Legal
Privacy Policy
Last updated July 26, 2026
Visiting Wrld LLC Effective Date: July 26, 2026 Last Updated: July 26, 2026
1. Introduction
Visiting Wrld LLC ("Visiting Wrld," "we," "us," or "our") operates the websites located at visitingwrld.com, the VW Central Hub application, and the VW Retreater Portal application (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you access or use our Services, participate in our retreats, or otherwise interact with us.
We recognize that our Services may reveal or imply sensitive personal information about you, including but not limited to sexual orientation and gender identity. We treat this information with the highest degree of care and confidentiality. We will never sell, rent, or share this information for purposes unrelated to our Services without your explicit consent.
By accessing or using our Services, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with our practices, please do not use our Services.
2. Definitions
- "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.
- "Sensitive Personal Information" means Personal Information that reveals (a) racial or ethnic origin; (b) sexual orientation; (c) precise geolocation; (d) health information; (e) biometric data; or (f) the contents of private communications, as defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), the General Data Protection Regulation ("GDPR"), and other applicable laws.
- "Processing" means any operation performed on Personal Information, including collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
3. Information We Collect
3.1 Information You Provide Directly
| Category | Examples | Purpose |
|---|---|---|
| Identity information | Full name, email address, phone number, mailing address, date of birth | Account creation, retreat registration, communications, shipping |
| Payment information | Credit/debit card details (processed by Stripe), billing address | Payment processing, invoicing, refunds |
| Retreat participation data | Package selection, dietary preferences, t-shirt size, fitness level | Retreat planning and personalization |
| Travel information | Passport details (if voluntarily provided), flight itineraries, arrival/departure times | Travel coordination, airport transfers, flight tracking |
| Communications | Emails, SMS messages, call recordings (with consent), chat messages, discovery call content | Customer support, sales, service delivery |
| User-generated content | Photos, videos, testimonials, reviews uploaded to our Services | Community features, marketing (with separate consent) |
| Social media identifiers | Instagram handle, Discord username | Community engagement, communications |
| Application/intake responses | Responses to discovery call questions, intake forms | Service customization, eligibility assessment |
3.2 Information Collected Automatically
When you access our Services, we automatically collect:
- Device information: Browser type, operating system, device identifiers, screen resolution
- Usage data: Pages visited, features accessed, click patterns, time spent on pages, referring URLs
- Log data: IP address, access times, error logs, request metadata
- Location data: Approximate location derived from IP address. We do not collect precise GPS location from your device without your explicit consent.
- Cookies and similar technologies: See our Cookie Policy (Section 12) for details.
3.3 Information from Third Parties
We may receive Personal Information from:
- Payment processors (Stripe): Transaction status, payment confirmations, fraud detection signals
- Customer relationship management (GoHighLevel): Contact records, communication history, appointment data
- Flight tracking services: Real-time flight status data linked to itineraries you provide
- Social media platforms: Publicly available profile information if you interact with our social media accounts
- Referrals: Name and contact information provided by a referring party with your knowledge
3.4 Sensitive Personal Information
By engaging with Visiting Wrld, which provides services specifically designed for LGBTQ+ individuals, your participation may reveal or imply information about your sexual orientation or gender identity. We classify this as Sensitive Personal Information and apply heightened protections as described in Section 8.
We also process health-related information to the extent you share fitness goals, physical limitations, dietary needs, or medical conditions relevant to retreat participation.
We do not intentionally collect Sensitive Personal Information beyond what is reasonably necessary to provide our Services.
4. How We Use Your Information
We use your Personal Information for the following purposes:
4.1 Service Delivery
- Processing retreat registrations, payments, and refunds
- Coordinating travel logistics, accommodations, and activities
- Communicating retreat details, schedules, and updates
- Providing customer support
- Managing your account on our Services
4.2 Communications
- Sending transactional emails (confirmations, receipts, schedule changes)
- Sending SMS messages (appointment reminders, retreat updates) with your prior consent
- Marketing communications (email campaigns, promotional offers) with your consent or as permitted by law
- Responding to inquiries and support requests
4.3 Business Operations
- Processing payments and preventing fraud
- Maintaining internal records and financial reporting
- Analyzing usage patterns to improve our Services
- Conducting quality assurance on discovery calls (with recording consent)
- Staff scheduling, commission tracking, and operational management
4.4 Legal and Safety
- Complying with legal obligations
- Enforcing our Terms of Service
- Protecting the rights, safety, and property of Visiting Wrld, our customers, and the public
- Responding to lawful requests from authorities
4.5 Marketing and Analytics
- Personalizing your experience on our Services
- Measuring the effectiveness of marketing campaigns
- Conducting analytics and research to improve our Services
- Displaying targeted advertisements on third-party platforms (with your consent where required)
4.6 Artificial Intelligence
We use artificial intelligence to power certain features and to assist with certain communications. This means that:
- Some replies you receive from us over SMS, social media messaging, or in-app chat may be generated or assisted by AI, with our team overseeing conversations and stepping in directly when needed. If you ask whether you are talking with an AI assistant, we will tell you honestly.
