PRIVACY AND PERSONAL DATA PROTECTION POLICY JOURNEYS CUSCO
1. INTRODUCTION AND PURPOSE
JOURNEYS CUSCO (hereinafter, “THE AGENCY,” “WE,” or “US”) recognizes the importance of protecting the privacy and personal data of its users, clients, suppliers, and collaborators. In fulfillment of its commitment to transparency, information security, and compliance with current regulations, THE AGENCY makes this Privacy Policy (hereinafter, the “Policy”) available to the public. The purpose of this document is to provide clear and detailed information regarding the processing of personal data collected through our various contact and communication channels.
This Policy describes the conditions under which THE AGENCY collects, uses, stores, protects, and occasionally shares personal data provided by users who utilize our tourism services or interact with us through our digital or in-person channels.
Personal data collection may occur through our digital channels such as the website, contact forms, social media, email, mobile applications, WhatsApp, and digital messaging platforms, as well as through in-person or telephone channels when users request information, make reservations, or book any of our tourism services.
This document has been prepared in strict compliance with the current Peruvian legal framework regarding personal data protection, specifically as established by the following regulations:
The Political Constitution of Peru (Article 2, item 6), which recognizes the fundamental right to personal data protection.
Law No. 29733, Personal Data Protection Law.
Supreme Decree No. 003-2013-JUS, Regulation of the Personal Data Protection Law.
Information Security Directive approved by Directoral Resolution No. 019-2013-JUS/DGPDP.
Through this policy, THE AGENCY reaffirms its commitment to the responsible, secure, and transparent processing of the personal data of all its users and clients.
2. IDENTIFICATION OF THE DATA CONTROLLER
The party responsible for the processing of personal data collected through our services and platforms is:
Trade Name: JOURNEYS CUSCO
Tax ID (RUC): 10433339890
Legal Address: 612 Machupicchu-Urubamba-Cusco / Av. Imperio de los Incas
Contact Phone & WhatsApp: +51 983 221 057
Contact Email: info@journeyscusco.com
Website: https://journeyscusco.com/
In accordance with current regulations, the personal data collected will be stored and processed within the Personal Data Bank named “CLIENTS AND USERS,” managed by THE AGENCY, which is exclusively intended for managing commercial relationships, providing tourism services, and addressing user requests.
3. GUIDING PRINCIPLES
The processing of personal data by THE AGENCY is governed by the principles established in Law No. 29733 and its Regulation, ensuring that all personal information is handled responsibly, securely, and lawfully.
Principle of Legality: The processing of personal data will be carried out in accordance with current regulations; the collection of personal data by fraudulent, deceptive, unfair, or illicit means is prohibited.
Principle of Consent: The processing of personal data will only be carried out when the holder has provided prior, free, express, unequivocal, and informed consent.
Principle of Purpose: Personal data will be collected solely for specific, explicit, and lawful purposes related to the tourism services offered by THE AGENCY.
Principle of Proportionality: The processing of personal data will be limited strictly to data that is necessary, relevant, and adequate to fulfill the purposes previously informed to the holder.
Principle of Security: THE AGENCY implements technical, organizational, and legal measures intended to guarantee the security and confidentiality of personal data, preventing its loss, misuse, alteration, or unauthorized access.
4. PERSONAL DATA WE COLLECT
For the correct provision of the tourism services offered by THE AGENCY and for proper interaction with our users, we may collect different types of personal data, including the following categories:
4.1 Identification and Contact Data
This includes personal information necessary to identify the user or client, such as full names, National Identity Document (DNI) number, valid passport number, foreign resident card, nationality, country of residence, date of birth, landline or mobile phone number, WhatsApp number, personal or corporate email address, and handwritten or digital signature when required for contractual documents.
4.2 Transactional and Financial Data
This corresponds to the information necessary to manage payments, reservations, and bookings of tourism services, such as purchase history, details of contracted services, travel dates, number of people included in the reservation, payment vouchers, bank operation numbers, transfer records, and payment confirmations.
In cases of payments made through digital platforms or credit and debit cards, financial information will be processed through secure payment gateways that comply with international security standards, preventing THE AGENCY from directly storing sensitive full card data.
4.3 Sensitive Data
JOURNEYS CUSCO will only collect personal and/or sensitive data when strictly necessary and in respect of the principles of purpose and proportionality. When the collection and processing of such data derive from the fulfillment of a legal obligation, JOURNEYS CUSCO will inform the data holder of such situation prior to collection.
4.4 Navigation Data and Cookies
When a user visits our website or interacts with our digital platforms, certain technical navigation data may be collected, such as IP address, browser type used, operating system, pages visited, time spent on the website, approximate geographic location, browser language, and browsing behavior within the platform.
This information may be collected through the use of cookies and web analytics tools that allow us to improve the user experience and optimize the website’s functionality.
