Privacy Policy

Effective date: April 21st 2026

Last updated: April 21st 2026

Mutua (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share information when we contact users through WhatsApp to validate the purchase of a tour or workshop and confirm attendance.

By interacting with our services or communicating with us through WhatsApp, you acknowledge the practices described in this Privacy Policy.

1. Scope of this Privacy Policy

This Privacy Policy applies to personal information collected in connection with:

  • the purchase of a tour, workshop, or similar experience,
  • follow-up communications sent through WhatsApp,
  • attendance confirmation and related customer support,
  • and any related website, form, or booking process used by Mutua.

2. Information We Collect

We may collect the following categories of personal information:

a. Contact information

  • Full name
  • Phone number
  • Email address

b. Purchase and booking information

  • Tour or workshop purchased
  • Date and time of booking
  • Payment or transaction reference
  • Attendance status
  • Booking preferences or special requests

c. Communication data

  • Messages exchanged through WhatsApp
  • Responses related to purchase validation
  • Confirmation or cancellation of attendance
  • Customer service interactions

d. Technical and service data

  • Date and time of messages
  • Delivery or read status, when available through the messaging platform
  • Internal records associated with the communication workflow

3. How We Use Your Information

We use your personal information for the following purposes:

  • To validate that a purchase was made correctly
  • To confirm your attendance for a tour or workshop
  • To send reminders or logistical details related to your booking
  • To respond to your questions or support requests
  • To reduce fraud, misuse, or unauthorized bookings
  • To improve our customer service and booking operations
  • To comply with legal, tax, accounting, or regulatory obligations

We will only use your information where we have a valid legal basis to do so, such as fulfilling a contract with you, complying with legal obligations, pursuing legitimate business interests, or where required, based on your consent.

4. WhatsApp Communications

As part of our service, we may contact you through WhatsApp to:

  • verify your purchase,
  • confirm your attendance,
  • send reminders,
  • and provide important information related to your booked experience.

Please note that WhatsApp is a third-party communication platform operated by Meta. Your use of WhatsApp is also subject to WhatsApp’s own terms and privacy practices. Mutua is not responsible for the independent privacy or security practices of WhatsApp or Meta.

We recommend that you do not share sensitive personal information through WhatsApp unless necessary.

5. Legal Basis for Processing

Depending on the applicable laws in your jurisdiction, we may process your personal information on one or more of the following legal bases:

  • Contractual necessity: to manage and fulfill your booking
  • Legitimate interests: to validate purchases, prevent fraud, and ensure attendance management
  • Consent: where required for messaging or marketing communications
  • Legal obligation: to comply with applicable laws and regulations

6. Information Sharing

Mutua does not sell your personal information. We may share your information only in the following situations:

  • With service providers that help us operate our booking, messaging, customer support, or data storage systems
  • With payment processors or booking platforms involved in your transaction
  • With WhatsApp or related messaging infrastructure providers as necessary to send messages
  • With legal, regulatory, or government authorities when required by law
  • In connection with a merger, acquisition, business transfer, or sale of assets, where permitted by law

Any third parties processing personal information on our behalf are expected to use appropriate safeguards and only process information for authorized purposes.

7. Data Retention

We retain your personal information only for as long as necessary to:

  • validate and manage your booking,
  • confirm attendance,
  • provide support,
  • maintain operational records,
  • resolve disputes,
  • and comply with legal, tax, or regulatory obligations.

After that, we will delete, anonymize, or securely store the information as required by applicable law.

8. Your Rights

Depending on your location and the laws that apply, you may have the right to:

  • access the personal information we hold about you,
  • correct inaccurate or incomplete information,
  • request deletion of your information,
  • object to or restrict certain processing,
  • withdraw consent where processing is based on consent,
  • and request information about how your data has been used.

To exercise these rights, please contact us using the contact details below.

9. Data Security

We take reasonable administrative, technical, and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Data Transfers

If your information is transferred to or processed in a country different from your own, we will take reasonable steps to ensure appropriate safeguards are in place, as required by applicable law.

11. Children’s Privacy

Our services are not intended for children unless the specific tour or workshop is designed for minors and booking is completed by a parent or legal guardian. We do not knowingly collect personal information directly from children without appropriate authorization where required by law.

12. Marketing Communications

If we send promotional messages separately from booking-related communications, we will do so only where permitted by law. Booking validation and attendance confirmation messages are considered service-related communications and may still be sent where necessary to fulfill the service.

You may opt out of marketing communications at any time by contacting us or following the instructions in the communication, where applicable.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be posted with a revised “Last updated” date. When required by law, we will provide additional notice of material changes.

14. Contact Us

If you have questions about this Privacy Policy or how we process your personal information, you may contact us at: