Privacy Policy

Peru Wayna Picchu EIRL · Tax ID (RUC) 20601565243 · Last updated: 10 November 2026

This policy explains what personal information we collect when you visit peruwaynapicchu.com, plan a trip with us, or subscribe to our emails, why we collect it, who we share it with, and the choices you have. We have tried to write it the way we write everything else: plainly.

1. Who we are

Peru Wayna Picchu EIRL ("Peru Wayna Picchu", "we", "us") is a travel company based in Cusco, Peru. We are the data controller for the information described in this policy.

• Address: Pje. Bernardo Tambohuacso 120-B, 5th floor, Wanchaq, Cusco, Peru
• Email for privacy matters: info@peruwaynapicchu.com
• Phone / WhatsApp: +1 929 470 7255 · +51 932 155 682

2. What we collect

Information you give us

• Trip Planner and contact forms: your name, email address, phone or WhatsApp number, country, and the details of the trip you have in mind (dates, length, number of travellers, hotel level, interests and any message you write).
• "Call me" and WhatsApp requests: your phone number and, if you share it, your name.
• Newsletter and travel guides: your email address and, if you provide it, your name.
• When you book: the information we need to arrange your trip — for example full names as they appear on passports, dates of birth, passport numbers (required by Machu Picchu, the Inca Trail, trains and hotels), dietary needs, mobility or health information you choose to share so we can adapt the trip, and emergency contacts.

Information collected automatically

• Technical data: IP address, browser and device type, pages visited, time on page, and the website or ad that brought you to us.
• Campaign data: when you arrive from an ad or a tracked link, we store campaign parameters (such as UTM tags) and click identifiers from Google (gclid) and Meta (fbclid), together with an event ID, alongside your form submission. This lets us know which campaign produced an enquiry.
• Cookies and similar technologies: see section 6.

We do not collect payment card numbers on our website. Payments are processed by our payment providers (see section 5).

3. Why we use your information, and our legal basis

Health, dietary and mobility information is used only to adapt and safely run your trip, and only with your explicit consent.

4. Advertising and measurement

We use the following tools. Each provider processes data under its own privacy policy.

• Google Tag Manager, Google Analytics 4 and Google Ads (Google LLC) — to understand how visitors use the site and to measure and improve our Google ads. When you submit a form, we may send Google a conversion event so it can tell which ad led to the enquiry.
• Meta Pixel and Meta Conversions API (Meta Platforms, Inc.) — to measure our Facebook and Instagram ads and show ads to people likely to be interested. When you submit a form, our server may send Meta a conversion event. Where we send contact details such as email or phone number, they are hashed (converted into an unreadable code) before they leave our systems. If you send us an enquiry through a Facebook or Instagram lead form, Meta passes the details you enter in that form to us.
• Microsoft Clarity (Microsoft Corporation) — to see, in aggregate and through anonymised session recordings, how visitors move through our pages, so we can fix what is confusing. Clarity masks text you type into form fields.
• MailerLite (MailerLite Limited) — to send our newsletter and travel guides and to see whether emails are opened. Every email includes an unsubscribe link.

We do not sell your personal information for money. Under some US state laws, sharing data with advertising platforms for cross-context behavioural advertising may count as "selling" or "sharing". You can opt out at any time — see section 8.

5. Who we share your information with

• Travel suppliers needed to deliver your trip: hotels, train companies (PeruRail, Inca Rail), Machu Picchu and Inca Trail permit authorities, guides, drivers, cruise and lodge operators, and partners in Ecuador (Galápagos) or Bolivia if your trip includes them.
• Service providers that work for us: website hosting (Amazon Web Services), email, customer-relationship and project-management tools, MailerLite, and the advertising and analytics providers listed in section 4.
• Payment providers (WeTravel, Izipay and our bank), which process your payment directly.
• Travel agents who referred you, where your booking was made through them.
• Authorities, when the law requires it.

We do not let these parties use your information for their own purposes except as their own privacy policies allow in providing their service.

6. Cookies

We use cookies and similar technologies for the purposes described in section 4. Which cookies we use, what each one does, and how to accept, refuse or change your choices are explained in our Cookie Policy. You can change your choice at any time through the cookie banner.

7. International transfers

We are based in Peru, our website is hosted in the United States, and several of our providers operate in the United States and elsewhere. Your information will therefore be processed outside the UK. Where UK law requires it, we rely on safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK–US Data Bridge for certified US companies. Trip details must also be shared with suppliers in Peru (and Ecuador or Bolivia where relevant) to deliver the trip you booked.

8. Your rights

Everyone. You can ask us at any time to see the information we hold about you, correct it, or delete it, and you can unsubscribe from our emails with one click.

UK residents. Under the UK GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time. You can complain to the Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to resolve your concern first.

US residents. Depending on your state (including California, Colorado, Connecticut, Virginia, Texas and others), you may have the right to know what personal information we collect, access it, correct it, delete it, and opt out of its sale, sharing for targeted advertising, or profiling. We honour Global Privacy Control signals as an opt-out where the law requires it. We will not treat you differently for exercising your rights. California residents: the categories we collect are identifiers, contact details, trip preferences, internet activity on our site and, if you book, the travel and passport details listed in section 2.

To exercise any right, email info@peruwaynapicchu.com with the subject "Privacy request". We will reply within 30 days (45 days where US law allows) and may ask you to confirm your identity. An authorised agent may make a request on your behalf.

9. How long we keep your information

• Enquiries that do not become a booking: up to 24 months from our last contact, then deleted.
• Bookings: for as long as Peruvian tax and accounting law requires (currently up to 10 years for accounting records).
• Newsletter: until you unsubscribe.
• Analytics data: according to each tool's retention settings (for example, up to 14 months in Google Analytics).

10. Security

We protect your information with access controls, encrypted connections (HTTPS) and by limiting access to the people on our team who need it. No system is perfectly secure; if a breach affects you, we will tell you and the relevant authorities as the law requires.

11. Children

Our website is not directed to children under 16, and we do not knowingly collect their information online. Details of minors travelling with their families are provided by the parent or guardian who books the trip.

12. Changes to this policy

We may update this policy. The date at the top shows when it last changed, and if the change is significant we will let current clients and subscribers know.

13. Contact

Peru Wayna Picchu EIRL · Pje. Bernardo Tambohuacso 120-B, 5th floor, Wanchaq, Cusco, Peru · info@peruwaynapicchu.com

This policy is also governed by Peru's Personal Data Protection Law (Law No. 29733).