5. PURPOSE OF DATA PROCESSING
JOURNEYS CUSCO will collect personal data clearly indicating the purpose for which said collection is carried out, which must be determined, explicit, and lawful. Personal data subject to processing may not be used for purposes different from or incompatible with those that motivated its obtainment, unless the holder provides consent.
In this regard, JOURNEYS CUSCO will implement measures to guarantee:
That the collection, storage, and conservation of personal data comply with the principles of proportionality and purpose.
The adequate safeguarding of personal data by complying with appropriate technical and legal security measures. It should be noted that JOURNEYS CUSCO may not disclose personal data unless ordered by a reasoned court mandate or with the authorization of its holder under the guarantees provided by law.
Likewise, JOURNEYS CUSCO may not refuse to provide a public entity with information containing personal data when legally required.
6. CONSEQUENCES OF REFUSAL TO PROVIDE DATA
The provision of personal data required for the necessary purposes is essential for the correct delivery of the tourism services offered by THE AGENCY.
Should the user refuse to provide essential information—such as DNI number, passport, or other data required for the issuance of tickets or reservations—THE AGENCY will be unable to manage the requested services and will be prevented from executing the corresponding tourism contract.
The refusal to provide data for optional purposes will not affect the booking or the provision of the primary service.
7. CONSENT
The processing of personal data is based on the free, prior, informed, express, and unequivocal consent of the data holder.
In digital forms or web platforms, consent is manifested through the express acceptance of this Privacy Policy via checkboxes or affirmative actions within the contact or reservation forms.
When the user provides data through in-person assistance, telephone calls, email, social media, or WhatsApp, it shall be understood that they have granted consent by having been previously informed of this policy and having voluntarily provided their personal information.
8. TRANSFER TO THIRD PARTIES AND DATA PROCESSORS
THE AGENCY does not sell or rent the personal data of its users. However, for the correct provision of the contracted tourism services, it may be necessary to share certain information with providers involved in the execution of the service, such as hotels, tourism transport companies, local operators, authorized tour guides, railway companies, and tourism activity providers.
Likewise, data may be shared with government entities when required by law or when necessary for the acquisition of nominative tickets or official registrations before institutions such as the Ministry of Culture, SERNANP, GERCETUR, SUNAT, Migrations, or competent authorities.
Technological providers such as payment gateways, electronic invoicing providers, web hosting services, and cloud storage platforms may also be involved.
9. CROSS-BORDER DATA FLOW
Some technological services used by THE AGENCY may involve the storage or processing of personal data on servers located outside of Peruvian territory.
This occurs mainly when using web hosting services, cloud storage, or technological tools whose data centers are located in other countries.
By accepting this Privacy Policy, the user expressly authorizes this cross-border flow of personal data, recognizing that such transfer is necessary for the operation of THE AGENCY’s digital services.
10. CONSERVATION PERIOD
Personal data processed by JOURNEYS CUSCO must be truthful, accurate, and, to the extent possible, updated, necessary, relevant, and adequate regarding the purpose for which they were collected. They must be kept in a way that guarantees their security and only for the time necessary to fulfill the purpose of the processing, respecting the applicable legal conservation periods for documents and information.
11. SECURITY MEASURES
THE AGENCY has implemented technical, organizational, and legal measures designed to protect personal data against unauthorized access, loss, alteration, or improper disclosure.
These measures include the use of SSL security certificates on the website, information access controls, secure storage of digital and physical documents, internal data protection policies, and confidentiality agreements with authorized personnel.
12. EXERCISE OF ARCO RIGHTS
Personal data holders have the right to exercise the rights of Access, Rectification, Cancellation, and Opposition (ARCO rights) regarding the processing of their personal information.
To exercise these rights, the holder must send a request to the email info@journeyscusco.com indicating “ARCO REQUEST – [Name of Holder]” in the subject line.
The request must include the holder’s full name, a copy of their identity document, and a clear description of the request being made.
Access requests will be addressed within a maximum period of twenty business days, and requests for rectification, cancellation, or opposition within a maximum period of ten business days.
13. COOKIE POLICY AND EXTERNAL LINKS
The website https://journeyscusco.com/ may use its own and third-party cookies to improve the browsing experience, analyze website usage, and optimize platform performance.
Users can configure their browser to accept or reject cookies according to their preferences.
Our website may also contain links to external pages related to tourism services or other digital platforms. THE AGENCY is not responsible for the privacy policies or the content of such external sites.
14. MODIFICATIONS AND VALIDITY
THE AGENCY reserves the right to modify, update, or expand this Privacy Policy at any time due to regulatory changes, improvements in internal processes, or the incorporation of new technological services.
Modifications will be published on THE AGENCY’s official website. Continued use of the services after a modification has been published implies acceptance of the updated version of the policy.
Last updated: March 26, 2026.