Privacy Policy
The Sanctuary
The Sanctuary respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations. This privacy policy explains which personal data we collect, why we collect it, and how we handle it.
1. WHO WE ARE
The Sanctuary is based in the Netherlands and organizes events, retreats, ceremonies, workshops, training sessions, and educational programs.
For questions regarding this privacy policy, you can contact us at: info@thesanctuary.center
2. PERSONAL DATA WE PROCESS
2.1 General personal data
We process general personal data that you provide to us during registration, booking, or contact, including:
First and last name
Gender
Date of birth
Address details
Email address
Phone number
Ticket and booking details
Payment information (processed via our payment provider)
Emergency contact details
Other information you provide voluntarily
2.2 Participation and experience information
To ensure safe and appropriate guidance, we also process information about:
Previous participation in The Sanctuary events
Experience with psychedelics or other similar substances
Personal intentions or expectations regarding participation
This information is used solely to carefully organize the group composition, guidance, and safety during the event.
2. 3 Special personal data (health data)
For certain events, especially when psychedelics are part of the program, we process medical and health data for intake and screening purposes. This may include:
Physical or mental health information
Medication use
Medical history
Potential contraindications
Relevant information to assess participation safety
This data is processed exclusively to ensure the safety of participants and the group, and is treated confidentially.
3. ONLINE BOOKINGS AND PAYMENTS
Participants can book tickets for events via our website. In this context, we process:
Contact details
Booking information
Payment information
Payments are handled via an external, secure payment provider. We do not receive full payment details (such as bank or card information) and do not store these ourselves. The payment provider processes payment data according to its own privacy and security policies.
4. NEWSLETTER
Participants can voluntarily subscribe to The Sanctuary newsletter via our website. In that case, we process the email address and any other contact information provided solely to send the newsletter. Participants can unsubscribe at any time via the unsubscribe link in the newsletter or by contacting us.
5. PURPOSES OF PROCESSING
We process personal data for the following purposes:
Managing registrations and ticket bookings
Conducting intake and screening procedures
Ensuring safety during events
Assessing suitability for participation
Communication regarding events and sending the newsletter
Processing payments
Complying with legal obligations
Improving our services
6. LEGAL BASIS FOR PROCESSING
We process personal data based on:
Performance of a contract (participation in an event)
Legal obligations (such as safety, duty of care, and compliance with relevant laws and regulations)
Legitimate interests (such as communication and quality improvement)
7. PSYCHEDELIC SCREENING AND SPECIAL PERSONAL DATA
For events where psychedelics are used, a medical intake and screening is required.
The processing of health data is necessary to assess suitability for participation and to ensure the safety of the participant and the group during events. By completing the intake form, the participant agrees to the use of the requested health information for these purposes.
For the processing of personal and health data for intake and medical screening, The Sanctuary uses JotForm as a processor. All data is securely stored in Germany within the European Economic Area (EEA) and processed in accordance with the GDPR. The Sanctuary has a Data Processing Agreement (DPA) with JotForm to ensure processing of personal data in accordance with GDPR.
These special personal data are further:
Collected only when necessary for participation and safety
Used solely to assess suitability for participation
Not shared with third parties without explicit consent
Stored securely with appropriate technical and organizational measures
Retained only as long as necessary
If the screening indicates that participation is medically not advisable, the data is used exclusively for that assessment and not for other purposes.
Access to health data is strictly limited to authorized facilitators or other involved professionals responsible for assessing participation and ensuring safety during the event.
Participants may withdraw their consent for processing health data at any time. Withdrawal may, however, make participation in the relevant event impossible.
Information provided during intake and screening is used solely to assess participation and event safety, and is not used for marketing purposes or automated profiling.
8. SHARING PERSONAL DATA
We share personal data with third parties only when necessary for providing our services, such as processing payments, facilitating events, or sending communications. Personal data is never sold or commercially shared.
9. RETENTION PERIOD
Personal data is not retained longer than necessary for the purposes for which it was collected, unless a longer retention period is legally required.
Medical data is handled with extra care and retained only as long as necessary for safety and legal obligations.
10. YOUR RIGHTS
You have the right to:
Access your personal data
Correct inaccurate data
Delete your data
Restrict processing
Object to processing
Withdraw consent
File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
Requests can be submitted via: info@thesanctuary.center
11. SECURITY
The Sanctuary implements appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access.
12. CHANGES
The Sanctuary reserves the right to modify this privacy policy. The most current version is always available on the website.