At Danfer Tours Cuscowe respect your privacy and comply with Peru's Personal Data Protection Law (Law No. 29733) and the GDPR for customers in the EU.
1. What data we collect
- Bookings: name, email, phone, country, passport details, travel date, number of travelers.
- Forms: name, email, phone, message.
- Payments: processed by PayPal — we don't store card numbers on our servers.
- Cookies: preferred language, admin session.
- Analytics: pages visited (anonymized).
2. How we use it
- Process your booking and send you confirmations.
- Coordinate the tour (pickup, guide, transport).
- Answer questions and requests.
- Send you offers if you subscribed (you can unsubscribe any time).
- Improve the website and our services.
3. Who we share it with
Only with those who need it to handle your trip:
- PayPal (payments)
- Resend (email delivery)
- Supabase (storage)
- Official operators (PeruRail, Consettur, MINCUL) to issue tickets
- Authorities when required by law
We never sell your data to third parties for marketing.
4. Your rights
You have the right to:
- Access your data
- Correct it if it's out of date
- Request its deletion (except data required by accounting law)
- Object to its use for commercial purposes
- Data portability
To exercise these rights, email privacidad@danfertourscusco.com — we reply within 15 days.
5. Security
We use SSL/TLS across the whole site, Supabase with Row Level Security for the database, and secure authentication for the admin panel.
6. Retention
We keep your data while you are a customer and for 5 more years for accounting obligations. After that it is deleted or anonymized.
7. Cookies
We use strictly necessary cookies (session, language) and optional ones (analytics). You can disable the optional ones in your browser.
8. Contact
Data controller:
Danfer Tours Cusco S.A.C.
Av. El Sol 314, Cusco, Peru
privacidad@danfertourscusco.com