Last updated: May 24th, 2026
Welcome to weAltura! We are a ticketing and registration platform dedicated to bringing the outdoor world together through live experiences and activities. Through our platform, mobile apps and services, we enable people to create, discover, share and register for outdoor events.
Thank you for taking the time to read our Privacy Policy. At weAltura ("we", "us", "our"), your privacy is essential to everything we build. We want you to feel fully informed about the data we collect, how we use and protect it, and the choices you have.
When this Privacy Policy uses the term "Organizer" we mean event creators, guides and coordinators using the Services to create events for consumers using our Services (a) to consume information about, or attend, events ("Consumers"), or (b) for any other reason.
Organizers, Consumers and third parties using our Services are all referred to in these Terms collectively as "Users", "you" or "your".
This Privacy Policy applies to our platform, mobile apps and any related digital services (collectively, the "Platform"). It is drafted in compliance with the EU General Data Protection Regulation (GDPR).
If you have any questions, you can contact us at: privacy@wealtura.com
1. The Data We Collect
We only collect information that is necessary to provide our services, improve your experience and keep you safe.
Information you provide
Account information: name, email address, password (stored in encrypted form).
Google Sign-In: if you register or log in via "Continue with Google", we receive your name, email address, account identifier, and profile picture through Google OAuth 2.0. We do not receive your Google password, contacts, calendar, or Drive content.
Profile details: profile photograph (optional), bio, city, languages spoken, activity preferences, skill level, social media links (optional).
Organiser information (additional): professional qualifications and certifications, insurance details, tax identification number, bank details for payment disbursement, business name.
Booking data: participant name, email, phone number, participant count, special requirements, booking and cancellation history.
User-generated content: reviews, ratings, photographs, messages between Users and Organisers, experience descriptions, track files (GPX/TCX), and meeting point coordinates.
Communications: messages sent to our support team, contact form submissions, newsletter subscription data.
Information collected automatically
Technical data: IP address, browser type and version, operating system, device type, screen resolution, language settings.
Usage data: pages visited, search queries, features used, time and duration of visits, referral URL.
Approximate location: derived from your IP address. We do not access your precise GPS location unless you explicitly grant permission through your browser for map-related features.
Cookies and similar technologies: as described in Section 8.
Information from third parties
We may receive data from third-party services you interact with when using our Platform, including authentication providers, payment processors, mapping services, and email delivery platforms. We only receive data necessary to provide the Service.
We never purchase personal data, nor act as a data broker.
2. How We Use Your Information
We process your data only for specific, lawful purposes. Below we explain each purpose and its legal basis under GDPR Article 6.
To operate and improve the weAltura platform
Create and manage your account.
Process bookings, cancellations, and refunds.
Facilitate communications between Users and Organisers.
Process payments and disburse funds to Organisers.
Display experience listings, search results, and interactive maps.
Enable the review and rating system.
Provide customer support and resolve disputes.
To comply with legal obligations
Retain financial and transaction records as required by applicable tax law.
Fulfil reporting obligations under EU Directive 2021/514 (DAC7) for Organisers meeting applicable thresholds.
Respond to lawful requests from judicial or administrative authorities.
Comply with obligations under the Digital Services Act (Regulation (EU) 2022/2065).
Maintain records of cookie consent.
For our legitimate interests
• Send waitlist updates, product announcements and Academy information (only if you opt in).
• Respond to your messages.
You may object to processing based on legitimate interest at any time by contacting privacy@wealtura.com.
For safety and compliance
Verify guide identities.
Ensure participant preparedness for high-risk activities.
Comply with legal obligations.
With your consent
Send marketing communications (newsletters, promotional offers, event notifications).
Place non-essential cookies and tracking technologies on your device.
Use your precise geolocation for enhanced map functionality.
Use photographs depicting identifiable persons for promotional purposes.
You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To withdraw, contact privacy@wealtura.com or use the relevant settings in your account.
3. Third-Party Web Sites and Applications
The Service contains links to third-party web sites and applications. Clicking on these links may allow those third parties to collect data about you. We do not control such web sites and applications and are not responsible for how they collect or use your data.
