Privacy Policy

We take privacy seriously. This document sets out how Whiteretreat gathers, processes and protects personal data of guests and people who visit this website.

Last updated: 2026-07-27 · Effective immediately.

1. Who we are

Whiteretreat ("we", "us", "our") runs the website at https://whiteretreat.space/. Our registered office is 58 La Croisette, 06400 Cannes, FR. For privacy-related enquiries please contact [email protected].

2. What we collect

We gather the categories of information listed below:

• Booking information: name, address, contact details, payment data, stay dates, dietary and accessibility preferences.
• Correspondence: messages you send through our website, email or telephone.
• Site activity: IP address, browser, device, referring page, pages visited, timestamps, anonymised analytics events.
• Cookies and related tools: see Section 6 below.

3. How information is used

Personal data is handled solely to deliver and refine our services, including:

• To handle reservations, payments and to deliver the services you book with us.
• To reach you about your stay, issue confirmations and reply to enquiries.
• To meet legal duties (tax records, anti-money-laundering, gaming licence requirements).
• To refine our website and services, guided by aggregated, privacy-respecting analytics.
• To send marketing messages only when you have given clear consent; you may unsubscribe whenever you wish.

4. Legal grounds (GDPR)

For visitors based in the European Economic Area and the United Kingdom we rely on these legal bases under Articles 6(1)(a)-(f) of the General Data Protection Regulation: your consent, performance of a contract, compliance with a legal obligation, and our legitimate interest in operating a safe, reliable website.

5. When we share data

We never sell personal data. Disclosure is limited to: trusted service providers working for us (payment processors, booking systems, IT hosting) under written agreements; public authorities where the law requires it; and successors if a corporate reorganisation takes place.

6. Cookies

This site relies on strictly necessary cookies to operate. Optional analytics and marketing cookies are placed only after you consent via our cookie banner. You may withdraw consent at any time by clearing browser storage for this domain.

7. How long we keep data

Reservation and accounting records are kept for the period required by tax and gaming-licence law (typically 10 years). Marketing data is held only while your consent remains valid. Server logs are deleted within 30 days.

8. Rights you hold

Subject to local law, you may access, correct, erase, restrict or object to processing of your personal data, and you may request data portability. To exercise any of these rights please contact [email protected]. You also have the right to lodge a complaint with your local data protection authority.

9. Transfers abroad

When personal data moves outside the European Economic Area, we maintain an adequate level of protection through Standard Contractual Clauses or equivalent safeguards.

10. Minors

This website is meant for adults aged 18 and over. We do not knowingly collect personal data of children under 16. If you believe such data has been provided, please contact us so we can delete it.

11. Policy updates

We may revise this policy occasionally. The "Last updated" date at the top of this page marks the current version. Significant changes will be announced on this website.