Privacy Policy

1. Introduction

LaWayra Retreat (“LaWayra,” “we,” “us,” or “our”) operates the website lawayraretreat.com and related booking, scheduling, and consultation services (collectively, the “Services”). This Privacy Policy explains what information we collect from you, how we use it, who we share it with, and the choices you have. By using the Services, you agree to the practices described here.

If you do not agree with any part of this Policy, please do not use the Services.

2. Information We Collect

Information you give us directly

• Booking and consultation details: Name, email address, phone number, country, preferred retreat dates, the package you’re interested in, and any health or intention information you share with us before, during, or after a consultation call.
• Payment information: When you book a retreat, our payment processors (BookingLayer, Stripe, and others) collect the card and billing data needed to complete the transaction. We do not store full card numbers on our own servers.
• Communications: Messages you send us by email, WhatsApp, web form, or social media.
• How you heard about us: The source you select on the booking form (e.g., Google, Friend Recommendation, Instagram).

Information we collect automatically

• Device and browsing data: IP address, browser type, operating system, referring URL, pages viewed, and time spent on each page.
• Cookies and similar technologies: We use first- and third-party cookies for site functionality, analytics, and advertising. See Section 7 for details.
• Conversion tracking: When you click an ad, fill out a form, or complete a booking, we record that event through tools like the Meta Pixel, Google Ads conversions, and Google Analytics 4 to measure marketing performance.

Information from third parties

• Ad platforms: Meta (Facebook/Instagram), Google Ads, and TikTok may share aggregated audience and conversion data with us.
• Booking and CRM platforms: BookingLayer (retreat bookings) and GoHighLevel (consultations, follow-up) sync your booking and lead data with us.
• Reviews and social mentions: Public reviews you leave on Google, Tripadvisor, or social media.

3. How We Use Your Information

We use the information we collect to:

• Process your booking, confirm your stay, and provide the retreat experience you signed up for.
• Schedule and conduct consultation calls and pre-arrival communications.
• Send transactional messages (booking confirmations, payment receipts, pre-arrival details, post-retreat integration content).
• Send marketing messages about upcoming retreats, group events, and community programs — only where you’ve opted in or where permitted by law. You can opt out at any time.
• Improve the Services, our website, and our marketing through analytics.
• Comply with legal obligations and enforce our Terms & Conditions.
• Protect the safety of guests, staff, and the retreat community.

4. Legal Bases (EEA/UK Visitors)

If you’re in the European Economic Area or the United Kingdom, we rely on the following legal bases under GDPR/UK GDPR:

• Contract: To process your booking and provide the retreat.
• Consent: For marketing emails, non-essential cookies, and any sensitive information you choose to share.
• Legitimate interests: To run our business, secure our site, prevent fraud, and improve our Services.
• Legal obligation: Where we’re required to retain or disclose information by law.

5. How We Share Your Information

We do not sell your personal information. We share it only with:

• Service providers that help us operate the business, including BookingLayer (bookings), GoHighLevel (CRM and scheduling), Stripe (payments), Google Workspace (email and analytics), Meta and Google (ads), Zapier and n8n (automations), Vercel (hosting), and Discord (internal alerts).
• Retreat partners (facilitators, transport providers, accommodation staff) only with the information needed to deliver your retreat.
• Legal and safety: If required by law, court order, or to protect the rights, property, or safety of LaWayra, our guests, or others.
• Business transfers: If LaWayra is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. International Transfers

LaWayra is based in Colombia. Many of our service providers are located in the United States, the European Union, or other countries. By using the Services, you understand that your information may be transferred to and processed in countries that may have different data-protection laws than your own. Where required, we put appropriate safeguards in place (such as Standard Contractual Clauses).

7. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Keep the site working (essential cookies).
• Remember your preferences.
• Measure traffic and performance (Google Analytics 4).
• Measure and optimize advertising (Meta Pixel, Google Ads, TikTok Pixel).

You can control non-essential cookies through your browser settings or the consent banner shown on first visit. Disabling certain cookies may affect site functionality.

8. Data Retention

We keep your personal information only as long as needed to provide the Services and meet legal, accounting, or reporting obligations. Booking and financial records are typically retained for at least seven (7) years. Marketing data is retained until you opt out or request deletion.

9. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information (subject to legal exceptions).
• Object to or restrict certain processing.
• Withdraw consent for marketing or other consent-based processing.
• Request portability of your information.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email us at [email protected]. We’ll respond within the timeframe required by applicable law.

10. Security

We use commercially reasonable technical and organisational measures to protect your information — including encryption in transit, access controls, and vetted vendors. No system is 100% secure, and we can’t guarantee absolute security.

11. Children’s Privacy

The Services are not intended for anyone under 18. We do not knowingly collect information from children. If you believe we’ve collected information from a minor, please contact us so we can delete it.

12. Third-Party Links

Our site may link to third-party websites (Google reviews, YouTube, Spotify, Instagram, etc.). We’re not responsible for the privacy practices of those sites. Please review their policies before sharing information with them.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we’ll update the “Last updated” date above and, for material changes, give you reasonable notice (such as a banner on the site or an email). Your continued use of the Services after changes take effect means you accept the updated Policy.

14. Contact Us

Questions about this Privacy Policy or your personal information?