Google and YouTube
We use the Google APIs to enable sign-in with Google and the YouTube API to embed videos and pull associated data. When you sign in with Google, we access only your name, email address, and profile picture to create and authenticate your account. Accordingly, we comply with Google's Privacy Policy.
weAltura's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use Google user data to develop, improve, or train generalized AI or machine learning models, nor do we transfer such data to third-party AI tools for these purposes. You may revoke weAltura's access to your Google data at any time at myaccount.google.com/permissions.
Photographs and Images
Photographs and images may be uploaded to the Platform by Organisers, Users, and the weAltura team. These images may contain personal data, including facial images of identifiable persons and location metadata.
By uploading photographs, you represent that you have obtained all necessary consents from identifiable persons depicted, in accordance with applicable data protection law.
We may remove location metadata (EXIF data) from uploaded photographs for privacy protection. If you are depicted in a photograph on the Platform and did not consent to its publication, you may request removal by contacting privacy@wealtura.com. We will investigate and, where justified, remove the image within 30 days.
Photographs used for promotional purposes on social media require separate explicit consent from the uploader and, where applicable, identifiable persons depicted.
5. Payment Data
All payment transactions are processed by a third-party payment provider that is PCI DSS Level 1 certified. When you make a payment, your card data (card number, expiration date, CVV) is transmitted directly to the payment provider and is never transmitted to or stored on weAltura's servers.
We receive only limited transaction data necessary for the performance of the service and tax compliance, such as: transaction ID, payment status, payment amount, and a partial card identifier.
For Organisers, our payment provider may collect additional identity and business verification data in accordance with applicable KYC and anti-money laundering regulations. Such processing is governed by the payment provider's own privacy policy.
6. Sharing Your Information
We share personal data only when necessary to provide our services.
Between Users and Organizers
When a booking is made, the User's name, contact details, and any special requirements are shared with the relevant Organizer to enable the booked experience. The Organiser's public profile information is displayed to Users. Both parties may use such data solely for the purpose of the booked experience.
With service providers
We engage trusted third-party service providers who process data on our behalf under appropriate contractual safeguards. These include:
Hosting and database providers.
Payment processing services.
Authentication providers.
Mapping and geolocation services.
Email delivery and marketing platforms.
Web analytics tools.
For legal reasons
We may disclose data to law enforcement, judicial bodies, or regulatory authorities when required by applicable law, court order, or where necessary to protect our legal rights, user safety, or the public interest.
Business transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to a successor entity. We will notify you before any such transfer.
We do not sell, rent, or trade your personal data to third parties for marketing or commercial purposes.
7. Cookies
Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer’s hard drive.
Like many sites, we use “cookies” to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
8. Data Retention
We retain personal data only as long as necessary for the purposes described in this Policy, or as required by applicable law. In general:
Account data is retained for the duration of your account and a reasonable period thereafter.
Financial and transaction records are retained for the period required by applicable tax law.
Cookie consent records are retained for 24 months.
Server access logs are retained for a limited period for security purposes.
Reviews and ratings are anonymised upon account deletion.
After the applicable retention period, data is securely deleted or irreversibly anonymised. You may request account deletion at any time.
9. Your Rights
Under the GDPR, you have the right to:
Access your personal data and obtain a copy.
Correct inaccurate or incomplete data.
Delete your data ("right to be forgotten"), subject to legal retention obligations.
Restrict processing in certain circumstances.
Data portability — receive your data in a structured, machine-readable format.
Object to processing based on legitimate interest.
Withdraw consent at any time, without affecting prior processing.
Not be subject to solely automated decisions that produce legal effects. weAltura does not currently engage in solely automated decision-making.
To exercise any of these rights, contact: privacy@wealtura.com
We respond within 30 days, extendable by a further 60 days for complex requests.
10. Security
The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
Data Breach
In the event of a personal data breach likely to result in a risk to your rights, we will notify the competent supervisory authority within 72 hours. Where a breach is likely to result in a high risk to you, we will also notify you without undue delay, describing the nature of the breach and measures taken.
11. International Transfers
Your data is primarily stored within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure adequate safeguards are in place through mechanisms recognised under GDPR, such as adequacy decisions, Standard Contractual Clauses, or the EU-U.S. Data Privacy Framework.
You may request information about the transfer mechanisms in place by contacting privacy@wealtura.com.