PRIVACY POLICY
Last updated: September 2026
LEYANA respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how LEYANA collects, uses, stores and shares personal information when you visit leyana.co, contact us, book a retreat, join our mailing list or otherwise interact with LEYANA.
1. Data controller
The data controller is:
LEYANA SASU
3, Clos de la Bergerie
78240 Chambourcy
France
Email: [email protected]
2. Personal data we may collect
Depending on how you interact with LEYANA, we may collect:
Identification and contact information
Name, email address, telephone number, country of residence and other contact information.
Booking information
Selected retreat, accommodation choice, booking history, requests, preferences and information necessary to manage your stay.
Billing and payment information
Billing details, transaction status and payment-related information. Card payments are processed by payment service providers such as Stripe. LEYANA does not need to retain your complete payment-card details.
Communications
Emails, messages, enquiries, WhatsApp communications and other correspondence with LEYANA.
Discovery call information
Contact details, appointment details and information you choose to provide in connection with a discovery call.
Newsletter information
Your email address, subscription preferences and engagement information where applicable.
Health and dietary information
Where necessary for the safe organisation of a retreat, we may collect information concerning allergies, intolerances, dietary requirements, accessibility needs, relevant health information and emergency contact details.
Because certain health information constitutes special-category personal data under the GDPR, LEYANA will request explicit consent where that is the appropriate legal basis for processing.
Website information
Depending on the final website configuration and your cookie choices, this may include device, browser, IP address, website usage and analytics information.
3. Why we process your data
We may process personal data to:
respond to enquiries;
arrange discovery calls;
process and administer retreat bookings;
perform our contract with participants;
collect payments and manage invoices;
organise accommodation, meals and activities;
communicate important retreat information;
accommodate disclosed dietary, accessibility or health requirements where reasonably possible;
manage emergencies and participant safety;
comply with legal and accounting obligations;
manage complaints and legal claims;
protect the security of our website and services;
send newsletters and marketing communications where legally permitted;
improve our website and services; and
manage consent relating to photographs and videos.
4. Legal bases
Depending on the processing concerned, LEYANA relies on:
performance of a contract or steps requested before entering into a contract;
compliance with legal obligations;
LEYANA's legitimate interests, where those interests do not override your rights;
your consent, particularly where required for marketing, non-essential cookies or certain sensitive data; and
explicit consent, where required for special-category data such as health information.
You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5. Who receives your data
Only persons who reasonably need access to your information for the relevant purpose will receive it.
Depending on the retreat or service, recipients may include:
authorised LEYANA personnel;
retreat venues and accommodation providers;
chefs/catering providers where dietary information needs to be communicated;
teachers, coaches or activity providers where information is necessary for participant safety;
payment providers such as Stripe;
email/CRM providers such as Flodesk;
Google Workspace and Google Calendar;
website and hosting providers such as Squarespace;
professional advisers, accountants, insurers or legal advisers where necessary;
technology providers used to operate LEYANA's business; and
public authorities where disclosure is legally required.
LEYANA seeks to disclose only information reasonably necessary for the relevant purpose.
6. WhatsApp
LEYANA may use WhatsApp to facilitate practical communications between participants before or during a retreat.
Participants should be aware that participation in a group chat may make their telephone number and profile information visible to other group members depending on their WhatsApp settings.
Where practical, participants will be informed before being added to a group.
7. International transfers
Some service providers used by LEYANA may process data outside the European Economic Area.
Where required, LEYANA will rely on an applicable legal transfer mechanism, such as an adequacy decision or appropriate contractual safeguards.
The precise providers and transfer mechanisms should be reviewed against the final website and technology configuration before launch.
8. Data retention
LEYANA retains personal information only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal, accounting and evidentiary requirements.
In particular:
enquiry and discovery-call data will be retained for a reasonable period necessary to manage and follow up the relationship;
contractual, booking, transaction and accounting information may be retained for the periods required under French law;
newsletter information will be retained while you remain subscribed and thereafter where necessary to document your opt-out;
health and dietary information will not be retained longer than reasonably necessary for the organisation, safety and follow-up of the relevant retreat, subject to any legal requirement or legitimate need to establish or defend legal claims;
cookie information is retained in accordance with the applicable cookie settings and retention periods.
LEYANA will establish and document precise retention periods in its internal data-retention schedule.
9. Newsletter and marketing
You may choose to subscribe to LEYANA news, retreat announcements and other communications.
Where consent is required, marketing communications will only be sent with the appropriate consent.
You can unsubscribe at any time using the unsubscribe link contained in marketing emails or by contacting [email protected].
10. Your rights
Subject to applicable law, you may have the right to:
access your personal data;
correct inaccurate or incomplete information;
request deletion;
restrict certain processing;
object to certain processing;
receive certain data in a portable format;
withdraw consent at any time where processing relies on consent; and
provide instructions regarding your personal data following death where French law provides such a right.
To exercise your rights, contact:
[email protected]
LEYANA may request reasonable information to verify your identity.
You also have the right to lodge a complaint with the competent supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL).
11. Security
LEYANA takes reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure.
12. Third-party websites and services
The website may contain links to or integrations with third-party services. Those services may process personal data under their own privacy policies.
13. Changes to this policy
LEYANA may update this Privacy Policy to reflect changes in its services, technology or legal obligations.
The current version will be published on leyana.co with its latest update date.
