Privacy policy.

At Omtrips (“us”, “we”, “our” or the “Company”) we value your privacy and the importance of safeguarding your data. This Privacy Policy (the “Policy”) describes our privacy practices for the activities set out below. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. In this Policy, personal data (“Personal Data”) refers to any information that on its own, or in combination with other available information, can identify an individual.

We are committed to protecting your privacy in accordance with the highest level of privacy regulation. As such, we follow the obligations under the below regulations:

• Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable provincial legislation
• Quebec Law 25
• the EU’s General Data Protection Regulation (GDPR)
• Brazil’s Data Protection Legislation (LGPD)
• California’s Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) and California Online Privacy Protection Act (CalOPPA)
• Colorado Privacy Act (CPA)
• Utah Consumer Privacy Act (UCPA)
• Connecticut Data Privacy Act (CTDPA)
• Virginia Consumer Data Protection Act (VCDPA)
• South Africa’s Protection of Personal Information Act (POPIA)

Scope

This policy applies to the Omtrips websites, domains, applications, services, and products.

This Policy does not apply to third-party applications, websites, products, services or platforms that may be accessed through (non-Omtrips) links that we may provide to you. These sites are owned and operated independently from us, and they have their own separate privacy and data collection practices. Any Personal Data that you provide to these websites will be governed by the third party’s own privacy policy. We cannot accept liability for the actions or policies of these independent sites.

Processing Activities

This Policy applies when you interact with us by doing any of the following:

• Make use of our application and services as an authorized user
• Visit any of our websites that link to this Privacy Statement

What personal data we collect

When you make a purchase, or attempt to make a purchase, we collect the following types of Personal Data:

• Account Information such as your name, email address, and password
• Payment Information such as your billing address, phone number, credit card, debit card or other payment method
• Financial Information including credit card numbers
• Purchase Information specifically if personalized or unique
• Location Data

When you use our products and/or features, we collect the following types of Personal Data:

• Account Information such as your name, email address, and password
• Payment Information such as your billing address and payment method
• Financial Information including credit card numbers
• Purchase Information specifically if personalized or unique
• Location Data
• Feedback, such as customer support or product reviews
• Social Media Information
• Product information, such as registration and licensing information
• Content, such as posts, comments, audio, or documents

When you use specific features of the Platform, we also collect:

• Job application data: when you apply to a job, we collect your name, email address, phone number (optional), application note, portfolio or profile link (optional), years of experience (optional), and availability date (optional). This information is transmitted to the employer who posted the role.
• Travel buddy post data: when you post or reply in the travel buddies community, we collect your trip details, destination, dates, and the description you write. Travel buddy posts are published publicly on the Platform.
• Host verification data: when you submit a retreat listing, we collect your years of experience, proof-of-experience materials (links, images, or PDFs), and your venue booking contract.
• Seller verification data: when you list a business or property for sale, we collect, depending on the verification route you choose, a business registration document, a utility bill or property tax receipt, or for land sales your land title document and government-issued ID, including a check that the names match. These documents are used solely to verify your connection to what you are listing. They are kept private, never published, and deleted once your listing is verified or rejected.
• Business listing content: the details of a business or property you list for sale (type, location, asking price, what’s included, ownership structure) are published publicly on the Platform.

How we collect your personal data

From you. You may give us your Account Information, Payment Information, Financial Information, Demographic Data, Purchase Information, Content, Feedback, and Product Information by filling in forms, using our products or services, entering information online or by corresponding with us by post, phone, email or otherwise.

Automated technologies or interactions. As you interact with our website, we may automatically collect Device Data about your equipment, Usage Data about your browsing actions and patterns, and Contact Data where tasks carried out via our website remain uncompleted, such as incomplete orders or abandoned baskets. We collect this data using cookies, server logs and other similar technologies.

Third parties. We may receive Personal Data about you from analytics providers, payment providers, social media platforms when you log in via them, and organizations who share data for fraud prevention.

Device and usage data

When you visit an Omtrips website, we automatically collect and store information about your visit using browser cookies (files which are sent by us to your computer), or similar technology. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Purpose and legal basis for processing

We collect and use your Personal Data with your consent to provide, maintain, and develop our products and services and understand how to improve them. Purposes include delivering your product or service, building a safe and secure environment, providing customer support, delivering marketing communications, research and development, and communicating with you about our products and services.

