Create Retreats (formerly Pilates North East) is committed to protecting your privacy. This policy explains what personal information we collect, how we use and store it, who we share it with, and the rights you have over your data. It applies to our website, Pilates classes and wellness sessions, UK wellness days, and group and private retreats in Crete.
Who we are
Create Retreats is the data controller responsible for your personal information. If you have any questions about this policy or how we handle your data, please contact us:
Email: info@createretreats.co.uk
Phone: 07718 520869
The information we collect
Depending on how you interact with us, we may collect:
- your name and contact details (email address, phone number, and postal address where relevant);
- booking information for classes, wellness days and retreats;
- health information you provide on our screening forms, and any medical or dietary needs relevant to your participation;
- identity and travel details needed for retreats, such as passport or ID details;
- payment information needed to process your booking (see “Payments” below);
- any other information you choose to give us in forms, emails or messages.
Some of this — particularly health information and identity details — is classed as “special category” or sensitive personal data, which we handle with extra care.
How we collect your information
We collect information when you:
- book a class, wellness day or retreat through our online booking system;
- complete a screening form or booking form;
- contact us by email, phone or through our website;
- sign up to receive our newsletter or updates;
- browse our website (see “Cookies” below).
How we use your information, and our lawful bases
Under UK GDPR, we must have a lawful basis for using your data. We use your information to:
- Provide our services and fulfill your booking: confirming your place, sending invoices and confirmations, arranging transfers, activity times and schedule details, and meeting any particular needs during your stay. Lawful basis: performance of a contract.
- Keep you safe and meet our obligations: reviewing screening information and, where relevant, meeting the requirements of our insurers. Lawful basis: legal obligation and legitimate interests.
- Communicate with you: responding to enquiries and sending important information about your booking. Lawful basis: contract and legitimate interests.
- Send you marketing: where you have given consent, we may send newsletters, promotions and featured offers we think you’ll find useful, supportive and informative. Lawful basis: consent.
- Handle special category data: (health and identity information) — Lawful basis: your explicit consent, and where necessary for insurance and safety purposes.
Marketing and your choices
We only send marketing where you have given us permission. Every marketing email includes an unsubscribe link, and you can opt out at any time by clicking it or emailing info@createretreats.co.uk. Opting out of marketing won’t affect any service messages we need to send about a booking you’ve made.
Cookies
Our website uses cookies to help it function and to understand how visitors use the site so we can improve it. You can control or disable cookies through your browser settings.
Who we share your information with
We never sell your data. We share it only where necessary to run our services, with:
- payment processors who handle your booking payments securely (Stripe);
- our booking and class-scheduling platform;
- our email and newsletter provider, where you’ve opted in to marketing;
- our insurers, where required;
- trusted suppliers who help deliver your retreat, such as accommodation, airport transfer and activity providers in Crete;
- our website hosting and IT providers;
- professional advisers or authorities where we are legally required to do so.
Storing your information and how long we keep it
Your data is stored securely, and sensitive information is handled in accordance with our insurers’ requirements. Passport and identity details are kept only for the duration of your trip and then deleted. We keep other personal information only for as long as necessary:
- booking and health records: 12 months after your class or retreat;
- financial and payment records: 6 years, per HMRC requirements;
- marketing contact details: until you unsubscribe.
International transfers
Our retreats take place in Crete, Greece. Where we share your information with suppliers based in the EU (such as accommodation and transfer providers) to deliver your retreat, we ensure it is handled with appropriate safeguards and in line with this policy.
How we keep your data secure
We take appropriate technical and organisational measures to protect your personal information against loss, misuse or unauthorised access, and store sensitive information securely in line with the policies required by our insurers.
Your rights
Under UK data protection law you have the right to:
- be informed about how your data is used (this policy);
- access the personal data we hold about you;
- rectify any inaccurate or incomplete information;
- erase your data (“right to be forgotten”) where there’s no reason for us to keep it;
- restrict how we process your data;
- data portability — receive your data in a portable format;
- object to processing, including for marketing;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email us at info@createretreats.co.uk. We’ll respond within one month.
How to complain
If you have a concern about how we’ve handled your data, please contact us first, and we’ll do our best to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page.
Last updated: August 2026.
Contact us
For any questions about this policy or your personal data:
Email: info@createretreats.co.uk
Phone: 07718 520869
