Last updated: May 24, 2026
SanctumStay (“SanctumStay,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect when you visit sanctumstay.com (the “Website”), how we use and protect it, and the choices and rights available to you.
This policy is written to meet the requirements of the European Union and United Kingdom General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), and other applicable United States state privacy laws. SanctumStay is a digital publication with a primarily United States-based readership, alongside readers in the European Economic Area (“EEA”), the United Kingdom, and elsewhere. This policy applies to all visitors regardless of location.
By using the Website, you acknowledge that you have read and understood this Privacy Policy.
Who we are
SanctumStay is an independent digital magazine covering intentional travel and wellness destinations. For the purposes of the GDPR, SanctumStay is the “data controller” responsible for personal data collected through the Website.
If you have any questions about this policy or how your information is handled, you can contact us at partners@sanctumstay.com.
Information we collect
We collect information in three ways: information you provide to us directly, information collected automatically as you use the Website, and information received from third-party services.
Information you provide directly
- Contact information. If you email us or use a contact form, we receive your name, email address, and any information you choose to include in your message.
- Newsletter and subscriptions. If you sign up for a newsletter or mailing list, we collect your email address and any preferences you provide.
- Comments. If the Website allows comments and you choose to leave one, we collect the name, email address, and content you submit, along with your IP address and browser information.
Information collected automatically
When you visit the Website, certain information is collected automatically by our hosting infrastructure and analytics tools, including:
- Log and device data – your IP address, browser type and version, operating system, referring website, pages viewed, and the date and time of your visit.
- Approximate location – a general geographic location (such as country or region) inferred from your IP address. We do not collect precise GPS location.
- Usage data – how you navigate and interact with the Website.
- Cookies and similar technologies – see the “Cookies and tracking technologies” section below.
Information from third parties
We may receive limited information from service providers that support the Website, such as analytics providers and email or newsletter platforms. We do not purchase personal information from data brokers.
Cookies and tracking technologies
Cookies are small text files stored on your device. The Website may use the following categories:
- Strictly necessary cookies – required for the Website to function, including core WordPress cookies. These cannot be switched off.
- Analytics and performance cookies – help us understand how visitors use the Website so we can improve it. These may include third-party analytics services such as Google Analytics.
- Functional cookies – remember choices you make to improve your experience.
You can control or delete cookies through your browser settings, and where required by law you will be asked for consent before non-essential cookies are placed. Disabling cookies may affect how parts of the Website work.
How we use your information
We use the information we collect to:
- operate, maintain, and improve the Website and its content;
- respond to your messages, questions, and requests;
- send newsletters or updates you have requested, and allow you to unsubscribe at any time;
- analyze traffic and usage trends to improve our editorial and design decisions;
- protect the Website against fraud, abuse, and security threats; and
- comply with legal obligations and enforce our terms.
We do not use your information for automated decision-making that produces legal or similarly significant effects.
Legal bases for processing (EEA and UK visitors)
If you are located in the EEA or the United Kingdom, we process your personal data only where we have a valid legal basis under the GDPR:
- Consent – for example, when you subscribe to a newsletter or agree to non-essential cookies. You may withdraw consent at any time.
- Legitimate interests – to operate, secure, and improve the Website, provided your rights do not override those interests.
- Legal obligation – where we must process data to comply with applicable law.
How we share your information
We do not sell your personal information for money. We share information only in the following limited circumstances:
- Service providers. With companies that help us operate the Website – such as web hosting, analytics, and email delivery providers – who process information on our behalf and under contractual confidentiality obligations.
- Legal and safety reasons. Where required to comply with applicable law, respond to lawful requests, or protect the rights, property, or safety of SanctumStay, our readers, or others.
- Business transfers. If SanctumStay is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
Please note that certain analytics or advertising cookies may be considered a “sale” or “sharing” of personal information under some United States state privacy laws. See “Your privacy rights” below for how to opt out.
International data transfers
SanctumStay serves readers around the world, and the service providers we rely on may store or process data in the United States and other countries. Where personal data of EEA or UK residents is transferred outside those regions, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to ensure your data remains protected.
Data retention
We keep personal information only as long as necessary for the purposes described in this policy, or as required by law. For example, newsletter data is kept until you unsubscribe, and contact correspondence is kept only as long as needed to address your request and for a reasonable period afterward. Analytics data is retained according to the settings of our analytics provider.
Data security
We take reasonable technical and organizational measures to protect personal information against loss, misuse, and unauthorized access. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Your privacy rights
If you are in the EEA or the United Kingdom
Under the GDPR you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; restrict or object to processing; request data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority.
If you are in the United States
Depending on your state of residence (for example, California, Virginia, Colorado, Connecticut, and a growing number of other states), you may have the right to: know and access the categories and specific pieces of personal information we have collected; request deletion of your personal information; request correction of inaccurate information; opt out of the “sale” or “sharing” of personal information and of targeted advertising; and not be discriminated against for exercising these rights.
Under the CCPA/CPRA, California residents may also designate an authorized agent to make a request on their behalf. We do not knowingly sell personal information for monetary value, and we do not use or disclose sensitive personal information for purposes that require an opt-out. We honor recognized browser-based opt-out preference signals, such as the Global Privacy Control (GPC), where required by law.
How to exercise your rights
To exercise any of these rights, contact us at partners@sanctumstay.com. We will respond within the timeframes required by applicable law. To protect your privacy, we may need to verify your identity before fulfilling a request.
Children’s privacy
The Website is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 16 (or under 13 in the United States). If you believe a child has provided us with personal information, please contact us at partners@sanctumstay.com and we will delete it.
Third-party links and embedded content
The Website contains links to third-party websites, including the official websites of the retreats, hotels, and destinations we write about, as well as embedded content such as maps, images, or videos. These third parties operate independently of SanctumStay. We are not responsible for their content, practices, or privacy policies, and we encourage you to review the privacy policy of any third-party site you visit. Embedded content may collect data about you in the same way as if you visited that third-party site directly.
Do Not Track
Some browsers offer a “Do Not Track” setting. Because there is no common industry standard for interpreting these signals, the Website does not currently respond to Do Not Track signals. We do, however, honor recognized opt-out preference signals such as the Global Privacy Control where required by law.
Accuracy of information and editorial disclaimer
The content published on SanctumStay – including articles, destination descriptions, retreat and hotel profiles, schedules, pricing, and other travel information – is provided for general informational and inspirational purposes only. While we make a good-faith effort to research and present accurate, current information, travel details change frequently, and we do not warrant or guarantee that any content is complete, accurate, reliable, or up to date at the time you read it.
Nothing on the Website constitutes professional, medical, health, financial, or travel advice. Before making any travel, booking, or wellness decision, you should independently verify all relevant details – including availability, pricing, programs, requirements, and conditions – directly with the relevant property, provider, or other authoritative source.
To the fullest extent permitted by law, SanctumStay and its operator disclaim all liability for any loss, damage, or inconvenience arising from reliance on information published on the Website or obtained through any linked third-party website. Your use of the Website and its content is at your own discretion and risk.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the “Last updated” date at the top of this page. Significant changes may be communicated more prominently. We encourage you to review this page periodically.
Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:
Email: partners@sanctumstay.com