- Some in-app features (such as meal photo analysis, flight document parsing, coaching tools, and concierge features) process the content you submit using AI service providers listed in Section 6.1.
- AI outputs are reviewed by our team where they affect your booking, payments, or safety.
We do not use your Personal Information to train third-party AI models.
5. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area ("EEA"), United Kingdom ("UK"), or Switzerland, we process your Personal Information under the following legal bases:
| Legal basis | Processing activities |
|---|---|
| Consent (Art. 6(1)(a), Art. 9(2)(a)) | Processing Sensitive Personal Information (sexual orientation, health data); marketing communications; non-essential cookies; call recording; photo/media use in marketing |
| Performance of a contract (Art. 6(1)(b)) | Processing retreat registrations; payment processing; travel coordination; account management |
| Legitimate interests (Art. 6(1)(f)) | Fraud prevention; service improvement; internal analytics; customer support; security |
| Legal obligation (Art. 6(1)(c)) | Tax reporting; responding to lawful government requests; maintaining financial records |
You may withdraw consent at any time by contacting us at privacy@visitingwrld.com. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
6. How We Share Your Information
We do not sell your Personal Information. We do not share your Personal Information for cross-context behavioral advertising purposes.
We share Personal Information with the following categories of recipients:
6.1 Service Providers
| Provider | Data shared | Purpose |
|---|---|---|
| Stripe, Inc. | Payment details, billing address, transaction data | Payment processing |
| GoHighLevel (HighLevel Inc.) | Contact info, communications, appointment data | CRM, SMS, email delivery |
| Supabase, Inc. | Account data, retreat data, application data | Database hosting, authentication |
| Vercel, Inc. | Usage data, IP addresses | Application hosting |
| Fathom Video Inc. | Call recordings, transcripts (with consent) | Call analysis, quality assurance |
| Shippo, Inc. | Mailing addresses | Shipping fulfillment |
| Discord Inc. | Username, messages within our server | Community management |
| Slack Technologies, LLC | Internal team communications that may reference your information | Internal operations |
| Google LLC | Operational data stored in Google Workspace | Internal record-keeping |
| Anthropic PBC / Google LLC (AI services) | Content you submit to AI-powered features (chat and coaching messages, meal photos, uploaded travel documents), and pseudonymized service data | AI-powered features, AI-assisted analysis, quality assurance |
| Meta Platforms, Inc. | Hashed identifiers (email, phone) for ad measurement | Advertising measurement (CAPI) |
| Google LLC (Analytics and Ads), Meta Platforms, Microsoft Advertising, Pinterest | Device and usage data collected via cookies and tags on visitingwrld.com | Analytics and advertising measurement (see Cookie Policy) |
All service providers are contractually obligated to process your information only as necessary to perform services on our behalf and to maintain appropriate security measures.
6.2 Legal Disclosures
We may disclose your Personal Information if required to do so by law, or if we believe in good faith that such disclosure is necessary to:
- Comply with a legal obligation, court order, or governmental request
- Protect and defend our rights or property
- Prevent or investigate possible wrongdoing
- Protect the personal safety of users of our Services or the public
- Protect against legal liability
6.3 Business Transfers
If Visiting Wrld is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your Personal Information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your Personal Information.
6.4 With Your Consent
We may share your Personal Information for purposes not described in this Privacy Policy with your explicit consent.
7. Data Retention
We retain your Personal Information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
| Data category | Retention period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 3 years after last activity | Contract performance, customer support |
| Payment and transaction records | 7 years from transaction date | Tax and financial reporting obligations |
| Communications (email, SMS) | 3 years from date of communication | Customer support, dispute resolution |
| Call recordings | 2 years from recording date, or until consent is withdrawn | Quality assurance, training |
| Retreat participation data | 5 years from retreat date | Repeat customer service, alumni features |
| Usage and analytics data | 26 months from collection | Service improvement |
| Marketing consent records | Duration of consent + 3 years | Proof of consent |
You may request deletion of your Personal Information at any time, subject to the exceptions described in Section 9.
8. Protection of Sensitive Personal Information
We apply the following additional protections to Sensitive Personal Information:
- Access controls. Access to data that reveals or implies sexual orientation, gender identity, or health information is restricted to authorized personnel with a legitimate operational need.
- No sale or sharing. We never sell, rent, or share Sensitive Personal Information for advertising, marketing by third parties, or any purpose unrelated to our Services.
- Encryption. Sensitive Personal Information is encrypted in transit (TLS 1.2+) and at rest.
- Minimization. We do not require you to disclose sexual orientation or gender identity. Any inference arises from your voluntary participation in our Services.
- Breach notification. In the event of a data breach involving Sensitive Personal Information, we will notify affected individuals and relevant authorities within the timeframes required by applicable law (72 hours under GDPR; as required under CCPA and state breach notification laws).
- Outing prevention. We will never disclose your participation in our retreats or use of our Services to any third party (including family members, employers, or the public) without your explicit written consent. Participants who wish to remain anonymous in marketing materials may opt out of photo and media use at any time.
