Last updated: 4 November 2026
1. Data controller
MADAM GROUP LLC, a company formed in the State of New Mexico (USA), file number 3318741, with its address at 8206 Louisiana Blvd NE, Ste A #11138, Albuquerque, NM 87113, USA ("MADAM"). Contact for any privacy matter: hello@themadams.com.
2. What data we process
- When you request a place on a retreat: name, email, WhatsApp number, number of places, whether you travel alone or with someone, and any message you wish to add.
- When you subscribe to our news (THE MADAM CIRCLE): name and email.
- Booking and payment data: card payments are handled by an external payment provider and, if you pay by bank transfer, by your bank and ours. MADAM does not store your card numbers.
- Browsing data, through cookies and similar technologies (see the Cookie Policy).
3. What we use your data for and the legal basis
| Purpose | Legal basis |
|---|---|
| Handling your request for a place and contacting you by WhatsApp or email | Pre-contractual measures at your request (Art. 6.1.b GDPR) |
| Managing your booking, payments, travel communications and insurance | Performance of the contract (Art. 6.1.b GDPR) |
| Sending you news and commercial communications, only if you tick the box | Your consent (Art. 6.1.a GDPR), which you can withdraw at any time |
| Complying with tax, accounting and travel obligations | Legal obligation (Art. 6.1.c GDPR) |
| Measuring website use and improving our advertising | Your consent to the relevant cookies |
4. How long we keep it
Requests that do not become a booking, up to 12 months from the last contact. Bookings, for the applicable legal periods. Subscriptions, until you withdraw your consent. After that, we block and delete the data as required by law.
5. Who we share it with and international transfers
Only with providers acting on our behalf: the commerce and web hosting platform (Shopify), email sending (Shopify Email), messaging (WhatsApp / Meta), the payment provider, the travel insurer, and the accommodation and service providers of the retreat when necessary to provide you with the service. MADAM is established in the United States and some of these providers are also outside the European Economic Area; in that case we apply appropriate safeguards, such as the European Commission's standard contractual clauses.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hello@themadams.com and stating the right you wish to exercise. If you believe your data is not being processed properly, you can complain to the data protection authority of your country; in Spain, the Spanish Data Protection Agency (www.aepd.es).
7. Minors
Our services are intended for people aged 18 or over. We do not knowingly collect data from minors.
8. Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.
9. Changes
We may update this policy because of legal changes or changes to our services. The current version is always the one published on this page.