This privacy policy explains how Okkibak Retreat collects, uses, shares, retains, and deletes personal data when you use okkibak.surf. It is written as a data lifecycle notice so you can see what happens to information from collection through final disposal.
When you use our contact form or otherwise reach out to Okkibak Retreat, we may process your name, email address, phone number if you provide it, inquiry message, and service preferences. We also process limited technical data such as server request metadata and browser or device information to support delivery, security, and basic site administration.
We receive personal data from you when you submit a form, send a message, or share details about your preferences. Technical data is generated automatically by the website and hosting environment when pages are requested, forms are submitted, or security controls are applied.
Our cookie use is limited to essential site operation and privacy preference storage. Essential cookies help the website load and function properly, while preference cookies remember selected privacy settings. We do not confirm the use of analytics or marketing cookies on this site.
We use essential cookies to keep the site functioning and privacy preference cookies to remember your choices. Because these cookies support core operation and preference storage, disabling them may affect how the site works. You can manage cookies through your browser settings and, where offered, through on-site preference controls.
We use personal data to respond to inquiries, manage service preferences, operate the contact form, maintain website security, and support technical delivery of the site. We may also use information to troubleshoot issues, prevent misuse, and keep records needed for administrative or legal purposes.
We may share limited personal data with service providers that help us operate the website, deliver technical functions, or manage communications. These recipients are expected to use the information only for the services they provide to us and to handle it under appropriate confidentiality and security obligations.
We may disclose personal data to public authorities, courts, or other parties when we are required to do so by applicable law, legal process, or a lawful request. We may also share information when needed to establish, exercise, or defend legal claims, or to protect the security and integrity of the website and its users.
Privacy rights lifecycle
You may ask us to confirm whether we hold your personal data, correct inaccurate details, or review how a request should be handled. Where deletion, restriction, or objection is available under applicable law, we will assess the request and respond through the appropriate process.
To protect privacy, we may need to verify your identity and clarify the scope of your request before making changes or providing a response. If a request cannot be fully granted, we will explain the reason in general terms and, where appropriate, describe any remaining options.
We retain personal data for the period needed to respond to inquiries, maintain site security, meet operational needs, and satisfy any legal or recordkeeping obligations that apply. When data is no longer needed for those purposes, we delete it or take steps to remove identifying details where practical.
If we make material changes to this privacy policy, we will update the posted version and may provide additional notice through the website or other suitable service channels. The revised policy applies from the date it is made available unless a different effective date is stated.
Use the contact channel that best matches the nature of your request so it can be routed appropriately.
