Updated 27 October 2026 · Policy version 2026-10-27.2
For privacy questions about House of Raj, contact info@houseofraj.co.uk.
Who is responsible
Natasha Barnett is a sole trader operating House of Raj, Palianda and Reiki with Tashie. Natasha Barnett is the controller responsible for the personal information used by these brands. They are trading names of the same sole trader.
House of Raj information and services
If you submit the newsletter form, your email address, journey-news choice, optional offers choice and consent record are stored in Supabase. This is currently the House of Raj list only. Email campaign delivery is not active; you can change or withdraw these preferences by contacting us.
The application review first prepares a summary in your browser. When you submit an application or register interest, your name, email, application text, optional social-profile URL, room/travel preferences and payment preference are sent to our private application store. The optional social link is information you choose to provide; it does not authorise social-media account access.
Stripe handles hosted checkout when online deposits are available. Our site receives transaction identifiers and payment-status events, rather than your full card number. Online deposits are available only when the departure and payment service are ready. A booking is confirmed after Natasha accepts your application; returning from checkout alone does not prove payment. It does not arrange automatic future charges. No travel-supplier data transfer is performed by this journey application.
Website storage, statistics and hosting
Cloudflare hosts and protects this website. Supabase stores the private newsletter, consented statistics and journey application records. Cloudflare uses the connecting IP transiently for request throttling; the application does not write it into its newsletter or statistics tables. Hosting and security providers may also process technical request information.
Optional statistics run only if you allow them. They include page paths, bounded active time and interaction identifiers, not typed form answers, email addresses, chat messages or URL query strings. The automated trip assistant uses prepared answers; its chat text is not sent to a model provider.
This site uses browser local storage to remember statistics choices and whether a newsletter invitation has been dismissed or submitted. See cookie and browser-storage information for the keys and controls. Clearing local storage does not remove a newsletter or application already submitted to the server.
Your choices across our brands
Using one of our websites, sending an enquiry or making a booking does not subscribe you to marketing from all three brands. Marketing choices are separate from booking and payment messages. You do not need to agree to marketing to ask a question or buy a service.
A shared contact system has been prepared for the three brands, but cross-brand signup and marketing are not active. We have not imported the separate existing mailing list into it. Before using it for new signups, we will explain the brand emails you can choose and how to change those choices. Updating this notice does not expand an existing marketing permission.
Why we use information
We use contact and enquiry information to respond to your request and, where relevant, take steps you ask for before a contract or provide an agreed service. We rely on consent for optional email marketing and optional website statistics. We use legitimate interests to maintain website security, prevent misuse and deal with ordinary correspondence, taking your interests and rights into account. Legal obligations apply where records must be kept for tax or other statutory purposes.
Only the information needed
Please avoid sending card details, passport copies or detailed health information in an initial ordinary enquiry. Information needed to provide a particular service should be arranged through an appropriate process. Treatment or health notes and travel-document details are not used as shared marketing profiles. A payment receipt or booking request is not permission for unrelated marketing.
How long information is kept
We keep information for the purpose for which it was collected. For enquiries, we consider whether the request is still active and whether follow-up or a complaint needs to be resolved. For booking, order and financial records, we consider the service, relevant tax and record-keeping duties and the need to establish or defend legal claims. Marketing preferences are kept while needed to honour your choices; a minimal opt-out record may need to be retained to prevent accidental re-subscription.
Contact us to ask which retention criteria apply to your record or to request deletion. Deletion rights can be limited where information must be retained for a legal obligation or another applicable exception. We do not promise that closing a browser removes information already sent to an email, booking or commerce provider.
Service providers and external links
We use service providers for website hosting and security, email and communications and, where applicable, commerce, database storage and payment processing. We share information needed for the service or where required by law. We do not sell a combined list of our contacts.
Some providers and their subprocessors may handle information outside the UK. The providers used depend on the service you choose. You can ask us about the relevant processing locations and transfer arrangements. External websites, including social media, map and review services, apply their own privacy information when you follow a link.
Your rights and marketing objections
You can ask for access to your personal information, correction of inaccurate details, erasure, restriction or portability where the relevant conditions apply. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
You can object to use of your information for direct marketing at any time. Tell us which brand emails you want to stop, or ask to stop all three. We will not treat an ordinary booking or a repeated signup as permission to ignore your opt-out.
Use the privacy contact shown in this notice to make a request or raise a concern. You can also complain to the Information Commissioner’s Office. These websites do not make solely automated decisions with legal or similarly significant effects about you.