Last updated: September 2026
LEYANA respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how LEYANA collects, uses, stores and shares personal information when you visit leyana.co, contact us, book a retreat, join our mailing list or otherwise interact with LEYANA.
1. Data controller
The data controller is:
LEYANA SASU
3, Clos de la Bergerie
78240 Chambourcy
France
Email: [email protected]
2. Personal data we may collect
Depending on how you interact with LEYANA, we may collect:
Identification and contact information
Name, email address, telephone number, country of residence and other contact information.
Booking information
Selected retreat, accommodation choice, booking history, requests, preferences and information necessary to manage your stay.
Billing and payment information
Billing details, transaction status and payment-related information. Card payments are processed by payment service providers such as Stripe. LEYANA does not need to retain your complete payment-card details.
Communications
Emails, messages, enquiries, WhatsApp communications and other correspondence with LEYANA.
Discovery call information
Contact details, appointment details and information you choose to provide in connection with a discovery call.
Newsletter information
Your email address, subscription preferences and engagement information where applicable.
Health and dietary information
Where necessary for the safe organisation of a retreat, we may collect information concerning allergies, intolerances, dietary requirements, accessibility needs, relevant health information and emergency contact details.
Because certain health information constitutes special-category personal data under the GDPR, LEYANA will request explicit consent where that is the appropriate legal basis for processing.
Website information
Depending on the final website configuration and your cookie choices, this may include device, browser, IP address, website usage and analytics information.
3. Why we process your data
We may process personal data to:
respond to enquiries;
arrange discovery calls;
process and administer retreat bookings;
perform our contract with participants;
collect payments and manage invoices;
organise accommodation, meals and activities;
communicate important retreat information;
accommodate disclosed dietary, accessibility or health requirements where reasonably possible;
manage emergencies and participant safety;
comply with legal and accounting obligations;
manage complaints and legal claims;
protect the security of our website and services;
send newsletters and marketing communications where legally permitted;
improve our website and services; and
manage consent relating to photographs and videos.
4. Legal bases
Depending on the processing concerned, LEYANA relies on:
performance of a contract or steps requested before entering into a contract;
compliance with legal obligations;
LEYANA's legitimate interests, where those interests do not override your rights;
your consent, particularly where required for marketing, non-essential cookies or certain sensitive data; and
explicit consent, where required for special-category data such as health information.
You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5. Who receives your data
Only persons who reasonably need access to your information for the relevant purpose will receive it.
Depending on the retreat or service, recipients may include:
authorised LEYANA personnel;
retreat venues and accommodation providers;
chefs/catering providers where dietary information needs to be communicated;
teachers, coaches or activity providers where information is necessary for participant safety;
payment providers such as Stripe;
email/CRM providers such as Flodesk;
Google Workspace and Google Calendar;
website and hosting providers such as Squarespace;
professional advisers, accountants, insurers or legal advisers where necessary;
technology providers used to operate LEYANA's business; and
public authorities where disclosure is legally required.
LEYANA seeks to disclose only information reasonably necessary for the relevant purpose.
6. WhatsApp
LEYANA may use WhatsApp to facilitate practical communications between participants before or during a retreat.
Participants should be aware that participation in a group chat may make their telephone number and profile information visible to other group members depending on their WhatsApp settings.
Where practical, participants will be informed before being added to a group.
7. International transfers
Some service providers used by LEYANA may process data outside the European Economic Area.
Where required, LEYANA will rely on an applicable legal transfer mechanism, such as an adequacy decision or appropriate contractual safeguards.
The precise providers and transfer mechanisms should be reviewed against the final website and technology configuration before launch.
8. Data retention
LEYANA retains personal information only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal, accounting and evidentiary requirements.
In particular:
enquiry and discovery-call data will be retained for a reasonable period necessary to manage and follow up the relationship;
contractual, booking, transaction and accounting information may be retained for the periods required under French law;
newsletter information will be retained while you remain subscribed and thereafter where necessary to document your opt-out;
health and dietary information will not be retained longer than reasonably necessary for the organisation, safety and follow-up of the relevant retreat, subject to any legal requirement or legitimate need to establish or defend legal claims;
cookie information is retained in accordance with the applicable cookie settings and retention periods.
LEYANA will establish and document precise retention periods in its internal data-retention schedule.
9. Newsletter and marketing
You may choose to subscribe to LEYANA news, retreat announcements and other communications.
Where consent is required, marketing communications will only be sent with the appropriate consent.
You can unsubscribe at any time using the unsubscribe link contained in marketing emails or by contacting [email protected].
10. Your rights
Subject to applicable law, you may have the right to:
access your personal data;
correct inaccurate or incomplete information;
request deletion;
restrict certain processing;
object to certain processing;
receive certain data in a portable format;
withdraw consent at any time where processing relies on consent; and
provide instructions regarding your personal data following death where French law provides such a right.
To exercise your rights, contact:
[email protected]
LEYANA may request reasonable information to verify your identity.
You also have the right to lodge a complaint with the competent supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL).
11. Security
LEYANA takes reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure.
12. Third-party websites and services
The website may contain links to or integrations with third-party services. Those services may process personal data under their own privacy policies.
13. Changes to this policy
LEYANA may update this Privacy Policy to reflect changes in its services, technology or legal obligations.
The current version will be published on leyana.co with its latest update date.