Privacy Policy

It is your responsibility to read and understand the Terms and Conditions, and how they may affect your trip. I am happy to clarify or answer any questions you may have. Feel free to contact me at hello@jacquitoumbas.com and I’ll be happy to assist with any additional information.

This agreement supersedes all previous oral or written communications, representations, or agreements between the parties and applies to all trips organised by Jacqui Toumbas and sold on this website.

Last updated: November 19th, 2025

Owner and data controller

Savour the Slow is operated by JT Consulting (Aus) Pty Ltd (ABN 22 509 664 678)
PO Box 5777, West End, Brisbane, Queensland, Australia
Contact: hello@jacquitoumbas.com

We run small-group culinary and cultural retreats in Southern Italy and Greece. To do that, we need to know things about you, some of them ordinary, some of them personal, and some of them genuinely sensitive. This policy explains what we collect, why we need it, who sees it, how we use artificial intelligence, and what you can ask us to do about any of it.

This policy covers savourtheslow.com, our enquiry and booking process, and everything we do before, during and after a retreat.

About our obligations. Australia’s Privacy Act 1988 currently exempts small businesses with an annual turnover under $3 million from the Australian Privacy Principles. We have chosen to follow those principles anyway, because you are trusting us with information about your health and your travel. If you live in the European Union or the United Kingdom, we also comply with the GDPR and UK GDPR.

What information we collect

Information you give us on the website

When you fill in an enquiry form, take our retreat quiz, subscribe to our emails, book a call with us or send us a message, you give us your name, email address, and whatever you choose to tell us about yourself and what you are looking for.

Information you give us when you book a retreat

Once you are coming on retreat, we need considerably more:

  • Full name as it appears on your passport, date of birth, and passport number and expiry

  • Postal address and phone number

  • Emergency contact — their name, relationship to you and phone number

  • Travel insurance details, including your insurer and policy number

  • Flight and arrival details

  • Rooming preferences, and who you would like to share with

  • Payment details, handled by our payment provider

Health and dietary information

We ask you for:

  • Dietary requirements, allergies and food intolerances

  • Medical conditions and medications relevant to your participation

  • Mobility needs and accessibility requirements

This is the most sensitive information we hold about you. Under Australian law it is “sensitive information”; under European law it is “special category data”. We collect it only with your consent, which you give when you provide it in our booking and pre-departure forms, and only because we cannot feed you safely or keep you safe without it.

You are not obliged to give it to us. If you would prefer not to, tell us and we will talk it through — but we may not be able to confirm your booking if we cannot work out whether we can look after you properly.

Information we collect from others

  • Referrals and introductions from past guests, partners and collaborators

  • Your public social media profile, where you have engaged with us

  • Information from our booking, payment and email platforms

Information collected automatically

When you visit savourtheslow.com we log your IP address, device and browser type, the pages you viewed, where you came from, and the date and time of your visit.

Cookies

Our website uses cookies — small files stored on your device — to remember your preferences, understand how the site is used, and support our advertising.

Some of these are set by us. Others are set by third parties: Google Analytics, which tells us how many people visit and which pages they read, and Meta, which lets us show our retreats to people who have visited the site.

You can block or delete cookies through your browser settings at any time, though some parts of the site may stop working properly if you do.

How your information may be used

We use what we collect to:

  • Answer your enquiry and work out whether a retreat is right for you

  • Confirm and administer your booking

  • Book your accommodation, transfers, meals and activities

  • Plan menus around your dietary requirements

  • Work out rooming and logistics

  • Make sure we can look after you safely, including in a medical emergency

  • Take payment and manage your payment plan

  • Send you pre-departure information and retreat updates

  • Send you our newsletter and information about future retreats, if you have asked for it

  • Improve our retreats, our website and how we run things

  • Meet our tax, insurance and legal obligations

How we use artificial intelligence

We use artificial intelligence (AI) tools to help run this business, and some of those tools process information about you. We would rather tell you that plainly than bury it.

What we use AI for

  • Drafting and editing emails, replies and pre-departure information

  • Reading, summarising and organising what you tell us in enquiry forms, applications and booking questionnaires — including your dietary and medical notes, so that we can plan menus, rooming and logistics accurately and not miss anything

  • Preparing itineraries, packing lists, guest briefings and instructions for our suppliers

  • Helping us communicate with our Italian and Greek partners

  • Looking at patterns across our audience as a whole — which emails get opened, which retreats attract interest

  • Day-to-day administration: scheduling, notes, organising our files

What we do not use AI for

  • We do not use AI to make decisions about you. Whether your application is accepted, what you are charged, what we can accommodate, whether you can join a particular retreat — a person makes those decisions, having read your information themselves. AI helps us organise and summarise. It does not decide.

  • We do not use AI to score, rank, profile or assess you.

  • We do not allow the AI providers we use to train their models on your information.

  • We do not put your health or dietary information into free or publicly available AI chatbots.

How we protect your information when AI is involved

  • We use business or paid accounts with providers who contractually commit not to train their models on our data.

  • A person reviews AI output before it is relied on or sent to you.

  • We put in only what the task requires, and no more.

  • AI-assisted work is covered by the same confidentiality obligations as everything else we do.

Where this happens

The AI tools we use are run by providers based outside Australia, mainly in the United States. Information you give us may therefore be processed on servers outside Australia and outside Europe. See Sending your information overseas below.

Your choice

You can ask us not to use AI tools to process your personal information. Email hello@jacquitoumbas.com and we will note it on your file and handle your information manually. It will not affect your booking, your place on a retreat, or how you are treated. It may mean we take a little longer to come back to you.

If you are in the EU or UK, you have the right not to be subject to decisions made solely by automated processing where those decisions significantly affect you. We do not make decisions that way.

Who we share your information with

Our retreat partners in Italy and Greece

This is the part that matters most, so we will be specific. To run a retreat we have to share your details with the people delivering it on the ground:

  • Accommodation providers, masseria and villa owners

  • Drivers and transfer companies

  • Cooks, hosts, guides and local experts

  • Restaurants, wineries, producers and activity providers

What we share is limited to what each of them needs to do their job. For most, that is your name and arrival details. For anyone providing food, it includes your dietary requirements and allergies. For accommodation and activity providers, it may include mobility or medical information relevant to your safety.

These partners are based in Italy and Greece and are subject to European privacy law.

Our team

Our staff and contractors can see guest information where their role requires it, and are bound by confidentiality obligations.

Service providers

We use the following companies to run the business. Each handles your information under its own privacy policy, and each is bound to use it only to provide the service to us.

  • Tally. Our enquiry, booking and pre-departure forms — this is where you give us your health and dietary information. Belgium. Form data is stored in Europe

  • Airwallex. Taking payments and managing payment plans. Australia, with international processing

  • Flodesk. Sending our emails and managing our mailing list. United States

  • Squarespace. Hosting savourtheslow.com. United States

  • Google Analytics. Understanding how people use our website. United States

  • Google Calendar appointments. Letting you book a call with us, and holding what you tell us when you book. United States

  • Google Workspace. Our email, files and documents. United States

  • Notion. Our internal records, planning and retreat documents. United States

  • Meta (Facebook and Instagram). Our social media presence and our advertising. United States

  • AI providers. As described in the section above. Mainly United States

Your health and dietary information is collected and stored in Europe. Our forms run on Tally, a Belgian company that keeps form data on European servers. That information does not sit on our website or with a United States provider.

We do not store your card details. Payments are handled directly by Airwallex.

Insurers, medical providers and emergency services

If there is a medical emergency, or an insurance claim arises, we will share what is needed with medical providers, your insurer, your emergency contact and, where necessary, local authorities.

Advisers and authorities

Our accountants, lawyers and insurers, and any authority we are legally required to disclose to.

What we do not do

We do not sell your personal information. We do not trade in personal information, and we do not rent or share our mailing list with anyone.

Sending your information overseas

This is unavoidable in our business. We run retreats in Europe, so your information goes to suppliers in Italy and Greece. Most of our software and AI providers are based in the United States. Some providers operate servers in other countries.

The health and dietary information you give us through our forms is held in Europe, by Tally, and we share it from there only with the suppliers who need it and with our own team. It is not stored in the United States.

By booking a retreat with us, you consent to us disclosing your personal information — including your health and dietary information where it is relevant to your participation — to recipients in those countries.

Where information is transferred out of the EU or UK, we rely on the standard contractual clauses or equivalent safeguards offered by our providers.

