Effective Date: June 1, 2025

This Privacy Policy describes how Loaf ("Company," "we," "us," or "our") collects, uses, and discloses personal information when you use our services, including our website, adventure retreats, and community platform.

1. Information We Collect

1.1 Personal Information

We collect the following categories of personal information:

Account and Application Information:

• Full name, email address, phone number, date of birth

• Residential address and emergency contact information

• Application responses including personal background, adventure experience, and goals

• Payment information processed through third-party payment processors

Health and Safety Information:

• Medical conditions, allergies, and dietary restrictions

• Physical fitness level and activity limitations

• Travel insurance information and emergency medical contacts

Communication Information:

• Email correspondence and video call recordings

• Feedback and survey responses

• Customer service interactions

1.2 Technical Information

We automatically collect certain technical information:

• IP address, browser type, and device information

• Website usage data including pages visited and time spent

• Cookies and similar tracking technologies

1.3 Visual Content

• Photographs and videos captured during retreats

• User-generated content shared in our community platforms

2. How We Use Your Information

2.1 Service Provision

• Processing applications and facilitating retreat participation

• Coordinating travel arrangements and accommodations

• Providing customer support and responding to inquiries

• Processing payments and managing billing

2.2 Safety and Emergency Response

• Assessing participant suitability for adventure activities

• Coordinating emergency medical care when necessary

• Sharing relevant health information with local guides and medical providers

2.3 Community Building

• Facilitating introductions between retreat participants

• Organizing post-retreat community events and meetups

• Operating our community platform and related services

2.4 Marketing and Communications

• Sending promotional materials and retreat announcements

• Creating marketing content using retreat photographs and testimonials

• Analyzing user engagement to improve our services

2.5 Legal Compliance

• Complying with applicable laws and regulations

• Protecting our rights and interests

• Responding to legal process and government requests

3. Information Sharing and Disclosure

3.1 Service Providers

We share personal information with third-party service providers who assist in operating our business, including:

• Payment processors for transaction processing

• Travel and accommodation providers

• Local guides and activity operators

• Technology service providers

3.2 Retreat Participants

We share limited personal information (name, general location, basic background) with other retreat participants to facilitate community building and safety coordination.

3.3 Legal Requirements

We may disclose personal information when required by law, legal process, or to protect the rights, property, or safety of Loaf, our users, or the public.

3.4 Business Transfers

In connection with any merger, sale of assets, or acquisition, personal information may be transferred to the acquiring entity.

3.5 Consent-Based Sharing

We share personal information for marketing purposes only with explicit user consent, which may be withdrawn at any time.

4. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account information: Duration of active participation plus 7 years

• Health and safety information: Duration of retreat participation plus 5 years

• Marketing content: Until withdrawal of consent

• Technical data: 2 years from collection

5. International Data Transfers

Loaf operates internationally and may transfer personal information to countries outside your jurisdiction. We implement appropriate safeguards to ensure adequate protection of personal information during international transfers, including:

• Standard contractual clauses approved by relevant authorities

• Privacy Shield or equivalent certification programs where applicable

• Other legally recognized transfer mechanisms

6. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest

• Access controls and authentication requirements

• Regular security assessments and updates

• Employee training on data protection practices

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Correction

You may request access to your personal information and correction of inaccuracies.

7.2 Deletion

You may request deletion of your personal information, subject to legal and business requirements.

7.3 Portability

You may request a copy of your personal information in a structured, machine-readable format.

7.4 Marketing Opt-Out

You may unsubscribe from marketing communications at any time using the unsubscribe link or contacting us directly.

7.5 Cookie Controls

You may control cookie preferences through your browser settings.

8. Third-Party Services

Our services may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to such third-party services, and we encourage you to review their privacy policies.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify users of material changes through email or prominent website notice. Continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.

11. Contact Information

For questions about this Privacy Policy or to exercise your rights, please contact us at:

Email: hello@loaf.so

Last Updated: June 12, 2025