Legal
Privacy Policy
Last updated: 11 June 2026
This is the privacy policy for REPS (Reps ehf.) (“we,” “us,” “our”), a retreat brand based in Iceland. We care about your privacy and we keep this simple.
Who we are
REPS is operated by Reps ehf., a company registered in Iceland under kennitala 430626-1320, based in Reykjavík. You can reach us at reps@repsretreat.com.
What we collect
We collect personal information in two situations:
- Waitlist. If you join our waitlist, we collect your email address.
- Applications. If you apply for a retreat, we collect the details you submit through the application form: your name, email, phone number (optional), where you’re based, your fitness level, anything you choose to tell us about your health, and your message to us.
The health information you give us is what data protection law calls “special category” data. We only ask for it because parts of the retreat, the heat ceremony, hiking, and other physically demanding outdoor activities, have genuine safety considerations. It is optional, you decide how much to share, and we collect it only with your explicit consent (the checkbox on the application form).
We also use standard website analytics, which collects anonymous information about how visitors use our site (pages visited, approximate location, device type). This is used to understand traffic, not to identify you.
Why we collect it
- To send you waitlist updates and let you know first when bookings open.
- To read and respond to your application, and decide together whether the retreat is right for you.
- To plan a safe retreat and look after you well while you’re with us.
That’s it. We won’t sell, share, or trade your information with anyone.
Legal basis (for GDPR)
- Waitlist email: your consent, given when you sign up.
- Application details: your consent, and our legitimate interest in considering applications and running the retreat.
- Health information: your explicit consent (Article 9(2)(a) GDPR), which you can withdraw at any time.
Who has access to your data
We use a small number of trusted providers to run the website and handle your information:
- Formspree (United States): delivers application-form submissions to us by email.
- Flodesk (United States): our email/waitlist platform.
- Our website host, which serves the site.
These providers are GDPR-compliant and operate under appropriate safeguards for transferring EU/UK personal data. Only the REPS founders have access to your application.
How long we keep your data
We keep your waitlist email until you unsubscribe, or until we close the waitlist. You can unsubscribe at any time using the link at the bottom of any email we send you.
We keep application details only as long as we need them. If you aren’t offered a place, or decide not to take one, we delete your application, including anything you told us about your health, within 12 months. If you join a retreat, we keep what we need to look after you and meet our legal obligations, and remove your health information once it’s no longer needed.
If you ask us to delete your data, we’ll do it within 30 days.
Your rights
Under GDPR and UK data protection law, you have the right to:
- Access the data we hold about you
- Correct it if it’s wrong
- Ask us to delete it
- Withdraw your consent at any time
- Lodge a complaint with a data protection authority (the ICO in the UK, or the data protection authority in your country if you’re in the EU)
To exercise any of these rights, email us at reps@repsretreat.com.
Cookies
Our website uses cookies that are essential for the site to function, and standard analytics cookies. We don’t use advertising or tracking cookies.
Changes to this policy
We’ll update this policy as the business grows, particularly when we open bookings and start taking payments. If we make significant changes, we’ll let waitlist subscribers know by email.
Questions
If anything here is unclear, or you’d like to know more about how we handle your data, email us at reps@repsretreat.com.
This policy was last updated on 11 June 2026.