Last updated: August 2026
At Illapa Culturas Andinas, we respect the privacy of our customers, passengers, website users, prospective customers, and any other individuals who interact with us.
This Privacy and Personal Data Protection Policy explains, in a clear and transparent manner, how we collect, use, store, protect and, when applicable, share personal data obtained through our website, online forms, digital channels, commercial communications, and the provision of our travel and tourism services.
The processing of personal data is carried out in accordance with Peruvian Law No. 29733, Personal Data Protection Law, its Regulations approved by Supreme Decree No. 016-2024-JUS, and other applicable provisions issued by the Peruvian National Authority for Personal Data Protection.
The company operating under the commercial name Illapa Culturas Andinas is responsible for the processing of personal data obtained through its communication channels and services.
The company’s complete legal identification details, including its legal business name, Tax Identification Number (RUC), registered address, and official contact channels for personal data matters, should remain clearly published and updated on this website.
For any questions regarding this Policy or the processing of personal data, users may contact Illapa Culturas Andinas through the official contact channels published on our website.
Depending on your relationship with us and the services requested, we may collect personal data such as:
In certain cases, additional information may be requested when necessary for the proper provision of a service.
Where the processing of information classified as sensitive data under Peruvian law is required, the corresponding consent will be obtained or the processing will be carried out under another legally permitted basis.
When a trip includes minors, certain personal data may be requested from their parents, legal guardians, or responsible adults solely for the purpose of arranging bookings and providing the contracted travel services.
Illapa Culturas Andinas does not intentionally seek to collect personal data directly from minors for marketing purposes without the appropriate involvement or authorization of their parents or legal representatives.
We may collect personal data when a user:
We may also receive certain personal data through partner travel agencies, booking platforms, tour operators, suppliers, or other intermediaries when necessary to manage a service requested by the passenger and in accordance with applicable legislation.
Personal data may be processed for the following purposes:
To respond to requests for information, enquiries, communications, and quotations related to our trips and tourism services.
To arrange, coordinate and confirm bookings for accommodation, transport, flights, trains, entrance tickets, excursions, guides, and other services included in a travel programme.
To use the information necessary to organize, operate and provide assistance during the passenger’s contracted trip.
To manage enquiries, requests, modifications, incidents, complaints, or communications related to contracted services.
To manage payments, receipts, invoices, administrative records, and applicable legal or tax obligations.
To adopt measures aimed at preventing fraudulent transactions, unauthorized access, and other risks related to our digital services.
Where consent has been given or another legal basis applies, we may use contact information to send information about our services, promotions, news, and travel experiences.
Users may request at any time to stop receiving these communications.
We may analyse statistical information and the use of our digital channels in order to improve the user experience, our travel products, and our services.
Depending on the circumstances, personal data may be processed on the basis of:
Where processing requires consent, such consent must be freely given, prior, express, informed, and unequivocal in accordance with applicable regulations.
Illapa Culturas Andinas may send promotional communications, offers, or commercial information only when permitted under applicable legislation.
Users may withdraw from promotional communications at any time through the unsubscribe mechanism included in our communications or by contacting us directly.
Refusing or withdrawing consent for marketing communications will not affect travel services already contracted.
To arrange certain tourism services, it may be necessary to share limited personal data with suppliers involved in the provision of the contracted service.
These may include:
Only the information necessary for the relevant service should be shared.
Illapa Culturas Andinas does not sell or commercially trade users’ personal data.
Due to the international nature of travel services, certain personal data may need to be transferred to suppliers located in Peru or abroad.
Where domestic or international transfers of personal data are required, Illapa Culturas Andinas will take the appropriate measures to ensure that such transfers are carried out in accordance with applicable legislation and only for purposes related to the requested service.
Where applicable law requires consent or another specific safeguard for a transfer, the relevant measures will be implemented.
When users make payments through external platforms, banks, payment cards, or other payment service providers, certain financial information may be processed directly by those entities.
Each provider may apply its own privacy policy and security measures.
Illapa Culturas Andinas will only process the information necessary to verify, manage, or reconcile payments related to contracted services.
Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and, subsequently, for the periods required to comply with legal, contractual, administrative, tax, or other applicable obligations.
Once such purposes have been fulfilled and the applicable retention periods have expired, personal data will be deleted, anonymised, or otherwise processed in accordance with applicable law.
Illapa Culturas Andinas adopts reasonable technical, organisational, and administrative measures to protect personal data against:
However, no computer system or transmission of information over the Internet can guarantee absolute security.
In the event of a security incident involving personal data, the measures required under applicable legislation will be taken.
Data subjects may exercise the rights recognized under Peruvian personal data protection legislation, including the so-called ARCO rights:
Right of Access: the right to know what personal data is being processed, its origin, purpose, and the conditions under which it is used.
Right of Rectification: the right to request the correction or updating of inaccurate, incomplete, or outdated personal data.
Right of Cancellation: the right to request deletion or cancellation of personal data where legally applicable.
Right of Opposition: the right to object to certain forms of personal data processing where legally permitted.
Where applicable, the data subject may also withdraw previously granted consent.
The exercise of these rights is free of charge, except where otherwise permitted by law.
Data subjects may submit a request through the contact channel designated by Illapa Culturas Andinas for personal data protection matters.
The request should allow the data subject to be properly identified and should clearly indicate the right they wish to exercise.
Where necessary, Illapa Culturas Andinas may request additional information solely for the purpose of verifying the identity of the applicant and preventing unauthorized access to another person’s personal data.
Requests will be handled within the time limits established by applicable Peruvian legislation.
If a data subject believes that their rights have not been adequately addressed, they may submit a complaint before the Peruvian National Authority for Personal Data Protection, part of the Ministry of Justice and Human Rights of Peru, in accordance with applicable procedures.
Our website may use cookies and similar technologies to enable proper website functionality, understand how the website is used, remember certain preferences, and improve the browsing experience.
Cookies may include:
Where applicable law requires prior consent for certain categories of cookies, those cookies will not be activated until the user has provided the corresponding authorization.
Users may modify their preferences or disable certain cookies through the tools available on the website or through their browser settings.
Disabling some cookies may affect certain website functions.
Our website may contain links, content, or integrations belonging to third parties.
When users access external websites, they become subject to the privacy policies and terms established by those third parties.
Illapa Culturas Andinas does not control the privacy practices of external websites and recommends reviewing their respective policies before providing personal information.
Illapa Culturas Andinas may maintain a presence on social media and may use third-party digital services for communication, advertising, analytics, or customer service.
A user’s interaction with those platforms will also be subject to the privacy policies and terms established by each provider.
Illapa Culturas Andinas may update this Privacy and Personal Data Protection Policy when necessary due to:
The current version will remain available on our website and will indicate the date of its latest update.
Where an amendment involves a material change in processing purposes or requires new consent under applicable law, the appropriate measures will be taken before such processing takes place.
For enquiries related to this Policy, requests for information regarding the processing of personal data, or the exercise of rights recognized under applicable legislation, users may contact Illapa Culturas Andinas through the official contact channels published on our website.
