Inicio Personal Data Protection Policy

Personal Data Protection Policy

At Ayllu Experiences, we value the privacy and security of the personal information provided by our customers, website visitors, travelers, and business partners. This Personal Data Protection Policy explains how we collect, use, store, protect, and manage personal information when you visit our website, contact us, make a reservation, or use our travel services.

By using our website or providing personal information to Ayllu Experiences, you acknowledge that you have read and understood this Policy.

1. Scope of This Policy

This Personal Data Protection Policy applies to personal information collected by Ayllu Experiences through our website, reservation channels, email, telephone, messaging applications, social media, in-person interactions, and other communication channels used to provide our services.

This Policy applies to customers, potential customers, travelers, website visitors, suppliers, and other individuals who provide personal information to us.

2. Information We Collect

Depending on the service requested and the nature of our relationship with you, Ayllu Experiences may collect information such as:

Full name and identification details.
Date of birth when necessary for a specific service.
Passport or identification information when required for travel arrangements.
Contact information, including email address, telephone number, and messaging details.
Travel dates, destinations, accommodation preferences, and tour selections.
Emergency contact information when necessary.
Dietary requirements or other information voluntarily provided for the organization of a travel service.
Payment and transaction information required to process a reservation.
Information related to communications, inquiries, requests, or complaints.
Technical information obtained when you use our website, such as IP address, browser type, device information, and browsing activity, where applicable.

We only request information that is reasonably necessary for the purposes described in this Policy or for the provision of the requested service.

3. How We Collect Personal Information

Personal information may be collected directly from you when you:

Make or request a reservation.
Complete a form on our website.
Contact us by email, telephone, WhatsApp, social media, or other communication channels.
Request information about our tours or services.
Subscribe to communications or promotional content.
Provide information during a trip or while receiving one of our services.

We may also receive certain information from authorized third-party suppliers when it is necessary to coordinate and provide the services you have requested.

4. Purpose of Processing Personal Data

Ayllu Experiences may process personal information for the following purposes:

To manage and confirm travel reservations.
To provide tours, transportation, accommodation, and other contracted services.
To communicate with customers before, during, and after their trip.
To coordinate services with hotels, transportation companies, guides, activity providers, and other relevant suppliers.
To process payments and manage transactions.
To respond to questions, requests, complaints, and customer service inquiries.
To comply with legal, tax, accounting, or regulatory obligations.
To improve our services and customer experience.
To prevent fraud, misuse, or unauthorized activities.
To send promotional communications when permitted by applicable law and where the necessary consent has been obtained.

5. Legal Basis for Processing

Ayllu Experiences processes personal information based on the applicable legal grounds established by relevant data protection legislation.

Depending on the circumstances, processing may be necessary to perform a contract or provide a requested service, comply with legal obligations, protect legitimate interests, or obtain the individual’s consent where consent is required.

Where processing is based on consent, the individual may withdraw such consent subject to applicable legal limitations and the circumstances of the processing.

6. Travel and Sensitive Information

Certain travel arrangements may require information that could be considered sensitive or particularly protected under applicable data protection laws, such as health-related information, dietary restrictions, allergies, mobility requirements, or other special assistance needs.

Ayllu Experiences will only request or process such information when it is necessary to provide or coordinate the requested service, when voluntarily provided by the customer, or when otherwise permitted or required by applicable law.

Customers are encouraged to provide only information that is necessary for the proper organization and safe provision of their travel services.

7. Sharing Information with Service Providers

To provide the services requested by customers, Ayllu Experiences may share relevant personal information with third-party service providers, including:

Hotels and accommodation providers.
Transportation companies.
Airlines, when applicable.
Tour guides and local operators.
Restaurants and activity providers.
Travel insurance providers, when applicable.
Payment processors and financial institutions.
Technology and communication service providers.

Only information reasonably necessary for the provision or administration of the corresponding service will be shared whenever practicable.

Third-party providers may process personal information according to their own privacy policies and applicable legal requirements.

