Privacy Policy

Last updated: 15 October 2026

Wisdom Within (“Wisdom Within”, “we”, “us”) curates small, invitation-only journeys for women in South Africa, Botswana and Rwanda. This policy explains what personal information we collect through wisdomwithincollection.com and through our application and booking process, why we use it, who we share it with, and the choices you have.

Who we are and how to contact us

Wisdom Within is responsible for the personal information described in this policy. If you have any question about your information or about this policy, or you would like to use any of your rights, please email welcome@wisdomwithincollection.com. We aim to respond within 30 days.

Information we collect

• When you apply: your name, email address, phone number, country of residence and current role, the destination and timing you are interested in, and your answers to the questions in our application, for example about your stage of life, what you hope to gain from a journey, what has held you back, your readiness to reserve and the support you would like. Some of these answers are personal and reflective, so please share only what you are comfortable sharing.
• When you express interest and reserve: the destination and suite you choose, the status of your application and booking, the date and time you accept the retreat agreement, and the IP address used when you accept it, which we keep as a record of your acceptance.
• When you pay: payments are made on Stripe’s secure checkout page. We receive confirmation of your payment, the amount and a Stripe payment reference. We never see or store your full card details.
• When we correspond: the emails you send us, and a record of the emails we send you about your application and booking.
• When you visit the website: our hosting provider’s servers process your IP address and basic browser information in order to deliver the website and keep it secure, and record them in server logs. To protect our forms and login page from abuse, we also count recent submissions from each IP address. These counters are stored in a scrambled (hashed) form and expire automatically after a short time.

How we use your information and why

• To review your application and decide whether a Wisdom Within journey is the right fit. We do this because you have asked us to consider you for a journey, and because we have a legitimate interest in keeping our groups small and well matched. Every application is read by our team; we do not make decisions about you by automated means.
• To stay in touch about your journey: sending your personal destination and booking links, your booking summary, the retreat agreement, confirmations and preparation information. We do this to take the steps you have asked for and to carry out our agreement with you.
• To take payment and keep financial records, to carry out our agreement with you and to meet our accounting and tax obligations.
• To deliver your journey, by sharing the details needed to arrange your stay and travel with the lodges and travel partners involved, to carry out our agreement with you.
• To keep the website and our records secure, which is in our legitimate interest and yours.

We only email you about your application and the journeys you have asked about. We do not sell or rent your personal information, and we do not share it with advertisers.

Who we share it with

We share personal information only where it is needed to run Wisdom Within and deliver your journey:

• Namecheap, Inc. hosts our website, stores application and booking records and delivers our emails.
• Stripe processes reservation payments on its secure checkout. Stripe also uses payment information for its own purposes, such as fraud prevention, as described in Stripe’s own privacy policy.
• Cloudinary delivers the video and some of the images on our website, and receives your IP address and browser information when it does so.
• Lodges and travel partners, such as the lodge you will stay at, airlines and transfer providers, but only once you have reserved and only the details they need to arrange your stay and travel.
• Professional advisers and authorities, where we are required to by law or where it is necessary to establish or defend a legal claim.

International transfers

Our guests and our partners are based in many countries. Our website and email are hosted in the United States, and when you reserve a journey, the details needed for your stay are shared with partners in the country you will visit. Where data protection law requires it, we rely on the safeguards our service providers offer for international transfers, such as standard contractual clauses, or on the transfer being necessary to arrange the journey you have asked for.

How long we keep it

• Applications are kept for as long as we need them to consider your application and to stay in touch with you about the journeys you have asked about. If you decide not to travel with us, you can ask us to delete your application at any time.
• Booking and payment records are kept for as long as accounting and tax laws require.
• Emails are kept for as long as they relate to an open application or booking, or to a matter we may need to answer later.
• Server logs are kept by our hosting provider for a limited period for security and troubleshooting.

Your rights

Depending on where you live, data protection laws such as the GDPR in the European Union and United Kingdom, the Swiss Federal Act on Data Protection or South Africa’s Protection of Personal Information Act may give you the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• object to, or ask us to limit, how we use it;
• receive the information you gave us in a portable format.

To make a request, email welcome@wisdomwithincollection.com. We may ask you to confirm your identity before we act on it. If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the data protection authority in the country where you live.

Cookies and similar technologies

We do not use advertising or analytics cookies, and our public website does not set cookies for visitors. Our page builder stores a small technical entry in your browser’s local storage and session storage, which it uses to manage on-page elements such as pop-ups. It does not identify you and is not shared with anyone. Cookies are only set if you log in to the website’s administration area. You can clear stored website data at any time in your browser settings.

Security

Our website is served over an encrypted connection, access to applications and bookings is limited to our team, and the destination and booking links we send you are unique to you. Payments are handled entirely by Stripe. No system is completely secure, but we take care to protect your information and to act quickly if anything goes wrong.

Children

Our journeys are created for adult women. Our website is not intended for anyone under 18, and we do not knowingly collect information about children.

Changes to this policy

We may update this policy from time to time. When we do, we will publish the new version on this page and change the “last updated” date above.