9. Your Privacy Rights
9.1 Rights Under CCPA/CPRA (California Residents)
If you are a California resident, you have the following rights:
- Right to know. You may request that we disclose the categories and specific pieces of Personal Information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it.
- Right to delete. You may request deletion of your Personal Information, subject to certain exceptions (legal obligations, ongoing transactions, security).
- Right to correct. You may request correction of inaccurate Personal Information.
- Right to opt out of sale/sharing. We do not sell or share your Personal Information for cross-context behavioral advertising. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link.
- Right to limit use of Sensitive Personal Information. You may direct us to limit the use and disclosure of your Sensitive Personal Information to what is necessary to perform our Services. To exercise this right, contact us at privacy@visitingwrld.com.
- Right to non-discrimination. We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, contact us at privacy@visitingwrld.com or call +1 (248) 790-0398. We will respond within 45 days. You may designate an authorized agent to make a request on your behalf.
We will verify your identity before processing your request using the email address and/or phone number associated with your account.
9.2 Rights Under GDPR (EEA/UK/Swiss Residents)
If you are located in the EEA, UK, or Switzerland, you have the following rights:
- Right of access (Art. 15): Request a copy of your Personal Information.
- Right to rectification (Art. 16): Request correction of inaccurate data.
- Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten").
- Right to restriction (Art. 18): Request restriction of processing.
- Right to data portability (Art. 20): Request your data in a structured, machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent (Art. 7(3)): Withdraw consent at any time.
- Right to lodge a complaint: You may file a complaint with your local supervisory authority.
To exercise these rights, contact our Data Protection Contact at privacy@visitingwrld.com.
9.3 Rights Under Other State Privacy Laws
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out. Contact us at privacy@visitingwrld.com to exercise your rights.
10. International Data Transfers
Visiting Wrld is based in the United States. Your Personal Information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate, including but not limited to Costa Rica, Indonesia, Thailand, and Mexico.
If you are located in the EEA, UK, or Switzerland, transfers of your data outside these regions are made pursuant to appropriate safeguards, including:
- Standard contractual clauses approved by the European Commission
- Service provider certifications and commitments
- Your explicit consent for specific transfers
By using our Services, you acknowledge that your information may be processed in the United States, where data protection laws may differ from those in your jurisdiction.
11. Data Security
We implement and maintain reasonable administrative, technical, and physical safeguards to protect your Personal Information, including:
- Encryption in transit (TLS 1.2+) and at rest
- Access controls and role-based permissions
- Multi-factor authentication for administrative access
- Regular security audits and monitoring
- Secure credential storage (no credentials in source code)
- Incident response and breach notification procedures
No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially reasonable means to protect your Personal Information, we cannot guarantee absolute security.
12. Cookies and Tracking Technologies
See our separate Cookie Policy at visitingwrld.com/cookie-policy for detailed information about the cookies and tracking technologies we use, how to manage your preferences, and your opt-out choices.
13. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect Personal Information from children under 18. If we become aware that we have collected Personal Information from a child under 18, we will take steps to delete such information promptly. If you believe a child has provided us with Personal Information, contact us at privacy@visitingwrld.com.
14. Third-Party Links and Services
Our Services may contain links to websites, applications, or services operated by third parties (including Discord, Instagram, and payment platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any Personal Information.
15. Discovery Call Recordings
We use Fathom Video Inc. to record and transcribe discovery calls for quality assurance and training purposes. You will be notified at the beginning of each call that it is being recorded. Your continued participation constitutes consent to recording. You may request that a call not be recorded, and we will accommodate that request.
Recordings are retained for 2 years or until you request deletion, whichever is sooner. Recordings are accessible only to authorized Visiting Wrld personnel.
If you are located in a jurisdiction that requires all-party consent for call recording (e.g., California, Illinois, Florida), the notification provided at the start of the call and your continued participation constitutes your consent.
16. SMS and Text Messages
We send SMS and text messages for appointment reminders, retreat updates, and marketing communications. By providing your phone number and opting in to receive text messages, you consent to receive such messages from Visiting Wrld.
See our SMS Terms and Conditions at visitingwrld.com/sms-terms for complete details, including message frequency, opt-out instructions, and your TCPA rights.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our Services and updating the "Last Updated" date. For material changes that affect how we process Sensitive Personal Information, we will provide additional notice (e.g., email notification, in-app banner) and, where required by law, obtain your renewed consent.
Your continued use of our Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.
18. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us:
Visiting Wrld LLC Email: privacy@visitingwrld.com Phone: +1 (248) 790-0398 Mailing Address: 35954 W 13 Mile Rd, Farmington Hills, MI 48331
For GDPR inquiries, contact our Data Protection Contact at privacy@visitingwrld.com.
19. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the State of Michigan, without regard to its conflict of law provisions, except where superseded by applicable federal law or the privacy laws of your jurisdiction of residence.
This Privacy Policy does not create any contractual or other legal rights in or on behalf of any party beyond those provided by applicable law.