8. International Transfers

Some of our service providers, technology platforms, payment processors, communication services, or travel partners may operate in countries outside Peru.

When personal information is transferred internationally, Ayllu Experiences will take reasonable measures to ensure that such transfers are handled in accordance with applicable data protection requirements.

Where required by law, appropriate safeguards, contractual measures, consent, or other legally recognized mechanisms may be used.

9. Payment Information

Payments may be processed through banks, payment platforms, financial institutions, or other authorized payment providers.

Ayllu Experiences does not intend to retain complete payment card information when such information is processed directly by an authorized third-party payment provider.

Customers should review the privacy and security policies of the relevant payment provider when using external payment platforms.

10. Marketing Communications

Ayllu Experiences may use personal contact information to send information about our tours, travel experiences, special offers, news, or other promotional communications when permitted by applicable law.

Where consent is required, we will request it through the appropriate channel.

Customers may unsubscribe from promotional communications at any time by following the instructions included in the communication or by contacting us directly.

Unsubscribing from marketing communications does not necessarily prevent us from sending essential messages related to an existing reservation, payment, itinerary, or other contracted service.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve functionality, analyze website usage, remember preferences, enhance security, and, where applicable, support marketing activities.

Cookies may collect information such as browser type, device information, approximate location, pages visited, and interaction with our website.

Where required by applicable law, users will be provided with appropriate choices regarding the use of non-essential cookies.

Users may also manage or disable cookies through their browser settings, although doing so may affect certain website functionalities.

12. Data Security

Ayllu Experiences takes reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

Customers are also responsible for taking reasonable precautions when sharing personal information online and for protecting their own accounts, devices, passwords, and communication channels.

13. Data Retention

Ayllu Experiences will retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, provide services, comply with contractual and legal obligations, resolve disputes, maintain business records, or fulfill other legitimate purposes.

Retention periods may vary depending on the type of information and the applicable legal or regulatory requirements.

When personal information is no longer required, it will be deleted, anonymized, or securely disposed of where reasonably practicable.

14. Rights of Data Subjects

Subject to applicable law, individuals may have rights regarding their personal information, including the right to:

Request access to their personal information.
Request correction of inaccurate or incomplete information.
Request deletion of personal information where legally applicable.
Request restriction of certain processing activities.
Object to certain uses of their information.
Withdraw consent where processing is based on consent.
Request information about how their personal information is being processed.

Requests will be evaluated in accordance with applicable data protection legislation.

15. How to Exercise Your Rights

Individuals wishing to exercise their data protection rights may contact Ayllu Experiences through our official communication channels.

A request should include sufficient information to identify the individual and clearly describe the right being exercised or the action being requested.

For security purposes, we may request reasonable information to verify the identity of the person making the request.

We will respond within the period established by applicable law.

16. Minors

Our services are primarily intended for adults. Where a reservation involves a minor, personal information may be collected from or provided by the minor’s parent, legal guardian, or authorized adult when necessary to provide the requested service.

Ayllu Experiences does not knowingly seek to collect unnecessary personal information from minors.

Parents or legal guardians may contact us regarding personal information relating to a minor under their responsibility.

17. Third-Party Websites and Services

Our website or communications may contain links to third-party websites, platforms, social networks, booking systems, payment providers, or other external services.

Ayllu Experiences is not responsible for the privacy practices, security measures, content, or policies of third-party websites or services.

We recommend reviewing the privacy policies of external platforms before providing personal information through them.

18. Changes to This Policy

Ayllu Experiences may update this Personal Data Protection Policy from time to time to reflect changes in our services, technology, business practices, or applicable legal requirements.

When changes are made, the updated version will be published on our website with the corresponding revision date.

We encourage users to periodically review this Policy to remain informed about how their personal information is handled.

19. Contact Information

If you have questions, concerns, requests, or complaints regarding this Personal Data Protection Policy or the processing of your personal information, you may contact Ayllu Experiences through the official contact information provided on our website.

We will make reasonable efforts to review and address privacy-related inquiries in accordance with applicable legislation.