Privacy Policy

1. Introduction

Limiar ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

The data controller responsible for your personal data is Limiar, located in Central Portugal. You can contact us at soundjourneyportugal@gmail.com.

2. Information We Collect

2.1 Information You Provide

When you use our contact form or book a retreat, we collect:

• Name
• Email address
• Phone number (optional)
• Message content and inquiry details
• Booking preferences and special requirements

2.2 Information Automatically Collected

We automatically collect certain information when you visit our website:

• IP address
• Browser type and version
• Pages visited and time spent on pages
• Device information
• Anonymous analytics data via PostHog

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you submit our contact form or accept cookies
• Contract: To process and fulfill retreat bookings
• Legitimate Interest: To improve our services and website functionality
• Legal Obligation: To comply with applicable laws and regulations

4. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your inquiries and communicate with you
• To process retreat bookings and provide our services
• To send you information about upcoming retreats (with your consent)
• To improve our website and services
• To analyze website traffic and user behavior (anonymously)
• To comply with legal obligations

5. Cookies and Analytics

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic.

5.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the website to function properly (routing, form submissions, remembering your cookie consent choice). Always active — no consent required.
• Analytics cookies: Anonymous statistics to understand how visitors use our site. Off by default.
• Marketing / Advertising cookies: Meta Pixel by Meta Platforms Ireland. Off by default. See section 5.2 below.

You can manage your cookie preferences at any time through the "Cookie settings" link in the site footer, or through our cookie consent banner.

5.2 Meta Pixel (Marketing / Advertising)

With your explicit consent, we load the Meta Pixel on this website. The Meta Pixel is provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin, Ireland).

Purpose: advertising measurement, attribution, and remarketing on Facebook and Instagram. Specifically, we use the Meta Pixel to understand which visitors interact with our website after seeing our ads, and to show relevant content to people who have shown interest in Limiar.

Data processed by Meta after your consent:

• Page visited (URL)
• Browser and device information (user agent, screen resolution, language)
• IP address and technical identifiers
• Interaction data and advertising attribution

We currently track only PageView events. Automatic advanced matching, collection of form-field data, transmission of email/phone/name or other personal data, the Conversions API, and custom conversion events are all disabled. No health or wellness information is transmitted.

Legal basis: your explicit consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time via the "Cookie settings" link in the footer — this will immediately prevent any further Meta Pixel activity.

For more information about how Meta processes your data, see the Meta Privacy Policy.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your information only in the following circumstances:

• Service Providers: Email service providers (Resend) to send communications
• Analytics: PostHog for anonymous website analytics
• Legal Requirements: When required by law or to protect our legal rights

All third-party service providers are GDPR-compliant and process data only as instructed by us.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Contact form inquiries: 2 years from last contact
• Booking information: 3 years for accounting and legal purposes
• Newsletter subscriptions: Until you unsubscribe
• Analytics data: Anonymized and retained for 12 months

After the retention period, we securely delete or anonymize your personal data.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at soundjourneyportugal@gmail.com. We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (SSL/TLS)
• Secure database storage with access controls
• Regular security assessments
• Limited access to personal data on a need-to-know basis

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• GDPR-compliant service providers

11. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the contact form on our website.

14. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority. In Portugal, this is: