Privacy Policy — SunCasa Barcelona Edition

1. Information We Collect

A. Information You Provide

• Full name or stage name
• Email address
• Social media links
• Age (required; 18+)
• Referral name / handle (optional)
• Years of experience, income range (self-reported bands)
• Dietary restrictions and room preferences
• Emergency contact information (optional)
• Retreat goals and other details shared in free-text fields
• Resident Captain interest + explanation (optional)
• Your consent to share limited profile info with other applicants during the application phase.

B. Automatically Collected (Website)

We may collect standard technical data (IP address, device/browser, pages viewed, referrer, time on page) for security, performance, and analytics.

2. How We Use Your Information

• Review and assess applications and curate the group
• Facilitate the application review and selection process.
• Communicate about application status and next steps
• Process the refundable deposit (optional) via Stripe
• Manage on-site participation, logistics, and safety
• Improve retreat planning and delivery for future editions

We do not sell or rent your personal data.

3. Payments (Stripe)

Deposits (optional) are processed by Stripe, a PCI-compliant payment processor. We do not receive or store your full card details. We may receive your name, email, payment status, and transaction IDs for confirmation and refunds as applicable.

4. Sharing Your Information

A. With Other Applicants (Only if You Consented)

If you check the box agreeing to share your basic profile during application, the following may be visible to other approved applicants: name/stage, social links, basic information. No financial or sensitive data is shared.

B. Service Providers

• Google Sheets — to securely store application entries and internal notes.
• Stripe — to process deposits, final payments, and issue refunds.
• Hosting (e.g., Vercel) — to operate our website and forms.
• Resend — to send application confirmation and transactional emails.

These providers process data on our behalf and under contractual safeguards.

C. Legal & Safety

We may disclose information if required by law or to protect the safety and rights of participants.

5. Storage & Security

• Application data is stored in a private Google Sheet with access restricted to organizers.
• Payment data is handled by Stripe and encrypted in transit.
• Our site uses HTTPS (TLS) for data in transit.

6. Data Retention

We retain application and payment records for up to 36 months, unless you request deletion earlier or retention is required by law (e.g., accounting/financial records). If you participate, some data may be retained as part of the event record.

7. Your Rights

You may request to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your application data (subject to legal/operational limits)
• Withdraw your application
• Opt out of future communications

Contact us at contact@suncasa.space with the subject line “Privacy — Barcelona Retreat”.

8. International Transfers

We may process or store data in countries outside your own. We implement safeguards consistent with applicable law (including GDPR where relevant).

9. Cookies & Tracking

We may use cookies for site functionality and analytics. You can control cookies via your browser settings. If we implement additional third-party analytics or advertising pixels, this policy will be updated accordingly.

10. Children’s Privacy

The Retreat and website are not intended for individuals under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the latest version. We encourage you to review it periodically.

12. Contact

For privacy questions or requests, email contact@suncasa.space.