Our website address is: http://judgelessbufo.com.

Introduction:

At Judgeless Retreats, we understand the importance of protecting your personal data and privacy. This privacy policy outlines how we collect, use, and disclose your information when you visit our website, register for an account, or engage with our services. We are committed to transparency and ensuring that your personal data is handled securely and in accordance with applicable laws and regulations.

What Information Do We Collect?

1. Account Data: When you register for an account on our website, place an order, or respond to a survey, we collect basic contact details such as your email address, postal address, phone number, and other identifiable information.
2. Medical History and Relevant Data: As part of the onboarding process and to support any services rendered to you, we may ask you to submit confidential information about your past medical history to ensure proper coaching and recommendation of treatments.

How Do We Use Your Information?

We use your information for the following purposes:

1. Personalization: To better respond to your individual needs and preferences.
2. Improvement: To continually improve our website offerings based on the information and feedback we receive from our customers.
3. Identification: To identify you as a contracting party and enable secure login on our website.
4. Communication: To establish a primary channel of communication with you and send periodic emails about your engagement with Arise Retreats.

Legal Basis:

The processing of your data is based on your consent or in cases where the processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract.

Data Protection:

We implement the following technical, physical, and organizational measures to maintain the safety of your personal data:

1. Encryption: All data transits are encrypted to align with best practices for protecting confidentiality and data integrity.
2. Confidentiality: All personnel are subject to full confidentiality, and subcontractors and subprocessors are required to sign a confidentiality agreement if not full confidentiality is part of the main agreement between the parties.
3. Access Control: Access to personal data is restricted to individually authorized personnel, and all access is only possible over an encrypted connection.
4. Monitoring: We use security reports to monitor access patterns and proactively identify and mitigate potential threats.

Personal Data Breach Notification:

In the event that your data is compromised, we will notify you and competent Supervisory Authority(ies) within 72 hours by email with information about the extent of the breach, affected data, and our action plan for measures to secure the data and limit any possible detrimental effect on the data subjects.

Disclosure of Information:

We do not sell, trade, or otherwise transfer to outside parties any personally identifiable information except to those licensed healthcare professionals who will be involved in any and all services rendered to you. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety.Your RightsYou have the right to:

1. Rectification: Obtain without undue delay rectification of inaccurate personal data concerning you.
2. Restriction of Processing: Request us to restrict the processing of personal data when one of the following applies:

   • If you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data.
   • If the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
   • If we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise, or defense of legal claims.

3. Erasure: Request the erasure of personal data concerning you, and we shall erase the personal data without undue delay when one of the following applies:

   • If the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
   • If you withdraw your consent on which the processing is based, and where there is no other legal ground for the processing.
   • If you object to the processing in case the processing is for direct marketing purposes.
   • If the personal data have been unlawfully processed.
   • If the personal data have to be erased for compliance with a legal obligation in EU or national law.

Data Retention:

Your data shall be retained for up to five full fiscal years from completion of services rendered to you.

Cooperation:

We will cooperate with you in order to ensure compliance with applicable data protection provisions, e.g., to enable you to effectively guarantee the exercise of data subjects’ rights (right of access, rectification, erasure, blocking, opposition), to manage incidents including forensic analysis in case of security breach.

Changes to This Policy:

We reserve the right to change this privacy policy at any time. We will post those changes on this page, and/or update the privacy policy modification date below. Your continued use of our website and services after any changes to this policy will be considered acceptance of those changes.

Contact Us:

If you have any questions or concerns regarding this privacy policy, please do not hesitate to contact us at: info@arisebufo.com
Judgeless Retreats
Circuto Porto Real 23
Cancun, Mexico, Q Roo, Mexico

Effective Date: This privacy policy is effective as of June 16th, 2024.