Veera Retreats
Privacy Policy
Last updated: March 2026
1. Who We Are
Veera Retreats operates the website veeraretreats.com and provides yoga retreat and wellness services based on Šolta Island, Croatia. For any privacy-related questions, you can reach us at contact@veeraretreats.com.
2. What Data We Collect
We only collect data you voluntarily provide:
- Email address — when you subscribe to our newsletter
- Subscription status — whether you are subscribed, pending confirmation, or unsubscribed
- Timestamps — when you signed up and when you confirmed your subscription
We do not collect names, payment information, or any other personal data through the newsletter form.
3. Why We Collect Your Data
We collect your email address solely to send you our newsletter, which includes wellness tips, educational content, and information about Veera Retreats offerings. We do not use your data for any other purpose.
The legal basis for processing your data under GDPR is your explicit consent (Article 6(1)(a)), given when you confirm your subscription via the confirmation email we send you.
4. Double Opt-In
We use a double opt-in process. When you enter your email address, we send you a confirmation email. Your data is only added to our active newsletter list after you click the confirmation link. This ensures we have clear evidence of your consent.
5. How We Store Your Data
Your data is stored securely using the following services:
- Supabase — our database provider (servers located in the EU)
- Resend — our email delivery provider, used to send newsletters and store your contact in our audience list
Both providers are GDPR-compliant and process data under standard contractual clauses where applicable.
6. How Long We Keep Your Data
- Active subscribers — we retain your data for as long as you remain subscribed
- Unsubscribed users — we retain your data for up to 24 months after unsubscribing, after which it is permanently deleted
- Unconfirmed subscribers — if you do not confirm your subscription within 24 hours, your data is removed from our active list
7. Your Rights Under GDPR
As a resident of the EU/EEA, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the data we hold about you
- Right to rectification — you can ask us to correct inaccurate data
- Right to erasure — you can request that we permanently delete all your data "right to be forgotten"
- Right to withdraw consent — you can unsubscribe at any time using the unsubscribe link in any newsletter email
- Right to data portability — you can request your data in a machine-readable format
To exercise any of these rights, please contact us at contact@veeraretreats.com. We will respond within 30 days.
8. Cookies
We do not currently use tracking cookies, analytics tools, or advertising pixels on this website. If this changes in the future, we will update this policy and implement a cookie consent mechanism.
9. Third-Party Services
We use the following third-party services that may process your data:
- Resend (Privacy Policy) — email delivery
- Supabase (Privacy Policy) — database
- Vercel (Privacy Policy) — website hosting
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active subscribers by email of any significant changes. The date at the top of this page indicates when the policy was last updated.
11. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us at contact@veeraretreats.com.
If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) at azop.hr.