Casa Moja Privacy Notice

Last updated: 26/08/2026


Casa Moja is a trading name of Soulshine Escapes Limited, a private limited company registered in England and Wales (company number 18445145), with its registered office at Lamberden Oast, Rye Road, Sandhurst, Kent TN18 5PH.

We are the data controller for the personal information described in this notice. We are registered with the UK Information Commissioner's Office under registration reference C2016182.

You can contact us about anything in this notice at info@casamojakenya.com

1. Who we are


Depending on how you interact with us, we may collect:

  • Identity and contact details - your name, email address, telephone number and the country you are travelling from.

  • Enquiry details - information you share when you enquire about a retreat, including room preferences, dietary requirements and anything else you choose to tell us.

  • Guest application details - additional information collected via our guest application form, including health information, emergency contacts and travel details relevant to your stay in Kenya.

  • Health information - injuries, medical conditions, allergies and dietary requirements, provided so that we can keep you safe and cater for your needs during a retreat.

  • Emergency contact details - the name, relationship and telephone number of your nominated emergency contact.

  • Marketing preferences - whether you have signed up to receive The Moja Edit, our newsletter, and your preference for receiving updates from us.

  • Correspondence - emails and messages you send us.

  • Website and device information - see section 6 on cookies.

2. What information we collect


3. Why we use it, and our legal basis

WHAT WE USE IT FOR

Responding to your enquiry and providing information about our retreats

Arranging and delivering your retreat - bookings, accommodation, transfers and activities

Keeping you safe, and responding to a medical emergency during a retreat

Sending you The Moja Edit and other marketing communications

Meeting our legal, accounting and tax obligations 

Understanding how our website is used 


LEGAL BASIS

Our legitimate interest in responding to people who contact us

Performance of our contract with you

Your explicit consent, and protection of your vital interests

Your consent, which you can withdraw at any time by unsubscribing

Our legal obligations

Your consent, given through our cookie banner

We do not sell your personal information, and we do not use it for automated decision-making or profiling.


Health information receives additional protection in law. We collect it only so that we can assess whether activities are safe for you, brief our team appropriately, and cater for your dietary and medical needs during a retreat. We collect it on the basis of your explicit consent, given when you complete our guest application form.

You may withdraw that consent at any time by contacting us, although we may then be unable to offer you a place on a retreat where we cannot adequately assess your safety and wellbeing.

We share health information only with those who need it - typically our retreat facilitators, the Casa Moja team in Kenya, and, in an emergency, medical personnel.

4. Health information


  • Our retreat facilitators and the Casa Moja team in Kenya, to the extent necessary to deliver your retreat

  • Local transport and transfer providers in Kenya, where required to arrange your arrival and departure

  • Activity and excursion providers included in your retreat programme

  • Squarespace, who host our website and process enquiry form submissions on our behalf

  • MailerLite, who manage our newsletter and marketing emails

  • Google, whose Forms product we use to send and collect guest application forms

  • Professional advisers, insurers and regulators, where we are required or permitted to share information

We require all third parties to respect the security of your personal information and to treat it in accordance with the law.

5. Who we share your information with


Our website uses cookies - small files stored on your device.

Essential cookies keep the site working: they maintain your session and record your cookie preferences. These do not require your consent and cannot be switched off.

Analytics cookies help us understand how people find and use the site - which pages are read, how long visitors stay, and where they arrived from. We use these only if you accept them.

When you first visit, you will see a banner asking which of these you are happy with. You can change your preferences at any time through the cookie settings link in the footer, or by clearing cookies in your browser. Declining analytics cookies will not stop you using any part of the site.

6. Cookies and similar technologies


Running retreats in Kenya necessarily involves transferring some of your information outside the United Kingdom - to our team and service providers on the ground there. Where we do this, we take reasonable steps to ensure your information is handled securely and in accordance with UK data protection law.

Some of our service providers - including Google and Squarespace - are based in the United States. Where we transfer information to them, we rely on appropriate safeguards recognised under UK data protection law, including the UK International Data Transfer Agreement or Addendum.

7. Sending information outside the UK


  • Enquiry records - up to 12 months from the date of your enquiry if you do not proceed with a booking

  • Booking and correspondence records - seven years from the date of your retreat, to meet our accounting and tax obligations

  • Health information - for the duration of your retreat and for 12 months afterwards, then deleted, unless we need to retain it in connection with a claim or legal matter

  • Marketing contacts - until you unsubscribe or ask us to remove you from our list

  • Website analytics - as configured in our analytics tools, and no longer than 26 months

8. How long we keep your information


Under UK data protection law, you have the right to ask us to:

  • Provide you with a copy of the personal information we hold about you

  • Correct any information that is inaccurate or incomplete

  • Delete your information in certain circumstances

  • Restrict how we use your information

  • Provide your information in a portable format

  • Stop using your information where we rely on legitimate interests

Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did before you withdrew it.

To exercise any of these rights, email us at info@casamojakenya.com. We will respond within one month.

If you are unhappy with how we have handled your information, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

9. Your rights


Our retreats are for adults only and our website is not directed at children. We do not knowingly collect personal information about anyone under the age of 18.

10. Children


We use reputable service providers, access controls and encrypted connections, and we limit access to your information to those who need it to deliver your retreat or run our business. No system is completely secure, but we take reasonable and proportionate steps to protect what you share with us.

11. Keeping your information secure


We may update this notice from time to time as our services or legal obligations change. The current version is always available at this page, and the date at the top shows when it was last updated. Where changes are significant, we will let you know by email.

12. Changes to this notice


Contact

Soulshine Escapes Limited, trading as Casa Moja

Lamberden Oast, Rye Road, Sandhurst, Kent TN18 5PH

info@casamojakenya.com

ICO registration reference: C2016182 · Company number: 18445145