How we source and use retreat operators' information
Last updated July 2026
These are RetreatBird's current how we source and use retreat operators' information. If anything here is unclear, or you'd like a copy for your records, email hello@retreatbird.com.
Who we are
RetreatBird operates the RetreatBird marketplace. Postal address: The Strand, Fawwara Building, Triq l-Imsida, Il-Gżira GZR 1401, Malta. Data-protection contact: privacy@retreatbird.com.
EU representative (Art. 27 GDPR): to be appointed — please use privacy@retreatbird.com in the meantime.
Where we got your information
Your retreat was listed publicly online and/or on your own website. We collect business and listing details from publicly accessible sources — we did not receive them from you directly, which is why we're giving you this notice.
What we hold
Business contact details (business name, business email, phone, website, social links) and public listing information (title, description, location, pricing, and photos as publicly shown). We do not collect special-category data.
Why we use it, and our lawful basis
To run the marketplace so travelers can discover you, and to invite you to claim and manage your listing. Our lawful basis is legitimate interests (Art. 6(1)(f) GDPR) in building a retreat marketplace and reaching relevant operators. If you claim your listing, we then process your data to provide the service under our contract with you (Art. 6(1)(b)).
Who we share it with
Platform service providers only: hosting (Supabase, Cloudflare), email delivery (Resend, Maildoso), and contact enrichment (Hunter). Some may process data outside the EEA under appropriate safeguards (Standard Contractual Clauses).
How long we keep it
Until you claim your listing or ask us to remove it. If you opt out, we keep a minimal suppression record so that we don't contact you again.
Your rights
You can access, correct, delete, restrict, or port your data, and object to or opt out of marketing at any time — email privacy@retreatbird.com or reply “unsubscribe” to any message from us. You also have the right to lodge a complaint with your data-protection authority.