Privacy and Data Protection Policy
This Privacy Policy describes the treatment that Authentic Puriq Tours grants to the personal data of its clients and users, in strict compliance with Law N° 29733, Personal Data Protection Law of Peru, and its Regulations. Our commitment is to guarantee the security and confidentiality of the collected information, with transparency and legality being the pillars of our management. Data is required solely and exclusively for the correct provision of tourist services and the issuance of official tickets, ensuring reliability for the traveler.
1. Principles and Purpose of Data Processing
Personal data requested by Authentic Puriq Tours is processed under the principles of legality, consent, and proportionality. The purpose of data processing is strictly linked to the management of your reservation and safety during the service.
- Essential Purpose: Data collection is mandatory for the purchase of access tickets (e.g., Machu Picchu, Inca Trail), trains, buses, and the contracting of travel insurance or medical assistance. Without this data, the issuance of travel documents is not possible according to the requirements of competent Peruvian entities (e.g., Ministry of Culture, CONSETTUR, OSIPTEL).
- Types of Data Collected: Includes, but is not limited to: full name, nationality, date of birth, number and copy of passport or ID, email, phone number, and relevant health data (allergies or medical conditions) solely for high-altitude trekking services.
- Explicit Consent: By confirming a reservation and making a payment, the traveler grants their express and informed consent for Authentic Puriq Tours to process their data for the aforementioned purposes.
2. Security and Information Storage
Authentic Puriq Tours adopts technical, organizational, and legal measures to protect personal data against unauthorized access, alteration, loss, or illicit processing.
- Security Measures: We implement encryption systems and firewalls to protect databases. Access to personal information is restricted only to authorized personnel who need it for the execution of contracted services.
- Retention Period: Data will be kept for the time necessary to fulfill the purpose of the service provision and for a maximum period of five years after the end of the trip, in accordance with Peruvian legal and tax obligations, or until the holder requests its cancellation.
- No Storage of Financial Data: Information referring to credit or debit cards used in online transactions is not stored on our servers. This information is processed directly by certified and secure payment gateways.
3. Transfer and Recipients of Data
Authentic Puriq Tours will only transfer personal data to third parties in specific and mandatory situations, always under the protection of Law N° 29733 and with the objective of executing the contracted service.
- Mandatory National Transfers: Identification and travel data are transferred to Peruvian state entities (Ministry of Culture, SERNANP, Tourism Directorates) and transport companies (train, bus) for the issuance of required permits and official tickets.
- Service Providers: We may share minimum and essential data with our local service providers (guides, drivers, hotels) for the correct coordination and personalization of your tour or trek. These third parties are obliged to maintain the confidentiality of the information.
- International Transfers: Data transfer to entities or servers outside Peru is limited to essential web hosting services and reservation management platforms, ensuring that these have adequate levels of protection.
4. Exercise of ARCO Rights
Every traveler, as the holder of their personal data, can exercise the rights of Access, Rectification, Cancellation, and Opposition (ARCO Rights) before Authentic Puriq Tours.
- Exercise Procedure: To exercise any of your ARCO rights, the holder must send a formal written request to the legal email address of Authentic Puriq Tours, attaching a copy of their identity document (passport or ID) for verification.
- Response Deadlines: Authentic Puriq Tours will attend to the ARCO Rights request within the deadlines established by the Personal Data Protection Law of Peru. If you consider that your request has not been attended to, you may address the National Authority for Personal Data Protection.