Prime Revive
Privacy notice
Last updated 29 July 2026
This explains what we do with the information you give us when you apply for a retreat. It is written to be read, not to be skipped.
What we collect
When you fill in the application form we ask for your name, email address and WhatsApp number, and for the details a coach needs to build your plan: your age, sex, height, weight, your goal, any dietary requirements, how long you are thinking of staying and roughly when you would arrive. There is also a free text box, and anything you write there comes to us too.
Height, weight, age, dietary requirements and anything you tell us about injuries or health conditions are health information. Data protection law treats that as a special category and sets a higher bar for holding it. We ask for it because a training and nutrition plan cannot be built without it, and we do not use it for anything else.
You have to be 18 or over to apply. We do not knowingly collect information about children, and if we find that we have, we delete it.
Why we are allowed to hold it
Different parts of this rest on different grounds, so here they are by name.
- Your plan, and the conversation about it. You asked us for a plan, so we handle your name, contact details and answers to take steps at your request and, if you book, to perform our contract with you. In UK and EU law that is Article 6(1)(b).
- Your health information specifically. We rely on your consent, Article 9(2)(a). You give it by choosing to enter those figures and send us the form, having been told on that page and here what we do with them. Every one of those fields is yours to leave blank, and you can tell us to delete them afterwards. We should be straight with you though: without your height and weight a coach cannot write you a plan, so that is the part the form genuinely needs.
- Follow-up emails about the retreat. Our legitimate interest in replying to someone who asked us about exactly this service, Article 6(1)(f). We have weighed that against your privacy: the emails are about the thing you enquired about, there are a small number of them, and every one can be stopped in one click.
- Keeping records after you become a guest. Our legal obligations and legitimate interest in keeping proper business records.
You can withdraw your consent at any time by emailing transform@primereviveretreat.com. That does not undo anything we did before you withdrew it, but it stops everything afterwards, and we will delete the health information if you ask us to.
What we do with it
We build you a personalised training and nutrition plan and send it to you. That is the reason the form exists.
We then follow up about your plan by email and, if you gave us a number, on WhatsApp. If you do not book, we may keep sending you occasional emails about the retreat until you tell us to stop. Every one of those has an unsubscribe link, it works in one click, and we act on it straight away.
Your personal plan page
Your plan is delivered as a PDF and as a private web page. That page has a long random address that is not listed anywhere, is not indexed by search engines, and is not linked from this site. In practice nobody finds it unless you share the link.
It is worth being straight about the trade-off: the page is protected by the address being unguessable rather than by a password, so anyone you forward the link to can read your plan. It contains the health details you gave us. The page stops working automatically 90 days after we create it, and you can ask us to delete it sooner at any time.
We record when the page is opened and roughly how much of it was read, so we know whether the plan reached you and is useful. That is counted against your application, not against you as a person across the internet.
Automated processing, and where AI is involved
Software does some of the work before a human sees it. You should know which parts.
- An AI model (Google Gemini) reads your application, tidies the answers into a standard form, and drafts some of the wording in your plan.
- Our system then builds the plan automatically from your figures and goal, and it can decline to build one, for example where the details are contradictory or missing, or where what you have described is not something we should be writing a training plan for without talking to you first.
- We may choose which past guest’s story to show you based on what you told us, such as your age bracket or your goal.
None of this decides anything with a legal effect on you, and a member of our team reviews your plan before it reaches you. If a plan is not produced automatically, that is not a rejection: you can reply to us and a person will pick it up. You can always ask for a human to look at your application instead, and you can ask us how a decision was reached.
Who else sees it
We are a small business and we use ordinary tools to run it:
- Google holds your application in a spreadsheet and your finished plan in Drive.
- Google Gemini reads your application and helps write the plan. Your details are sent to it for that purpose.
- Amazon Web Services delivers our email and hosts your plan page.
- Telegram is where our coaching team reviews your plan before it reaches you.
- Vercel and Cloudflare host and serve this website.
We do not sell your information, we do not rent it, and we do not pass it to anyone for their own marketing.
Where in the world it goes
We are based in Thailand, so if you are writing to us from the UK, the EU or anywhere else, your information is being sent to Thailand. Some of the services we use are based in the United States and Europe.
Thailand is not on the UK or EU list of countries with equivalent data protection rules. We are telling you that plainly rather than burying it, because it is the sort of thing you are entitled to know before you fill in a form.
The transfer is necessary to do the thing you asked us to do, which is build and send you a plan from Thailand, and by submitting the form you are asking us to do exactly that. In UK and EU law that is the Article 49(1)(b) condition. If you would rather your details did not leave the UK or the EU, the honest answer is that we cannot help you, because this is where we are.
Cookies and analytics
We use Umami to count visits and see which pages people read. It sets no cookies, does not identify you, and does not follow you to other websites. That is the only analytics running on this site.
We do not run advertising pixels, we do not record your screen or your mouse, and we do not set any cookie that would need us to interrupt you with a banner. If that ever changes, we will ask you first rather than adding it quietly.
How we look after it
Access to your application and your plan is limited to the people who need it to do their job. Everything travels over an encrypted connection, our servers are kept patched, and the accounts and keys behind them are held separately from the website. No system is perfect, and we would rather say that than claim otherwise.
How long we keep it
If you become a guest, we keep your records for as long as you are a client and for six years afterwards, which is the normal period for business records.
If you never book, we keep your application and your plan for two years so we can pick up where we left off if you come back to us, then delete them. Your plan page stops working after 90 days regardless. If you stop opening our emails we stop sending them well before any of that.
What you can ask us to do
Whatever country you are in, you can ask us to:
- give you a copy of everything we hold about you;
- correct anything that is wrong;
- delete it;
- stop using it for a while, if you have told us something is wrong and we are checking;
- stop using it for follow-up emails or marketing, which we will always do;
- hand your details to you, or to somebody else, in a format a computer can read;
- withdraw your consent for us to hold your health information.
Email transform@primereviveretreat.com and we will do it, normally within a month. You do not need to give a reason and we will not ask you for one, and it does not cost anything.
To stop the emails, use the unsubscribe link in any of them, or just reply and say stop.
If you are unhappy with us
Tell us first, at transform@primereviveretreat.com, and we will try to put it right.
If that does not resolve it and you are in the UK, you can complain to the Information Commissioner’s Office at ico.org.uk. If you are elsewhere in Europe, your national data protection authority does the same job, and in Thailand it is the Personal Data Protection Committee. You do not need our permission to go to any of them.
Who we are
Prime Revive, 54 Soi Ta-iad, Chalong, Mueang Phuket District, Phuket 83130, Thailand. We decide what happens to the information described here, which makes us the data controller for it.
For anything on this page, email transform@primereviveretreat.com.
Changes to this notice
If we change how any of this works, we update this page and change the date at the top. If the change is a significant one and we hold your email address, we will tell you rather than leaving you to notice.