Privacy Policy

1. Who Is Responsible for Your Data

Data Controller: Mahadevi Retreats S.A.S.
NIT: 901857203-5
Registered Office: Calle 10 Sur No. 43A-54, Medellín, Antioquia, Colombia, 050021
Retreat Location: Vereda El Monclar, Mocoa, Putumayo, Colombia
Email: info@mahadeviayahuasca.com

2. What Data We Collect

Information you provide directly

• Name and email address (newsletter signup, contact forms, retreat enquiries)
• Phone number (booking and WhatsApp communications)
• Health and medical information (retreat screening forms)
• Emergency contact details (required for retreat participation)
• Communications history (emails, WhatsApp messages, discovery call notes)

Information collected automatically

• Browser type, device type, and IP address
• Pages visited and time spent on site
• Referring URL and search terms
• Cookie data (see Section 6)

3. How We Use Your Data

We use your personal data only for the following purposes:

• Processing retreat applications and managing bookings
• Health and safety screening prior to retreat attendance
• Sending retreat preparation, logistics, and integration communications
• Delivering educational content, newsletters, and program updates you have signed up for
• Responding to enquiries and providing support
• Improving our website and understanding how visitors use it
• Meeting our legal obligations under Colombian and applicable international law

4. Communications Consent

By submitting any form on this website — including newsletter signups, retreat enquiry forms, webinar registrations, or educational content requests — you consent to receiving communications from Mahadevi Retreats S.A.S.

You may unsubscribe from non-essential marketing communications at any time using the unsubscribe link in any email. Transactional and booking-related communications will continue for as long as your enquiry or reservation is active.

5. Who We Share Your Data With

Referral and affiliate partners

If you were referred to MahaDevi through a specific affiliate or partner, your name and email address may be shared with that referring partner solely to verify and process their referral commission. Partners are not permitted to use your data for their own marketing and we do not sell your data to any third party under any circumstances.

Healthcare professionals

Where required for your safety or as part of retreat coordination, we may share relevant personal and medical information with licensed healthcare professionals involved in your assessment or care. This is limited to the minimum information necessary.

Government and legal authorities

We may disclose personal information to government authorities or law enforcement where legally required to do so, or where participant safety or public health demands it. Any such disclosure is limited to what is strictly necessary.

Service providers

We use trusted third-party services for email delivery, CRM management, and website analytics. These providers process data on our behalf under contractual data protection obligations and do not use your data independently.

6. Cookies

This website uses cookies to improve your experience and support our operations. Types of cookies we use:

• Essential cookies: Required for the website to function. Cannot be disabled.
• Analytics cookies: Help us understand how visitors use our site so we can improve it.
• Marketing cookies: Set when you sign up for our newsletter, register for a webinar, or complete a booking form. Used to deliver relevant communications.

You can control or disable non-essential cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of this website.

7. How Long We Keep Your Data

• Marketing and newsletter data: Retained until you unsubscribe or request deletion
• Booking and contact data: Retained for 5 years from the date of last contact for legal and administrative purposes
• Health and medical data: Retained for a minimum of 5 years from the date of retreat attendance for safety and legal compliance purposes
• Website analytics data: Retained in aggregated, anonymized form

8. Your Rights

Under Colombian law (Ley 1581) and GDPR where applicable, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at info@mahadeviayahuasca.com. We will respond within 15 business days.

9. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security, but we treat data protection as a continuous responsibility.

10. International Data Transfers

MahaDevi is based in Colombia and our primary data processing takes place there. Where we use third-party tools that may transfer data internationally, we ensure those providers operate under adequate data protection standards consistent with Colombian law and GDPR where applicable.

11. Children

This website is not directed at children under 18. We do not knowingly collect personal data from minors. Retreat participation requires participants to be 21 or older.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be at this URL with the date of the most recent revision at the top of the page. We will notify active subscribers of material changes by email.

13. Contact & Data Requests

For any privacy question, data request, or complaint:

• Email: info@mahadeviayahuasca.com
• Phone: +57 323 208 1190
• Registered Office: Calle 10 Sur No. 43A-54, Medellín, Antioquia, Colombia, 050021
• Retreat Location: Vereda El Monclar, Mocoa, Putumayo, Colombia