Last updated: 26 October 2026

 

At Beshno Retreats, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, enquire about our retreats, or book and participate in our programmes.

We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, or GDPR), Spain's Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable Spanish legislation.

​

1. Who We Are

Beshno Retreats is a trading name operated by Syed Danish Suhail, a self-employed professional (autónomo) established in Spain.

The data controller responsible for processing personal information is:

Legal Name: Syed Danish Suhail
Trading Name: Beshno Retreats
Registered Business Address: Carrer de València, 469, 08013 Barcelona, Spain
Email: beshnoretreats@gmail.com
Telephone: +34 617 159 090
Website: https://www.beshnoretreats.com/

For questions about this Privacy Policy or to exercise your data protection rights, please contact us at beshnoretreats@gmail.com.

​

2. What Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of information.

Information you provide directly

• Name, email address, telephone number and other contact details.

• Information submitted through our website contact or enquiry forms.

• Details relating to retreat enquiries, registrations and bookings, including the selected retreat, number of participants and relevant accommodation preferences.

• Information necessary to organise your participation, such as arrival arrangements or other practical requirements.

• Billing information, transaction references and payment confirmation details.

• Correspondence exchanged with us by email, telephone or other communication channels.

• Marketing preferences and records of any consent you give.

Information collected when using our website

When you visit our website, certain technical information may be collected automatically, including your IP address, browser type, device information, pages visited, approximate location derived from technical data, cookie identifiers and website interaction information.

The extent of this collection depends on the website functionality, applicable cookie preferences and services in use.

Additional information for retreat participation

Occasionally, you may choose to provide dietary, accessibility or other information needed to help us organise your retreat experience.

We seek to collect only information genuinely necessary for the relevant purpose. We do not require you to declare your religious beliefs to make a general enquiry or book a retreat, and we do not use retreat attendance to profile participants according to religion.

Health information and information revealing religious or philosophical beliefs may receive special protection under the GDPR. Where processing such information is necessary, we will provide appropriate information and identify a lawful basis and an applicable exception under Article 9 of the GDPR. Where explicit consent is required, it will be requested separately.

Please do not include unnecessary medical or other sensitive personal information in general website enquiry forms.

​

3. How We Collect Personal Information

We may collect personal information when you:

• Complete a contact, registration or booking form on our website.

• Contact us directly by email, telephone or other communication channels.

• Register for or purchase a retreat or related service.

• Create an account or use any available member features.

• Subscribe voluntarily to communications about future retreats.

• Participate in a retreat and provide information necessary for its organisation.

• Navigate the website or interact with its features, subject to applicable cookie and privacy settings.

We may also receive limited information from booking, payment or referral providers where necessary to process a request or provide a service.

​

4. Why We Use Personal Information and Our Legal Bases

We process personal data only where we have an appropriate legal basis.

Responding to enquiries

We use your name, contact details and message to answer questions about our retreats, provide requested information and communicate with you about a possible booking.

The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in responding to correspondence, where appropriate (Article 6(1)(f)).

Managing retreat bookings and participation

We use relevant personal information to process reservations, confirm attendance, coordinate accommodation and other practical arrangements, communicate programme information and deliver the services you have booked.

The legal basis is performance of a contract or steps taken before entering into one (Article 6(1)(b)).

Processing payments and maintaining financial records

We process billing and transaction-related information to administer payments, issue or retain appropriate documentation, maintain business records and comply with applicable accounting and tax requirements.

The legal bases are performance of a contract (Article 6(1)(b)) and compliance with legal obligations (Article 6(1)(c)).

Maintaining the security and operation of our website

We may process necessary technical information to operate the website, prevent abuse, address security problems and maintain the reliability of our services.

Depending on the processing, the legal bases are our legitimate interests in maintaining a secure and functional website (Article 6(1)(f)) and compliance with applicable legal obligations (Article 6(1)(c)).

Marketing and information about future retreats

We may send promotional emails or other electronic marketing communications where you have specifically requested or consented to receive them, or where another lawful basis and the applicable Spanish electronic-marketing rules permit such communications.

Providing contact information for a retreat enquiry does not, by itself, constitute consent to receive promotional messages.

You may withdraw marketing consent or object to promotional communications at any time, free of charge, by using the unsubscribe option provided or contacting beshnoretreats@gmail.com.

Where marketing is based on consent, the legal basis is Article 6(1)(a) GDPR.

Optional analytics and advertising technologies

Where consent is required for analytics, advertising or other non-essential cookies and similar technologies, we process information obtained through those technologies only in accordance with the choices you make through our cookie consent mechanism.

The legal basis for the associated processing, where consent is required, is Article 6(1)(a) GDPR.

Handling legal matters

Where necessary, personal information may be processed to comply with applicable law, respond to lawful requests or establish, exercise or defend legal claims.

The legal basis depends on the circumstances and may include Article 6(1)(c) or Article 6(1)(f) GDPR.

​

5. Retreat Participation, Photography and Recordings

Beshno Retreats brings together participants, spiritual teachers, musicians and other contributors in a shared retreat environment.

Information necessary for organising a retreat may be shared with relevant venues or service providers only to the extent reasonably required for the agreed arrangements.

Photographs or recordings that identify participants will be handled in accordance with applicable privacy and image-rights requirements. Where consent is the appropriate basis for using an identifiable participant's image in promotional material, we will seek permission separately.

Participants may contact us if they have questions or concerns about the use of their image or personal information.

​

6. Who We Share Personal Information With

We do not sell your personal information to third parties.

We may share relevant personal information with trusted service providers where necessary to operate our website or provide the services you request.

These may include:

• Wix.com and its authorised service providers, which supply website hosting, forms, bookings, storage and other website functions.

• Email and communication providers, where necessary to respond to enquiries or send service-related communications.

• Payment service providers, where applicable, to process payments and provide transaction services.

• Retreat venues and accommodation providers, where information is necessary to organise your stay.

• Transport providers and other logistical partners, where relevant to services you request.

• Professional advisers, including accountants or legal advisers, where reasonably necessary.

• Public authorities, where disclosure is required by applicable law.

These parties receive only information relevant to their role and must process it under appropriate legal and contractual conditions.

Where a third party acts as an independent data controller, its own privacy information may also apply.

​

7. Website Hosting and International Data Transfers

Our website is created and hosted using Wix.

Wix provides infrastructure and services for website operation and may process personal information on our behalf. Wix's operations and service-provider arrangements may involve processing or transferring information within and outside the European Economic Area (EEA).

Where personal information is transferred outside the EEA, appropriate safeguards must apply in accordance with Chapter V of the GDPR. Depending on the destination and circumstances, these may include an adequacy decision by the European Commission or approved Standard Contractual Clauses and supplementary safeguards.

Information concerning the safeguards used by Wix is available through Wix's privacy and data processing documentation.

You may also contact us to request further information about relevant international transfers and applicable safeguards.

​

8. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal obligations.

Our retention approach is as follows:

• General enquiries that do not result in a booking: Normally up to 12 months following the last meaningful correspondence, unless continued retention is justified by an ongoing enquiry, a legal obligation or a dispute.

• Retreat bookings and related records: For the duration of the contractual relationship and thereafter for any period necessary to meet applicable legal obligations or address possible claims.

• Invoices, payment records and accounting information: For the periods required by applicable Spanish tax, accounting and other record-retention laws.

• Marketing records: Until you unsubscribe, withdraw consent or another applicable retention criterion is reached. Limited evidence of consent or withdrawal may be retained where necessary to demonstrate compliance.

• Optional cookie-related data: According to the applicable cookie, provider settings and retention information made available through our cookie consent mechanism.

• Information relating to specific accessibility or other sensitive arrangements: Only for as long as necessary for the relevant purpose or another applicable lawful retention requirement.

Once data is no longer required, we will delete, anonymise or otherwise restrict it as required by applicable law.

​

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support its operation, remember preferences, understand website use or enable third-party services.