Third party tools

We use these third party tools to process and store your information:

• Supabase (database, authentication, and file storage)
• PayPal (deposit payment processing, listing and membership payments, and host payouts)
• Wise (host payouts)
• Venmo (host payouts)
• Brevo (email)
• Resend (email)
• Google Analytics (usage analytics)

International data transfer and storage

Where possible, we store and process data on servers within the general geographical region where you reside. Your Personal Data may also be transferred to, and maintained on, servers residing outside of your state, province, country or other governmental jurisdiction. In regions that are not considered adequate, we will enter into EU standard contractual clauses (or equivalent measures).

Sharing and disclosure

We share your Personal Data with third parties only in the ways set out in this Policy or at the point of collection:

• With hosts. When you book a retreat, your booking details and contact information are shared with the host so they can fulfil and manage your booking.
• With employers. When you apply to a job, your application data is transmitted to the employer who posted the role. The employer processes your application independently, as a separate data controller, under their own privacy practices.
• With other users. If you and another user both opt in to the travel buddy contact reveal, your name and email address are shared with that user (and theirs with you). Public content you post is visible to anyone, including travel buddy posts, listings, and reviews.
• With sellers. If you inquire about a business or property for sale, your inquiry and contact details are passed to the seller, who handles them independently.
• With service providers. As described under Third Party Tools above.

We also use Google Analytics to help us understand how our customers use the site.

Health-related and other sensitive information

Some retreat categories (for example, healing, detox, or plant medicine retreats) may reveal information about your health, beliefs, or lifestyle, and you may choose to share health information with a host when booking (for example, dietary needs or medical conditions). We process such information only to facilitate your booking and communication with the host, and never for advertising or profiling. Please share sensitive details with hosts directly where possible, rather than in public content.

What are cookies?

A cookie is a small file with information that your browser stores on your device. Information in this file is typically shared with the owner of the site in addition to potential partners and third parties. The collection of this information may be used in the function of the site and/or to improve your experience.

How we use cookies

• Strictly necessary. As a web application, we require certain necessary cookies to run our service.
• Preference. We use preference cookies to help us remember the way you like to use our service and personalize content.
• Analytics. We collect analytics about the types of people who visit our site to improve our service and product.

How to control your cookies

So long as the cookie is not strictly necessary, you may opt in or out of cookie use at any time.

We will only retain your Personal Data for as long as necessary for the purpose for which that data was collected and to the extent required by applicable law. When we no longer need Personal Data, we will remove it from our systems and/or take steps to anonymize it.

Verification documents submitted with business-for-sale listings (registration documents, utility bills, title documents, and government ID) are retained only until a verification decision is made, and are deleted once your listing is verified or rejected.

If we are involved in a merger, acquisition or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy. Under certain circumstances we may be required to disclose your personal information in response to valid requests by public authorities.

We have appropriate organizational safeguards and security measures in place to protect your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.

The communication between your browser and our website uses a secure encrypted connection wherever your Personal Data is involved.

In the unfortunate event of a Personal Data breach, we will notify you and any applicable regulator when we are legally required to do so.

We do not knowingly collect Personal Data from children under the age of 18 years.

Depending on your geographical location and citizenship, your rights are subject to local data privacy regulations. These rights may include:

• Right to access. Learn whether we are processing your Personal Data and request a copy.
• Right to rectification. Have incomplete or inaccurate Personal Data corrected.
• Right to be forgotten. Request deletion of Personal Data, unless we need to retain it to comply with a legal obligation.
• Right to restriction of processing. Restrict our processing of your Personal Data under certain circumstances.
• Right to portability. Obtain Personal Data we hold about you in a structured, electronic format.
• Right to opt out. Opt out of targeted advertising, the sale of Personal Data, and certain profiling activities.
• Right to objection. Object to processing based on our legitimate interest.
• Nondiscrimination and nonretaliation. You have the right not to be denied service or have an altered experience for exercising your rights.
• File an appeal or complaint. File an appeal based on our response, or a claim before your competent data protection authority.

Withdrawing consent

If you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge, such as when you wish to opt out from marketing messages.

How to exercise your rights

You can make a request to exercise any of these rights by contacting our privacy team using the details below. For your own privacy and security, at our discretion, we may require you to prove your identity before providing the requested information.

We may modify this Policy at any time. If we make changes we will post an updated version at this website. When using our services, you will be asked to review and accept our Privacy Policy.

To request a copy of your information, unsubscribe from our email list, request for your data to be deleted, or ask a question about your data privacy, please email namaste@omtrips.com.