Esperanza

Privacy

How we handle your information

You may be telling us something you have told very few people. This page explains exactly what happens to it.

Who is responsible for your information

Esperanza is operated by Esperanza Creative Recovery SARL AU. We decide how and why your information is used, which under UK and EU data protection law makes us the "controller" for it.

For anything on this page — a question, a request, or a complaint — write to chris.soloman@gmail.com.

Appt 15, Imm. 12, Lot Sine, Av Allal Al Fassi, Marrakech, Morocco

What we collect

Only what you send us. There is no account to create, and nothing is collected in the background beyond what is described here.

  • The contact form: your name and email address, which are required; your phone number, which is optional; and whatever you write in the message.
  • Anything you tell us afterwards by email, WhatsApp or phone.
  • Your IP address, seen briefly by our contact form service to stop the form being abused. It is held in memory for one hour and never written to disk or attached to your enquiry.

What you tell us about your health

Because of what Esperanza does, your message may describe addiction, recovery, mental health or medical treatment. Data protection law treats this as a special category, with stronger protection than ordinary personal data.

We rely on your explicit consent to handle it. Sending us a message that describes your health is how you give that consent, and you can withdraw it at any time by asking us to erase what you sent.

Please send only what you need to send. A first enquiry does not need your full history — enough to know whether we can help is enough.

Why we use it

To answer you, to work out whether a retreat is right for you, and to organise your place if you book one. That is the whole of it.

  • Replying to your enquiry, and the conversation that follows.
  • Arranging a booking, including practical details you need us to know.
  • Keeping records we are required to keep, such as accounts.

We do not use your information for advertising, we do not build a profile of you, and we do not sell or share it with anyone for their own purposes. There is no automated decision-making.

Who else handles it

Running a website and sending email means other companies process your information on our instructions. They may only act on those instructions, and may not use your information for themselves.

  • Cloudflare — hosts this site and runs the contact form. Its network spans many countries, so a request may be served from outside the UK and EEA.
  • Resend — delivers your enquiry to us as an email. Resend is based in the United States.
  • Our email provider — holds the message once it arrives, so that we can read and reply to it.

Where your information leaves the UK or the EEA, the transfer relies on the standard contractual clauses those providers publish, together with the UK addendum.

How long we keep it

Enquiries are kept for 24 months and then deleted, so that we can pick up a conversation you return to. If you book a retreat, we keep what we need for as long as we are required to — accounting records, for example, have their own retention period set by law.

You can ask us to delete your information sooner. Unless we are legally required to keep something, we will.

Cookies and analytics

This site sets no cookies and does not track you, so there is no consent banner.

One small exception, for honesty: if you dismiss the banner offering you the English version of a page, your browser remembers that until you close the tab. It records a dismissal and nothing about you.

We use Cloudflare Web Analytics to see which pages are visited. It does not use cookies, does not fingerprint your device, and does not follow you to other sites. It reports page counts, not people.

The fonts are served from this site rather than from Google Fonts, so loading a page does not tell anyone else that you visited.

Your rights

Under UK and EU data protection law you can ask us to do any of the following, free of charge. We will respond within one month.

  • Tell you what we hold about you, and give you a copy.
  • Correct anything that is wrong.
  • Erase what we hold, where we are not required to keep it.
  • Restrict or object to how we use it.
  • Send you your information in a portable format.
  • Withdraw consent you have given, at any time. Withdrawing it does not undo what was done beforehand.

Write to chris.soloman@gmail.com. If you are not satisfied with how we have handled it, you can complain to the UK Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live. In Morocco, that is the CNDP.

Confidentiality

Separately from data protection law, Chris works to the ethical framework of his professional bodies. What you discuss in therapy stays between you and him, with the recognised exceptions — a serious risk to you or someone else, or a legal obligation. On a retreat, what is shared in the group stays in the group; we ask that of everyone who attends.

Security

The site is served over HTTPS, and your enquiry travels encrypted from your browser to us. No system is perfectly secure, and email in particular is not a confidential medium. If something is too sensitive to put in writing, say so in your message and we will arrange a call.

Changes to this page

If we change how we handle your information, we will update this page and the date below. This version is dated 1 October 2026.