We, at Bōkan Health Ltd , are dedicated to serving our customers and contacts to the best of  our abilities. Part of our commitment involves the responsible management of personal  information collected through our website bokancastleashby.com, and any related interactions.  Our primary goals in processing this information include: 

▪ Enhancing the user experience on our platform by understanding customer needs and  preferences. 

▪ Providing timely support and responding to inquiries or service requests.

▪ Improving our products and services to meet the evolving demands of our users.

▪ Conducting necessary business operations, such as billing and account management. 

It is our policy to process personal information with the utmost respect for privacy and security.  We adhere to all relevant regulations and guidelines to ensure that the data we handle is  protected against unauthorized access, disclosure, alteration, and destruction. Our practices  are designed to safeguard the confidentiality and integrity of your personal information, while  enabling us to deliver the services you trust us with. 

▪ We do have a designated Data Protection Officer (DPO). Should you have any questions  or require further information about how we manage personal information, please feel  free to contact us at dpcontroller@thefalcon-castleashby.com. 

​

Your privacy is our priority. We are committed to processing your personal information  transparently and with your safety in mind. This commitment extends to our collaboration with  third-party services that may process personal information on our behalf, such as in the case of  sending invoices. Rest assured, all activities are conducted in strict compliance with applicable  privacy laws.

Our privacy policy is designed to protect the personal information of all our stakeholders,  including website visitors, registered users, and customers. Whether you are just browsing our  website bokancastleashby.com, using our services as a registered user, or engaging with us as a  valued customer, we ensure that your personal data is processed with the highest standards of  privacy and security. This policy outlines our practices and your rights related to personal  information.

Our commitment to transparency and data protection extends to how we collect and use your  personal information. We gather personal data through various interactions, including but not  limited to, when you utilize our services or products such as Wellness Retreats, Spa treatments,  bodywork, yoga classes, forest therapy, meditation, or directly provide information to us. 

​

The following list details the types of personal information we may process: ▪ First and last name

▪ Date of birth 

▪ Health data 

▪ Email address and/or Phone number 

▪ Address and city 

​

Please note, that we only process information that is essential for delivering our services,  complying with legal obligations, or enhancing your user experience. Your privacy is paramount,  and we are dedicated to handling your personal information responsibly and in accordance with  all applicable laws. 

At Bōkan Health Ltd , we believe in using personal information responsibly and ethically. The  data we collect serves multiple purposes, all aimed at enhancing the services we offer and  ensuring the highest level of satisfaction among our users, customers, and employees. Here are  the key ways in which we use the personal information collected: 

▪ Authentication and security 

▪ Compliance with legal obligations 

▪ Customer support 

▪ Research and development 

▪ Customizing and adapting user experience 

▪ Analytics and performance tracking 

▪ User engagement and retention 

▪ Marketing and advertising 

​

Your privacy is our priority. We process your personal information transparently and in  accordance with your preferences and applicable privacy laws. We are committed to ensuring  that your data is used solely for the purposes for which it was collected and in ways that you  have authorized. 

Data storage 

▪ Personal information is stored in secure servers located in the following locations:  US,GB. For services that require international data transfer, we ensure that such  transfers comply with all applicable laws and maintain data protection standards  equivalent to those in our primary location. 

▪ Data hosting partners: We partner with reputable data hosting providers committed to  using state-of-the-art security measures. These partners are selected based on their  adherence to stringent data protection standards. 

Data protection measures 

▪ Encryption: To protect data during transfer and at rest, we employ robust encryption  technologies.

Data processing agreements 

When we share your data with third-party service providers, we do so under the protection of  Data Processing Agreements (DPAs) that ensure your information is managed in accordance  with GDPR and other relevant data protection laws. These agreements mandate that third  parties implement adequate technical and organizational measures to ensure the security of  your data. 

We believe in transparency and providing you with control over your personal information. You  will always be informed about any significant changes to our sharing practices, and where  applicable, you will have the option to consent to such changes. 

​

Your trust is important to us, and we strive to ensure that your personal information is disclosed  only in accordance with this policy and when there is a justified reason to do so. For any queries  or concerns about how we share and disclose personal information, please reach out to us at  admin@bokancastleashby.com or +44 01604698005. 

At Bōkan Health Ltd , we recognize and respect your rights regarding your personal information,  in accordance with the General Data Protection Regulation (GDPR) and other applicable data  protection laws. We are committed to ensuring you can exercise your rights effectively. Below is  an overview of your rights and how you can exercise them: 

Your rights 

▪ Right of access (Art. 15 GDPR): You have the right to request access to the personal  information we hold about you and to obtain information about how we process it. 

▪ Right to rectification (Art. 16 GDPR): If you believe that any personal information we  hold about you is incorrect or incomplete, you have the right to request its correction or  completion. 

▪ Right to erasure ('right to be forgotten') (Art. 17 GDPR): You have the right to request  the deletion of your personal information when it is no longer necessary for the  purposes for which it was collected, among other circumstances. 

▪ Right to restriction of processing (Art. 18 GDPR): You have the right to request that we  restrict the processing of your personal information under certain conditions. 

▪ Right to data portability (Art. 20 GDPR): You have the right to receive your personal  information in a structured, commonly used, and machine-readable format and to  transmit those data to another controller. 

▪ Right to object (Art. 21 GDPR): You have the right to object to the processing of your  personal information, under certain conditions, including processing for direct  marketing. 

▪ Right to withdraw consent (Art. 7(3) GDPR): Where the processing of your personal  information is based on your consent, you have the right to withdraw that consent at any  time without affecting the lawfulness of processing based on consent before its  withdrawal.

▪ Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with  a supervisory authority if you believe our processing of your personal information  violates applicable data protection laws. 

To exercise any of these rights, please contact us at dpcontroller@thefalcon-castleashby.com.  We will respond to your request in accordance with applicable data protection laws and within  the timeframes stipulated by those laws. Please note, in some cases, we may need to verify your  identity as part of the process to ensure the security of your personal information. 

​

We are committed to facilitating the exercise of your rights and to ensuring you have full control  over your personal information. If you have any questions or concerns about how your personal  information is handled, please do not hesitate to get in touch with us.

At Bōkan Health Ltd , we value your privacy and are committed to being transparent about our  use of cookies and other tracking technologies on our website bokancastleashby.com. These  technologies play a crucial role in ensuring the smooth operation of our digital platforms,  enhancing your user experience, and providing insights that help us improve.

Cookies are small data files placed on your device that enable us to remember your preferences  and collect information about your website usage. Tracking technologies, such as web beacons  and pixel tags, help us understand how you interact with our site and which pages you visit.

▪ Essential cookies: Necessary for the website's functionality, such as authentication and  security. They do not require consent. 

▪ Performance and analytics cookies: These collect information about how visitors use  our website, which pages are visited most frequently, and if error messages are received  from web pages. These cookies help us improve our website. 

▪ Functional cookies: Enable the website to provide enhanced functionality and  personalization, like remembering your preferences. 

▪ Advertising and targeting cookies: Used to deliver advertisements more relevant to you  and your interests. They are also used to limit the number of times you see an  advertisement and help measure the effectiveness of the advertising campaign.

Upon your first visit, our website will present you with a cookie consent banner, where you can:

▪ Accept all cookies: Consent to the use of all cookies and tracking technologies. 

▪ Reject non-essential cookies: Only essential cookies will be used to provide you with  necessary website functions. 

▪ Customize your preferences: Choose which categories of cookies you wish to allow.

To appeal a decision we may make regarding your request, please contact us within 60 days of  receiving our response by submitting your request through the link on our website or by using  one of the following methods: 

Email: admin@bokancastleashby.com 

Phone: 01604698005 In your appeal request, please include your original request, the date of  our response, and a brief explanation of why you believe our decision was incorrect. 

For residents of the United States of America the following provisions apply:

A. Individual rights 

The California Consumer Privacy Act provides residents of California specific rights regarding  their personal information, additional to what has been described before. 

B. Right to Know 

You may request that we disclose to you what personal information we have collected, used,  shared, or sold about you, and why we collected, used, shared, or sold that information.  Specifically, you may request the disclosure of: 

▪ The categories of personal information collected 

▪ Specific pieces of personal information collected 

▪ The categories of sources from which we collected personal information ▪ The purposes for which personal information is used 

▪ The categories of third parties with whom personal information is shared ▪ The categories of information that are sold or disclosed to third parties

C. Right to Delete 

You may request that we delete personal information we have collected about you.

D. Right to Correct 

You may ask us to correct inaccurate information that we have about you.

E. Right to Limit 

You can request us to only use your sensitive personal information (for example, your social  security number, your genetic data, etc.) for limited purposes, such as providing you with the  services you requested. 

F. Right to Opt-Out 

You may request that we stop processing your personal information (“opt-out”). You can make  use of your right to

opt-out of the sale or sharing of personal information by submitting your  request through the link on our website. 

G. Right to Non-Discrimination 

You have the right to be protected from discrimination for exercising your rights.

H. Submitting requests

You may submit your request by sending an email to admin@bokancastleashby.com or by  phone at +44 01604698005. We will compare the information you submit to us with the  information we have in our records to verify your request. We will then respond to your request  in accordance with the requirements. 

We will review your appeal and respond with a written explanation within 60 days regarding any  actions taken or not taken in response to the appeal. If your appeal is denied, we will provide  you with a method to contact the Texas Attorney General to submit a complaint. 

We will review your appeal and respond with a written explanation within 60 days regarding any  actions taken or not taken in response to the appeal. If your appeal is denied, we will provide  you with a method to contact the Virginia Attorney General to submit a complaint. 

J. Sensitive data and/or biometric data 

We only process sensitive personal data with your prior consent and only for specific purposes  that are clearly disclosed at the time of collection. You may withdraw your consent at any time  by submitting your request through the link on our website or by email to  admin@bokancastleashby.com. 

At Bōkan Health Ltd , we may use your personal information to send you direct marketing  communications about our products, services, promotions, and other relevant information that  we believe may be of interest to you. We are committed to ensuring that our direct marketing  practices are transparent, lawful, and in compliance with applicable data protection laws,  including the General Data Protection Regulation (GDPR) and the ePrivacy Directive.

▪ Opt-in consent: We will obtain your explicit opt-in consent before sending you direct  marketing communications, where required by law. This means that you will have the  opportunity to actively consent to receiving marketing messages from us before we send  them to you. 

▪ Unsubscribe option: Every direct marketing communication we send will include clear  instructions on how to unsubscribe or opt-out from receiving future marketing  communications. You can exercise your right to opt-out at any time, and we will  promptly honor your request to stop sending you marketing messages. 

We may use your personal information to send you direct marketing communications via  various channels, including: 

▪ Email 

You have control over the direct marketing communications you receive from us. You can  manage your communication preferences by using the unsubscribe link provided in our  marketing emails or text messages.

At Bōkan Health Ltd , we may use your personal information to send you direct marketing  communications about our products, services, promotions, and other relevant information that  we believe may be of interest to you. We are committed to ensuring that our direct marketing  practices are transparent, lawful, and in compliance with applicable data protection laws,  including the General Data Protection Regulation (GDPR) and the ePrivacy Directive.

At Bōkan Health Ltd , we understand the importance of protecting your personal information  and take proactive measures to safeguard it. In the event of a data breach that poses a risk to  your privacy rights and freedoms, we have established clear procedures for promptly  identifying, assessing, and mitigating the impact of the breach. Our data breach notification  procedures are designed to comply with applicable data protection laws and regulations,  including the General Data Protection Regulation (GDPR).

▪ Internal monitoring: We employ robust security measures and monitoring systems to  detect and respond to potential data breaches promptly. 

▪ Assessment of breach impact: Upon discovery of a data breach, we will conduct a  thorough assessment to determine the nature and scope of the breach, including the  types of personal information involved and the potential impact on affected individuals. 

▪ Regulatory authorities: If required by law, we will notify the relevant data protection  authorities of the data breach within 30 day(s), following the procedures specified by  applicable regulations. 

▪ Affected individuals: If a data breach poses a significant risk to your privacy rights and  freedoms, we will notify you within 30 day(s), providing clear and concise information  about the breach, the types of personal information affected, and the steps you can take  to protect yourself.

▪ Email notification: We may notify affected individuals via email, using the contact  information provided to us, if feasible and appropriate.

In the event of a data breach, we are committed to providing affected individuals with the  support and assistance they need, including guidance on steps they can take to mitigate the  potential risks associated with the breach. 

Point of contact: If you have any questions or concerns about a data breach or believe you may  have been affected, please contact us immediately at admin@bokancastleashby.com or +44  01604698005.