These technologies may include:

Strictly necessary technologies: Required for core website functionality, security and essential user interactions.

Functional technologies: Used to support optional website features or preferences.

Analytics technologies: Used, where enabled, to help understand how visitors interact with the website.

Marketing technologies: Used, where enabled, for advertising measurement or related promotional purposes.

Where required by Spanish and European law, optional cookies and similar technologies will not be used until you have provided valid consent.

Visitors must be able to accept or reject non-essential cookies and manage their preferences through the website's consent controls. Consent can be withdrawn or modified using the available cookie-preference mechanism.

Further information about the cookies actually used, including their purposes, providers and retention periods, should be available through the website's cookie-preference information.

You can also manage or delete cookies through your browser settings, although disabling certain essential technologies may affect website functionality.

​

10. External Websites and Third-Party Content

Our website may contain links to external websites, social media platforms, videos or content provided by third parties.

These services may have their own privacy policies and may process personal information when you interact with their content.

Where third-party features are embedded directly within our website, their use may involve additional technical data processing and cookies, subject to applicable consent requirements.

We encourage visitors to review the relevant third party's privacy information before sharing personal data.

​

11. How We Protect Your Information

We take reasonable technical and organisational measures appropriate to the nature of the information being processed and the risks involved.

These include using reputable service providers, applying appropriate account and access controls, restricting access to personal information where appropriate and taking reasonable steps to protect the confidentiality and integrity of personal data.

However, no internet-based system or method of electronic transmission can be guaranteed to be completely secure.

If you have concerns about the security of information you have shared with us, please contact beshnoretreats@gmail.com.

​

12. Your Data Protection Rights

Under the GDPR and applicable Spanish law, you may have the following rights:

• Access: Request information about the personal data we hold about you and obtain a copy.

• Rectification: Ask us to correct inaccurate or incomplete personal information.

• Erasure: Request deletion of your personal information where the legal requirements are met.

• Restriction: Request that we limit certain processing of your information.

• Data portability: Receive certain personal information in a structured, commonly used, machine-readable format and, where applicable, transmit it to another controller.

• Objection: Object to processing based on legitimate interests, subject to applicable legal conditions. You may object to direct marketing at any time.

• Withdrawal of consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

• Rights concerning automated decisions: Exercise the rights available under Article 22 GDPR where applicable.

We do not use website or retreat-booking information to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

To exercise your rights, email:

beshnoretreats@gmail.com

Please clearly describe your request. We may ask for reasonable information needed to verify your identity where appropriate.

We will respond within the time limits required by applicable law, normally within one month, subject to any permitted extension.

Certain rights are not absolute and may be subject to legal exceptions, including obligations to retain relevant records.

​

13. Your Right to Lodge a Complaint

If you believe your personal information has been processed unlawfully, you may contact us so that we can review your concerns.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

In Spain, the relevant national authority is:

Agencia Española de Protección de Datos (AEPD)
Website: https://www.aepd.es/

You may also have the right to contact another competent supervisory authority under applicable European data protection law.

​

14. Your Responsibility When Providing Information

Please provide accurate and relevant information when contacting us or making a booking.

Where you provide personal information about another person, such as an additional retreat participant, you should ensure that you are authorised to share it and that the person has received the relevant privacy information.

Please avoid including unnecessary sensitive personal information in general enquiry messages.

​

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, website features, data-processing practices or applicable legal requirements.

The most recent version will be made available on this page, together with its updated date.

Where a material change requires additional notice or fresh consent, we will take the appropriate steps under applicable law.

​

16. Contact Us

For questions about this Privacy Policy, requests relating to your personal information or concerns about how your data is handled, contact:

Syed Danish Suhail
Beshno Retreats
Carrer de València, 469
08013 Barcelona, Spain

Email: beshnoretreats@gmail.com
Telephone: +34 617 159 090
Website: https://www.beshnoretreats.com/

We are committed to handling personal information responsibly and respecting the privacy of everyone who engages with Beshno Retreats.