Photography and video

We take photographs and video on retreat. They are one of the main ways we show people what these retreats are actually like.

Where those images may appear

Savour the Slow is one of several businesses operated by JT Consulting (Aus) Pty Ltd. The others are Business Banquet, our education and membership business for women in business, and Jacqui Toumbas, Jacqui’s personal brand covering food, travel and slow living, including The Flavour Journal.

Photographs and video taken on retreat may be used across all of them. In practice that means images from your retreat could appear:

  • On savourtheslow.com and in our retreat marketing

  • On Jacqui’s social media accounts and Savour the Slow’s

  • In The Flavour Journal and on jacquitoumbas.com

  • In Business Banquet materials, including course content, membership resources and marketing, where a retreat is used as an example of how the business is run

  • In presentations, talks, media and press coverage

We are telling you this because it is broader than most people assume when they agree to be photographed on holiday. It is the same company throughout, but they are different audiences.

Opting out

You can opt out at any time, and you can opt out partially. Email hello@jacquitoumbas.com and tell us what you are comfortable with. For example, you may be happy to appear in retreat marketing but not in business or course content, or happy in group shots but not close-ups. We will note it on your file and brief our photographer before the retreat.

If you change your mind after a retreat and want an image of you removed, email us and we will take it down from anything we control. We cannot always remove it from places we do not control, such as a republished press article or someone else’s repost.

Newsletters, marketing and advertising

Email

If you have subscribed, enquired or travelled with us, we may email you about future retreats and our writing. We send these through Flodesk. Every email has an unsubscribe link and we act on it promptly.

Our emails contain tracking pixels, which tell us whether you opened an email and which links you clicked. We use that to work out what is worth sending.

Our other businesses

Savour the Slow, Business Banquet and Jacqui Toumbas are all operated by JT Consulting (Aus) Pty Ltd. 

Advertising

We advertise on Meta (Facebook and Instagram) and Google. These platforms use cookies and similar technologies to show our ads to people who have visited our website or engaged with our content, and to people who look like them.

You can control this through your ad preferences on each platform, and by blocking cookies in your browser.

How long we keep your information

  • Enquiries that do not become bookings: 2 years from last contact

  • Guest booking and payment records: 7 years after the retreat, for tax, insurance and legal reasons

  • Health, dietary and medical information: Deleted or de-identified within 12 months of the retreat ending, unless needed for an insurance claim or you are booked on another retreat

  • Mailing list: Until you unsubscribe, then a suppression record so we do not contact you again

  • Website analytics: As set by the platform

Security

We take reasonable steps to protect your information: access controls, strong passwords, multi-factor authentication on our main accounts, and limiting who on the team can see guest health information.

No system is completely secure. If a data breach happens that is likely to cause you serious harm, we will tell you, and notify the relevant regulator where we are required to

Your rights

You can ask us to:

  • Give you a copy of the information we hold about you

  • Correct anything wrong or out of date

  • Delete your information, where we are not required to keep it

  • Stop emailing you, at any time

  • Stop using AI to process your information

If you are in the EU or UK you can also ask us to restrict or stop processing, ask for your information in a portable format, and withdraw your consent at any time — including consent to hold your health information, though that may affect whether you can travel with us.

Email hello@jacquitoumbas.com. We will respond within 30 days.

Links to other sites

Our website links to other sites, including our partners, suppliers and things we recommend. We are not responsible for their privacy practices. Have a look at the privacy policy of any site you give your information to.

Children

Our retreats are for adults. Guests must be 18 or over. We do not knowingly collect personal information from anyone under 18.

Complaints

If you are unhappy with how we have handled your information, email hello@jacquitoumbas.com first and give us a chance to fix it. We will respond within 30 days.

If you are not satisfied with our response:

  • Australia — Office of the Australian Information Commissioner, oaic.gov.au

  • European Union — your local data protection supervisory authority

  • United Kingdom — Information Commissioner’s Office, ico.org.uk

Changes to this policy

We will update this policy as the business and the technology we use change. The current version is always on savourtheslow.com with the date at the top. If we make a significant change to how we use your information, we will tell you by email.


Contact

JT Consulting (Aus) Pty Ltd
PO Box 5777, West End, Brisbane, Queensland, Australia
hello@jacquitoumbas.com