Experience Privacy Policy

Last updated · 12 July 2026

VIVA Quinta is a brand of Musas Encantadoras Lda, a Portuguese limited company. In this Experience Privacy Policy, "we", "us", and "our" refer to Musas Encantadoras Lda, trading as VIVA Quinta.

This Experience Privacy Policy explains how we collect, use, store, share, and protect personal data in connection with public and guest experiences offered by VIVA Quinta, including cooking classes, farm tours, dining experiences, seasonal workshops, and other similar activities that may be offered from time to time.[web:109][web:114][web:123]

This policy applies whether you are an overnight guest attending an experience or a day visitor booking an experience without staying overnight. It is separate from our website privacy policy and from our Property Privacy Policy for overnight stays.[web:109][web:117][web:118]

1. Who we are

If you have questions about this policy or how your personal data is handled in connection with an experience, contact us at reservations@vivaquinta.com.

2. Working farm notice

All VIVA Quinta experiences take place on or in connection with working farms. This means participants may see or encounter farm staff, service providers, animals, deliveries, vehicles, maintenance work, cultivation activity, harvesting, hospitality staff, and ordinary farm operations during the experience.

We include this notice so participants understand the nature of the environment before attending. Participation in an experience does not imply exclusive access to the farm or isolation from ordinary agricultural and hospitality operations.

3. What data we collect

We collect only the personal data reasonably necessary to manage bookings, host participants safely, deliver experiences, communicate with attendees, process payments, and comply with legal obligations.[web:109][web:114][web:117]

a) Booking and contact data

• Full name
• Email address
• Telephone number
• Billing details where required
• Booking reference and booking history
• Number of participants included in the booking
• Messages, inquiries, and communications with us

b) Participation data

• Selected experience
• Scheduled date and time
• Attendance status
• Special requests relevant to participation
• Age-related participation information where relevant, such as minimum age requirements for cooking classes

c) Payment and billing data

• Payment status and transaction references
• Billing name and billing address where required
• Refund, cancellation, or chargeback records

Payment card data is generally processed by our payment providers or booking systems. We do not intentionally store full payment card numbers unless this is securely handled within an authorized payment environment.[web:109][web:117][web:118]

d) Dietary, allergy, and accessibility data

• Dietary restrictions
• Food allergies or intolerances disclosed by the participant
• Accessibility needs voluntarily shared with us
• Other health-related information voluntarily provided where relevant to safe participation

We ask participants to provide only the information reasonably necessary for safe participation and service delivery.[web:112][web:118]

e) Safety and operational data

• Arrival timing and attendance records
• Incident reports, complaints, or support records
• Communications relating to cancellations, delays, safety, or operational changes

f) Photography and video

Participants may appear incidentally in general photographs or video footage captured during experiences for operational, documentary, or promotional purposes where permitted by law and where appropriate notice has been provided.[web:109][web:112][web:118]

If we intend to use identifiable images of a participant in a more focused or promotional manner, we should seek appropriate permission where required.[web:109][web:118]

4. Security cameras and monitoring

Because VIVA Quinta experiences take place on working farm properties, participants should be aware that some properties use exterior gate cameras and exterior house cameras as part of safety and security operations.

These cameras are used only in exterior areas such as gates, entrances, driveways, access points, and surrounding outdoor areas. There are no cameras inside the houses or in private interior guest accommodation spaces.

Exterior camera data may be used for access verification, incident investigation, property protection, safety review, fraud prevention, insurance matters, and compliance with legal obligations where applicable.[web:117][web:118]

5. How we use your data

We use participant data only where there is a clear booking, service, safety, legal, or operational reason to do so.[web:109][web:114][web:117]

6. Dietary, allergy and health-related information

If you attend a cooking class, dining experience, tasting, or other food-related event, we may process dietary restrictions, allergy information, and related details that you choose to provide so that we can try to accommodate your needs safely and appropriately.[web:109][web:112][web:118]

Where we receive health-related or allergy-related information, we will use it only for the limited purpose of assessing participation needs, menu planning, risk management, and safe service delivery, and we will restrict access to those who need the information.[web:112][web:118]

Because experiences may involve shared preparation spaces, ingredients, and equipment, participants should understand that we cannot guarantee a completely allergen-free environment.

7. Who we share your data with

We do not sell participant personal data. We share personal data only where reasonably necessary to operate experiences, process payments, deliver services, or comply with law.[web:109][web:112][web:117]

• Booking and payment providers involved in reservations and payment processing
• Operational service providers such as chefs, guides, support staff, drivers, photographers, or other service partners where limited information is necessary for the experience
• Professional advisers such as accountants, lawyers, insurers, and IT or security consultants, where necessary and subject to confidentiality obligations
• Authorities or regulators where legal disclosure obligations apply

We do not share participant lists with third parties for unrelated marketing without an appropriate legal basis or consent where required.[web:117][web:118]

8. International transfers

Some technology providers or service partners may process personal data outside the European Economic Area or the United Kingdom. Where that occurs, we use appropriate safeguards required by applicable data protection law, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.[web:109][web:117][web:118]

9. How long we keep your data

We retain participant personal data only for as long as reasonably necessary for the purposes for which it was collected, including booking administration, legal compliance, safety, accounting, and dispute resolution.[web:109][web:114][web:117]

• Booking and communication records: for as long as needed to manage the experience and any related follow-up
• Accounting and payment records: for the legally required retention period under applicable tax and accounting rules
• Dietary, allergy, or accessibility information: only as long as reasonably needed for the relevant experience and related operational follow-up, unless longer retention is legally required
• Security, incident, or dispute records: for as long as reasonably necessary to investigate, defend, or resolve the matter
• Marketing consent records: until consent is withdrawn or the record is no longer needed to demonstrate compliance

10. Your rights

Subject to applicable law, you may have the right to request access to your personal data, correction of inaccurate data, deletion of data, restriction of processing, objection to certain processing, and data portability.[web:109][web:112][web:118]

These rights are not absolute. For example, we may be unable to delete data that we are required by law to retain for accounting, fraud prevention, legal claims, or security incident documentation.[web:109][web:123]

To exercise your rights, contact reservations@vivaquinta.com. We may request reasonable proof of identity before acting on your request.[web:109][web:118]

11. Security

We use reasonable technical and organizational measures to protect participant personal data against unauthorized access, misuse, alteration, disclosure, or destruction.[web:109][web:114][web:117]

• Restricted access to booking and participant records
• Limited access to dietary or health-related information
• Use of service providers subject to confidentiality and data protection obligations
• Use of secure systems for booking, payment, and communications where available

No system can be guaranteed to be completely secure. If a personal data breach occurs and notification is legally required, we will act in accordance with applicable law.[web:118]

12. Complaints

If you believe your personal data has been processed unlawfully, you may contact us first so that we can try to resolve the issue promptly.

You also have the right, where applicable, to lodge a complaint with the relevant data protection authority, including the Portuguese supervisory authority:

13. Changes to this policy

We may update this Experience Privacy Policy from time to time to reflect legal, operational, technical, or service changes. The "Last updated" date at the top of this page indicates when it was last revised.

Material changes may be communicated through booking forms, booking confirmations, participant emails, or other appropriate notices.

14. Contact

For any questions, requests, or concerns about this Experience Privacy Policy or how participant personal data is handled, contact us at: