Privacy Policy
Last updated: October 24th, 2026
Wild Quiet Adventures is a brand of Breath and Being OÜ, a private limited company registered in Estonia (registry code [code]), with its registered address at [registered address]. Breath and Being OÜ decides how and why your personal data is used, which makes it the data controller under the EU General Data Protection Regulation (GDPR).
We run small-group retreats that combine travel, cacao ceremony and breathwork. To do that well and safely, we need some information about you. This policy explains what we collect, why, who sees it, and what you can ask of us.
Contact for anything about your data: hello [at] wildquietadventures [dot] com
We are not required to appoint a Data Protection Officer. Amelie, founder, is responsible for data protection and answers every privacy request personally.
1. WHO WE ARE
We never sell your data, and we do not use it for automated decision-making or profiling.
We only collect what we need for each step of your journey with us. The legal basis is the GDPR article that allows us to use the data.
2. What we collect and why
Breathwork and cacao aren't right for everyone. Once your place is confirmed, we send you a separate health form. We do not ask for health information in the application.
- What we ask: conditions and medications relevant to breathwork and cacao (for example pregnancy, heart conditions, epilepsy, high blood pressure, certain antidepressants), allergies and food intolerances.
- Why: to keep you safe and to adapt or pause a session where needed.
- Legal basis: your explicit consent (GDPR Art. 9(2)(a)), which you give by ticking a separate box on the form. You can withdraw it at any time. If you do, we may not be able to let you take part in some sessions.
- Who sees it: only your two hosts. We share allergies and dietary needs with the kitchen or venue, without saying why. In an emergency, we may share what is needed with medical staff to protect your life (Art. 9(2)(c)).
- Where it is kept: in a secure form tool, never in email threads or group chats.
- When it is deleted: within 60 days after your retreat ends. If an incident happened during the retreat, we keep the relevant part until any claim is settled.
PHOTOS
We love capturing the trip, but we never post you without asking.
- Photos shared in the private guest group stay within the group.
- We only use images of you on our website, social media or marketing if you have ticked the photo consent box. That box is separate from your booking, and saying no changes nothing about your place.
- You can withdraw photo consent at any time. We then remove your images from our website and accounts within 30 days.
3. HEALTH INFORMATION AND PHOTOS
We share only what each partner needs to do their part. Service providers act on our instructions under a data processing agreement.
4. WHO WE SHARE YOUR DATA WITH
TRANSFERS OUTSIDE THE EU
Some of the partners above are outside the European Economic Area. When we transfer data there, we rely on:
- the EU–US Data Privacy Framework, for US providers certified under it;
- the European Commission's Standard Contractual Clauses, where a provider is not certified;
- for venues and partners at your retreat destination, the transfer is necessary to perform your booking (GDPR Art. 49(1)(b)). These countries may not offer the same level of data protection as the EU, so we send them only the minimum they need.
You can ask us for a copy of the safeguards we use.
- see the data we hold about you and get a copy;
- correct anything that is wrong;
- delete your data, unless we must keep it by law (for example, accounting records);
- restrict how we use it while a question is being resolved;
- transfer it to you or another provider in a common format;
- object to uses based on our legitimate interests;
- withdraw your consent at any time, for the newsletter, health form, photos or cookies. This doesn't affect what we did before you withdrew it.
Email hello [at] wildquietadventures [dot] com. We reply within one month, free of charge.
COMPLAINTS
If you're unhappy with how we handle your data, please tell us first. You also have the right to complain to a supervisory authority: in Estonia, the Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate, aki.ee), or the authority in the EU country where you live.
SECURITY
We use providers with strong security, two-factor login on our accounts, and limit access to the two hosts. Health forms are kept separately from everything else.
CHANGES TO THIS POLICY
If we change this policy, we update the date below. If a change affects how we use data you have already given us, we tell you by email first.
