Privacy Policy

1. About This Policy

Sanctum 7 respects your privacy and is committed to protecting your personal information in accordance with the Privacy Act 2020. This policy explains what information we collect, why, how we use it, and your rights in relation to it.

2. What We Collect

We collect personal information you provide directly, including your name, contact details, payment information, and information you share via our pre-arrival questionnaire, consultations with practitioners, and correspondence with us. We also collect personal information when you enquire through a Facebook or Instagram lead form, submit an enquiry through our website, or otherwise register interest in Sanctum 7, including your name, email address, and phone number. We may also collect information from third-party providers you engage in during your stay (see Section 5).

3. Health Information

As part of planning a safe and suitable retreat experience, we ask you to disclose health information, including pre-existing medical conditions, medications, allergies, and mental health considerations, both at the time of booking and via a more detailed pre-arrival questionnaire. Health information is treated as sensitive personal information. We collect only what is necessary to plan your stay safely, and access is limited to the staff and practitioners directly involved in your care.

4. Why We Collect It

We use your personal information to: process and manage your booking; plan and deliver a safe, personalised retreat experience; communicate with you before, during, and after your stay; process payments; and, where you have provided consent, to feature your name, image, or feedback in our marketing materials, including our website and social media.

5. Sharing With Third Parties

We share relevant information with the practitioners and providers involved in delivering your retreat, including our resident chef, naturopath, and any third-party add-on providers you book (such as IvyRevive for IV drip therapy). We do not sell your personal information. We use Bookinglayer to manage bookings, payments, and guest communication, and Squarespace to host our website. Both may process personal information on our behalf as part of providing these services.

We also use Meta (Facebook and Instagram) and Google Analytics to deliver and measure our advertising. If you enquire through a Facebook or Instagram lead form, your information is shared with us by Meta in accordance with Meta's own privacy policies. We may also share limited information with Meta and Google in hashed (non-readable) form to help us understand which enquiries result from our advertising. This is used only to measure and improve our marketing and is not used to identify you outside of this purpose.

6. Marketing and Communications

Where you have provided consent, we may use your contact details to send you information about Sanctum 7, including retreat availability, offers, and updates. We use Drip to manage these communications. You can unsubscribe at any time using the link included in any email, or by contacting us at hello@sanctum7.co

7. Photography, Testimonials & Marketing Use

From time to time, we may photograph or film at Sanctum 7 for marketing purposes, and may feature guest feedback (including names, where provided) on our website, social media, or other marketing materials. We will not use identifiable images or attribute feedback to you without your consent. If you would prefer not to be photographed, filmed, or named in this way, please let us know at any time before, during, or after your stay, and we will respect that preference.

8. Cookies & Website Analytics

Our website may use cookies and similar technologies, including Meta Pixel, Google Analytics, and Google Tag Manager, to understand how visitors use our site and to measure the effectiveness of our advertising. These tools may collect information such as pages visited and actions taken on our site, such as submitting an enquiry form.

Where technically possible, information shared with Meta for advertising measurement purposes is hashed before transmission. You can control or disable cookies through your browser settings, and you can manage your advertising preferences directly through your Facebook or Instagram account settings. For more detail on how our website operates, see Squarespace's own privacy and cookie practices.

9. Retention

We retain your health information for 2 years following the end of your retreat, after which it is securely deleted, unless a longer period is required by law or you request otherwise. Other booking and contact information may be retained for longer where reasonably necessary for our business records or in case you book with us again.

Where an enquiry does not proceed to a booking, we retain that enquiry information for 12 months from the date of enquiry, after which it is securely deleted.

10. Your Rights

Under the Privacy Act 2020, you have the right to access the personal information we hold about you and to request correction of any inaccurate information. To make a request, contact us at hello@sanctum7.co

11. Data Security

We take reasonable steps to protect your personal information from loss, misuse, or unauthorised access, including through the security practices of the third-party platforms we use.

12. Complaints

If you have concerns about how we've handled your personal information, please contact us at hello@sanctum7.co in the first instance. If you remain unsatisfied, you have the right to make a complaint to the Office of the Privacy Commissioner (privacy.org.nz).

13. Changes to This Policy

We may update this policy from time to time. The current version is available on our website.

14. Contact

Questions about this policy or your personal information can be directed to hello@sanctum7.co

Last updated: 3 September 2026