Personal Data Protection Policy

1. Introduction

BIRD GREEN EXPEDITIONS respects the privacy of its customers, website visitors, and prospective travelers. This Personal Data Protection Policy explains how personal information may be collected, used, stored, shared, and protected when you browse our website, request information, make a reservation, or participate in our tourism services.

We process personal data in accordance with applicable Peruvian law, including Law No. 29733, the Personal Data Protection Law, and its implementing regulations, as applicable.

By providing personal information, you acknowledge that you have been informed of the practices described in this Policy. Where consent is legally required, we will request it through an appropriate means. This Policy does not replace any separate consent that may be necessary for a specific purpose.

2. Data Controller

The entity responsible for processing personal information is the business operating under the commercial name BIRD GREEN EXPEDITIONS.

Contact details:

• Email: [Insert official privacy contact email]
• Phone / WhatsApp: [Insert official contact number]
• Business address: [Insert business address]
• Website: [Insert official website URL]

These details should be completed before publication so that travelers can contact the appropriate person or entity regarding their data.

3. Personal Information We May Collect

Depending on the service requested, we may collect the following categories of information:

Identification information: full name, nationality, date of birth when required, passport or identity document details, and other information necessary for ticketing or access permits.

Contact information: email address, telephone number, WhatsApp contact details, and relevant communication preferences.

Booking information: selected tour, travel dates, number of participants, meeting arrangements, accommodation details when relevant, booking reference, payment status, and communications concerning the reservation.

Payment information: payment confirmations, transaction references, billing details, and records necessary to administer the transaction. Where payments are processed by a third-party platform, that provider may process payment information under its own applicable terms. We should not request or store full card security codes.

Health and accessibility information: limited information voluntarily provided or reasonably necessary to assess safety, accessibility, dietary requirements, or assistance during an activity. Because such information may be sensitive, it should be handled with heightened care and processed only where a lawful basis exists.

Technical information: information that may be collected through website logs, cookies, analytics tools, or similar technologies, depending on the tools actually installed on the website.

4. Purposes of Processing

Personal information may be used to:

• Respond to inquiries and provide quotations.
• Manage bookings, payments, invoices, and customer communications.
• Arrange transportation, accommodation, guides, entrance tickets, permits, and other confirmed services.
• Verify traveler details where required by ticketing systems, authorities, or service providers.
• Communicate itinerary changes, meeting instructions, safety information, and service updates.
• Address complaints, incidents, claims, and refund requests.
• Comply with legal, accounting, tax, and regulatory obligations.
• Protect the security of our website, business operations, customers, and services.
• Send promotional communications only where permitted by applicable law and, when required, with the relevant consent.

We will not intentionally use personal data for purposes incompatible with those explained to the traveler without an appropriate legal basis or additional information where required.

5. Legal Basis and Consent

Personal data will be processed on an applicable legal basis, which may include the traveler’s consent, steps requested before entering into a contract, performance of a booking or service agreement, compliance with legal obligations, or another lawful basis recognized by applicable law.

Where consent is required, it must be obtained appropriately. Travelers may withdraw consent for processing based on consent, subject to legal limitations and the consequences of withdrawing information necessary to provide a service.

Withdrawing consent does not automatically invalidate processing that was lawful before the withdrawal or prevent processing required by law.

6. Sharing Information with Third Parties

We may share relevant personal data with service providers when reasonably necessary to arrange or deliver a confirmed service. These recipients may include transportation companies, accommodation providers, guides, ticketing platforms, attraction operators, payment processors, technology providers, professional advisers, and competent public authorities where legally required.

Only information relevant to the particular purpose should be shared. For example, a train operator or attraction may require identification details to issue a ticket, while a guide may need limited information relevant to meeting arrangements or safety.

Third-party providers may have their own privacy policies and responsibilities. We will take reasonable steps, where applicable, to work with providers and systems that handle personal information appropriately.

We do not sell personal data as a commercial product.

7. International Transfers

Some service providers, booking platforms, communication tools, or cloud systems may process information outside Peru. Where personal data is transferred internationally, BIRD GREEN EXPEDITIONS will address any applicable legal requirements and safeguards.

Travelers should understand that a service provider operating in another country may be subject to the laws applicable in that jurisdiction, without prejudice to protections required under Peruvian law.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including the management of bookings, customer service, accounting, legal compliance, dispute resolution, and the exercise or defense of legal claims.

The applicable retention period may vary according to the type of information, the service provided, and legal requirements. When information is no longer necessary, it will be deleted, anonymized, or securely retained where the law requires continued storage.

9. Data Security

We will implement reasonable organizational, technical, and administrative safeguards appropriate to the nature of the information and the risks associated with its processing.

These measures may include limiting access to authorized personnel, using secure systems and communication practices, maintaining appropriate records, and reviewing procedures for handling customer information.

No website, electronic transmission, or storage system can be guaranteed to be completely secure. If a security incident occurs, we will take the steps required by applicable law and the circumstances of the incident.

10. Rights of Data Subjects

Subject to applicable law, individuals may exercise their rights regarding personal data, including requesting access to their information, seeking correction or updating of inaccurate data, requesting deletion or cancellation where legally available, objecting to certain processing, or exercising other rights recognized by law.

Requests should be sent to [Insert official privacy contact email] and should clearly identify the requester and the right being exercised. We may request reasonable information to verify identity and protect personal data against unauthorized disclosure.

We will respond within the time limits and according to the procedures established by applicable law. If a request cannot be fully granted because of a legal obligation or another lawful exception, we will explain the applicable limitation where required.

Individuals may also contact the competent Peruvian data protection authority or use the procedures available under applicable law.

11. Cookies and Website Technologies

Our website may use cookies or similar technologies to maintain essential website functions, understand website usage, improve performance, or support marketing activities.

The specific cookies and technologies used will depend on the website configuration. Where consent is required for non-essential cookies or tracking technologies, the website should provide an appropriate consent mechanism and information about the relevant choices.

Users may also be able to manage cookies through their browser settings, although disabling certain cookies may affect website functionality.

12. Marketing Communications

Promotional messages, newsletters, or special offers will be sent in accordance with applicable law and any consent requirements. Travelers may request to stop receiving promotional communications through the unsubscribe mechanism provided or by contacting us.

Opting out of marketing will not necessarily stop essential service messages, such as booking confirmations, payment notices, safety information, or itinerary updates.

13. Information About Minors

Where a booking involves minors, the information required to arrange the service must be provided by a parent, guardian, or other legally authorized person where required. We will handle children’s information with particular care and comply with applicable rules concerning consent and the processing of minors’ personal data.

14. Changes to This Policy

We may update this Policy to reflect changes in our services, technology, or legal obligations. The latest version will be published on our website with its corresponding update date.