Privacy Policy

SANTVLANA ("we", "us") is the service and website name for a private medical-wellness retreat being prepared at CHUKKA Ocean Outpost, Sandy Bay, Jamaica. The contracting entity will be identified in writing before any booking or payment. For the purposes of applicable data-protection law, SANTVLANA controls personal information collected through this website. Contact: hello@santvlana.com.

Enquiry details. When you submit our contact form we collect your name, email address, and — if you choose to provide them — phone number, country, program interest, goals, preferred timing, and your message.

Health-related information. Anything health-related you choose to include in an enquiry or chat message is treated as sensitive information. Please share only what you are comfortable sharing online; detailed medical intake happens privately after consultation, not through this website.

AI assistant conversations. Messages you send to our website chat assistant are stored with a random session identifier so the conversation can continue across visits. Chat conversations are processed by an AI provider (see Section 4) to generate responses.

Account data. If you create an account, authentication is handled by Clerk and we store your account identifier, email, and name.

Continuation and telemedicine data. If you proceed with post-stay care, the responsible clinical or wellness provider may collect your identity, physical location at the time of a session, consent, appointment details, health-related information, clinical or coaching notes, and agreed information from or for your home clinicians. A separate clinical privacy notice and consent process will identify the responsible provider and platform before virtual care begins.

Technical data. We process IP addresses transiently for security and rate limiting, and store consent and preference choices in your browser (see our Cookie Policy). We do not currently run third-party analytics or advertising trackers.

We use personal information to:

• respond to enquiries and consultation requests (performance of pre-contractual steps);
• design and deliver agreed continuation, telemedicine, wellness follow-up, referrals, and care coordination;
• send a confirmation/auto-response email when you contact us;
• operate the website chat assistant and improve its answers;
• protect the website against abuse, spam, and fraud (legitimate interest); and
• comply with legal obligations.

We do not sell personal information, and we do not use it for third-party advertising.

We rely on a small set of providers who process data on our behalf under their own security and data-processing terms:

• Vercel — website hosting;
• Convex — application database (enquiries, chat conversations);
• Clerk — authentication and account management;
• OpenRouter — routes AI chat assistant conversations to the model provider;
• Anthropic — the AI model (Claude) that drafts chat assistant answers; conversations are not used to train its models;
• OpenAI — alternative AI processing for the chat assistant if configured (not used to train their models under our API configuration);
• Resend — transactional email delivery.

Any telehealth platform, clinician, clinical practice, or other provider involved in continued care will be identified before the service begins, together with the applicable privacy terms and information-sharing choices.

These providers operate internationally, including in the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

• Contact enquiries and visit requests: kept while we are in contact with you and for up to 24 months after the last update, then deleted or anonymized.
• Chat conversations: inactive conversations are closed after 7 days and transcripts are automatically deleted after 30 days. Email addresses and phone numbers are redacted before messages are stored.
• Rate-limiting/security records: automatically purged within hours to days.
• Email logs connected to an enquiry: retained with that enquiry for up to 24 months.
• Clinical and telemedicine records: retained by the responsible provider for the period required by applicable law, professional standards, and the clinical terms disclosed before care begins.

Under Jamaica's Data Protection Act and, where applicable, the EU/UK GDPR, you may have the right to: access the personal information we hold about you; correct it; delete it; restrict or object to its processing; receive a portable copy; and withdraw consent at any time where processing is based on consent. You also have the right to complain to your local supervisory authority, including Jamaica's Office of the Information Commissioner.

To exercise any of these rights, email hello@santvlana.com. We respond within 30 days.

The chat assistant and enquiry auto-response may use automated processing to draft general information. They do not diagnose, determine medical suitability, confirm availability, accept a booking, or make a decision that has legal or similarly significant effects. A person reviews suitability and booking steps privately.

We use encrypted connections (HTTPS), access controls, and reputable infrastructure providers. No online service can guarantee absolute security; please avoid sending detailed medical records through the public website. The approved channel for telemedicine records and sessions will be confirmed separately before continued care begins.

This website is intended for adults. We do not knowingly collect information from children under 16 online; family stays involving minors are arranged privately with a parent or guardian.

We will update this policy as the service evolves and revise the date above. Material changes will be highlighted on this page. Questions: hello@santvlana.com.