Privacy Policy

Arif Chandoo is the data controller responsible for the personal information you provide through this website. For any privacy question or to exercise the rights below, contact Arif through the Connect page.

We only collect the information you choose to give us through the forms on this site:

• Enquiries (Connect form): your name, email address, an optional phone number with country code, the topic of your enquiry, and your message.
• Retreat registration: registration and payment are handled by a hosted booking form embedded on the retreat page. That form collects the details it presents to you (for example name, contact details and payment information) directly — see “Payments and booking” below.
• Newsletter: your email address only.
• Automatic information: standard technical details sent by your browser, such as the page URL, your approximate device type (mobile or desktop), and the browser user-agent. We do not run our own analytics on this site.

We do not knowingly collect more than is needed for the purpose above. Dietary, accessibility, emergency-contact and travel details are intended to be collected later in a separate follow-up process, not through these forms.

• To respond to your enquiry (name, email, phone, topic, message) — based on your request (the lawful basis of contract where you are asking about a service, or legitimate interests to reply to you).
• To process your retreat booking and payment — based on the contract between you and Arif, and to take steps at your request before entering that contract.
• To send the newsletter (email address) — based on your consent. You can unsubscribe at any time using the link in any email.

The retreat booking and deposit payment are handled by a hosted checkout form embedded on the Marrakech retreat page. Card details are entered directly into the payment provider's secure fields and are not collected or stored by this website itself.

Payments are processed through Stripe, which is integrated into the TekLyft CRM and form platform that hosts the booking form. This means TekLyft may retain transaction and payment-related records associated with your booking entry (such as payment status and confirmation), while the card details themselves are handled securely by Stripe. Arif receives confirmation that a booking and payment have been made, along with the registration details you submitted to the hosted form.

To provide the services above, your information is shared with:

• TekLyft — the CRM and form platform that stores and manages enquiry, newsletter and registration submissions so Arif can respond.
• Stripe — the payment provider for retreat deposits, as described above.
• Website hosting — the service that hosts this website and processes page requests.

This means some information may be processed outside the UK, including in the United States (where TekLyft and Stripe operate). Where information leaves the UK, appropriate safeguards such as standard contractual clauses are expected to be in place.

We retain the personal information you provide for as long as is useful to manage your relationship with us, unless you unsubscribe or formally request its removal. In practice:

• Enquiry and contact details — retained so we can respond and follow up, and to keep a record of our correspondence.
• Retreat booking and payment records — retained after the retreat to handle any follow-up, queries, complaints and accounting, and to keep a record of your participation.
• Newsletter — your email is kept until you unsubscribe, after which you will no longer receive marketing emails.

We do not automatically delete your information after the retreat. You can ask us to remove your data at any time by contacting Arif through the Connect page, subject to any records we are required to keep for legal, accounting or tax purposes.

This website itself does not set advertising or analytics cookies. The embedded booking form may use its own cookies, with consent handled by that provider. YouTube videos on the Talks page are only loaded after you choose to play one; until then, no YouTube content is embedded. When you do play a video, YouTube may set cookies and collect viewing data according to its own policy.

We use a privacy-enhanced YouTube embed where supported. You can always choose “Watch on YouTube” instead, and you can manage YouTube’s cookies through your browser and YouTube account settings.

By registering for the retreat, submitting the enquiry form, or completing any other form on this website, you consent to Arif Chandoo contacting you about the retreat, the programme and related communications — including follow-up details, updates and marketing about future events, courses and offerings. This consent is given by default when you register or submit a form; it is not a separate optional step.

You can unsubscribe from marketing emails at any time using the link in any email, or by asking us to stop. We will continue to send you communications that are necessary to fulfil your booking (such as retreat logistics) until that booking is complete.

Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal information, to object to certain processing, to receive your information in a portable form, and to withdraw consent at any time. To use any of these rights, contact Arif through the Connect page.

The retreat may involve collecting dietary, accessibility or health-related information in a later follow-up process, and the programme touches on faith and reflection. Where any information amounts to special-category data (for example health or religious beliefs), additional conditions and explicit consent may be required. No sensitive data is collected through the current forms; any such fields added later will be reviewed for the appropriate conditions and consent before they go live.

This policy was last updated on 16 September 2026. Material changes will be reflected on this page.