Privacy & Cookies Policy
Last updated: September 23rd, 2026
1. Purpose
Sora House respects the privacy of its customers, participants, website visitors and community members.
This Privacy Policy explains how Sora House collects, uses, stores and protects personal data.
2. Data controller
The data controller is:
SORA HOUSE
Email: hello@bysorahouse.com
3. Personal data we may collect
Depending on how you interact with Sora House, we may collect:
Contact information
First and last name
Email address
Telephone number
Postal address where necessary
Booking information
Experience or retreat booked
Booking date
Payment status
Accommodation preferences
Dietary requirements and allergies where relevant
Participant information
Emergency contact details
Information voluntarily provided to help us organize activities safely
Communication information
Messages sent to Sora House
Newsletter preferences
Customer service communications
Technical information
IP address
Browser/device information
Website usage information
Cookie and analytics information, where applicable and subject to the applicable rules
4. Purposes of processing
We may process personal data for the following purposes:
processing bookings;
delivering Sora House experiences and retreats;
communicating with participants;
processing payments;
managing customer service;
organizing accommodation, transport and activities;
managing emergencies where necessary;
sending newsletters where the user has subscribed;
improving our website and services;
measuring website performance;
complying with legal and accounting obligations;
protecting our legitimate interests and preventing fraud or misuse.
5. Legal bases
Depending on the processing activity, Sora House may rely on:
performance of a contract;
compliance with a legal obligation;
consent;
legitimate interests;
protection of vital interests where legally applicable.
The relevant legal basis will depend on the purpose of the processing.
6. Service providers
Sora House may share personal data with trusted service providers where necessary to provide its services.
These may include:
payment providers;
booking platforms;
website hosting providers;
email/newsletter providers;
CRM providers;
accommodation providers;
transport providers;
activity providers;
professional advisers;
IT and security providers.
Sora House only shares information reasonably necessary for the relevant purpose.
7. International transfers
Some service providers may process personal data outside the European Economic Area.
Where required, Sora House will implement appropriate legal safeguards for such transfers.
8. Data retention
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, taking into account legal, accounting, contractual and dispute-resolution requirements.
Specific retention periods may vary depending on the category of data.
9. Your rights
Subject to applicable law, you may have the right to:
access your personal data;
correct inaccurate data;
request deletion;
request restriction of processing;
object to certain processing;
request portability of certain data;
withdraw consent where processing is based on consent.
You may exercise your rights by contacting: hello@bysorahouse.com
You may also lodge a complaint with the French Supervisory Authority, the Commission Nationale de l'Informatique et des Libertés (CNIL).
10. Newsletter
If you subscribe to Sora House communications, your email address may be used to send newsletters and promotional communications.
You can unsubscribe at any time using the unsubscribe mechanism provided in the relevant communication or by contacting Sora House.
11. Cookies and similar technologies
Sora House may use cookies and similar technologies.
11.1 What are cookies?
Cookies and similar technologies are small files or identifiers placed on or accessed from your device when you visit a website.
They may be used to make a website function, remember preferences, measure audience or provide advertising functionality.
11.2. Cookies used by Sora House
Sora House may use the following categories:
Strictly necessary cookies
These are necessary for the website or a service requested by the visitor to function.
Preference cookies
These may remember choices such as language or other website preferences.
Analytics cookies
These may help Sora House understand how visitors use the website and improve its performance.
Marketing/advertising cookies
These may be used to measure campaigns, personalize advertising or track interactions across websites.
The exact cookies used by Sora House will depend on the tools currently installed on the website.
11.3. Consent
Where consent is legally required, Sora House will request consent before placing or reading the relevant cookies or trackers.
Visitors must be able to accept or refuse such cookies without being forced to accept them.
Consent can be withdrawn at any time through the website's cookie settings.
11.4. Third-party services
Sora House may use third-party technologies such as:
Google Analytics / Google Tag Manager;
Meta technologies;
YouTube;
Vimeo;
booking platforms;
payment providers;
other marketing or analytics services.
Only list services actually installed on the website.
Their respective privacy policies may apply to their processing activities.
11.5. Managing cookies
Visitors can manage their cookie preferences through the Sora House cookie-management interface.
Browser settings may also allow users to control certain cookies, although this may not provide the same level of control as the website's consent-management tool.
12. Updates
This Privacy Policy may be updated from time to time when its website, technology stack or applicable legal requirements change.
The latest version will be published on this page with its effective date.