visit from the EU or the UK, you can use the same choices above, ask for access, correction, or deletion at any time. Send your request to [email protected] or use our page at /privacy-request and we will reply within 60 days.
We are a Mauritius company, so Mauritius law applies to our operations. References to laws like the Mauritius Data Protection Act 2017 or the EU GDPR in older drafts were to explain the rights we try to respect. This notice itself is not legal advice and does not create a legal warranty about those laws.
