Privacy Policy

1. Data Controller

Legal Business Name: CORPORACION GRUPO TIERRA BIRU S.A.C.

Peruvian Tax ID (RUC): 20614670291

Address: Urb. Los Licenciados, Calle Mariano Santos G-5, Cusco, Peru

Privacy Contact Email: [email protected]

2. Personal Information We May Collect

Depending on your inquiry, booking or purchased service, we may collect information such as your first and last name, national ID or passport details, nationality, date of birth, email address, phone number, booking information, information required for payments and receipts, details needed for tickets or services issued in a specific traveler's name and travel-related preferences.

We will only request information that is appropriate, relevant and necessary for the purposes disclosed to you.

3. Health-Related Information

For certain services, we may need to request information about allergies, relevant medical conditions, physical limitations, pregnancy, disabilities or medications when necessary to assess traveler safety, arrange special assistance or make reasonable accommodations for travel services.

Health information is considered sensitive personal data. When processing requires the individual's consent, such consent will be obtained in advance and must be informed, express and unambiguous. For sensitive personal data, consent must be provided in writing or through an electronic method that allows the individual's authorization to be validly documented.

4. Purposes of Processing Personal Information

4.1. Quotes and Inquiries

We use identification details, contact information and travel-related information to prepare proposals, respond to inquiries and provide information requested by users.

4.2. Booking Management

We use the information necessary to arrange and book travel services, including communicating with hotels, transportation providers, railway companies, airlines, tour operators, government authorities and other suppliers when necessary to fulfill a booking.

4.3. Payments and Receipts

We process the information necessary to verify payments, reconcile transactions and issue receipts or invoices. Complete payment card details are handled by the relevant payment processors or financial institutions. Tierra Biru will not store full payment card information directly unless there is a legitimate need and such storage is legally permitted.

4.4. Travel Services

We use the information necessary to coordinate itineraries, schedules, transfers, accommodations, admission tickets, communications and other operational aspects of the booked services.

4.5. Safety and Assistance

When necessary, we may use relevant health information or details about assistance needs to implement safety measures and coordinate support during the trip.

4.6. Marketing Communications

We may send offers and promotions by email, WhatsApp or other channels when we have the required authorization or an applicable legal basis. Users may withdraw their consent or request to stop receiving marketing communications through the available contact channels.

5. Legal Basis for Processing Personal Information

Personal information will be processed according to the relevant purpose and applicable legal basis.

Consent is not required when the information is necessary to prepare, enter into or fulfill a contractual relationship with the individual, or when another legal exception applies.

Consent will be requested when required, particularly for marketing purposes not covered by another applicable legal basis and for sensitive personal data when required by law.

6. Service Providers and Data Recipients

To provide booked services, we may share certain personal information with, or engage the following parties to process it: hotels, transportation companies, railway operators, airlines, tour operators, organizations responsible for admission tickets and permits, technology providers, email service providers, booking systems and payment processors.

Only the information necessary for the relevant purpose will be shared.

7. Technology Services We Use

To operate our website and manage bookings, Tierra Biru may use web hosting, email and messaging services, booking management systems or customer relationship management (CRM) platforms, analytics tools, digital advertising services, payment processors and cloud storage.

Before this Policy is finalized and published, we will verify that this description accurately reflects the tools and services actually used by Tierra Biru.

8. International Data Transfers

Some technology or travel service providers may store or process personal information outside Peru.

When personal data is transferred across international borders, Tierra Biru will take the necessary measures to ensure that the processing meets the level of protection required under Peruvian law and will provide the relevant information to the individual.

9. Data Retention

Personal information will be retained only for as long as necessary to fulfill the disclosed purposes and applicable contractual or legal obligations.

As a general policy, Tierra Biru may retain operational information related to bookings and traveler assistance for up to two (2) years after the service has been completed, unless a legal obligation, contractual requirement or dispute justifies a longer retention period.

Documents that must be retained to support tax, accounting or fiscal obligations will be kept for five (5) years or for the applicable tax statute of limitations, whichever is longer, in accordance with tax regulations. This does not mean that all traveler information will be retained for five years.

Sensitive health information and copies of identity documents will be retained only for as long as necessary to manage the service or address a justified legal obligation or contingency. Once no longer necessary, such information will be deleted, anonymized or restricted from processing, as appropriate.

10. Passports and Identity Documents

Copies of passports and identity documents, or information contained in them, may be collected through forms, email, messaging services or other authorized channels to manage bookings that require traveler-specific identification.

Access to this information will be limited to employees and service providers who need it to arrange or deliver the relevant services.

Tierra Biru will not use these documents for purposes unrelated to the booking and will apply reasonable confidentiality and security measures when processing them.

11. Your Personal Data Rights

Individuals may exercise their rights to information, access, correction, cancellation or deletion and objection, as well as any other rights recognized under applicable law.

To submit a request, individuals must provide, at a minimum, their full name, a description of their request, a mailing address or email address for notifications and, when necessary, supporting documentation.

Requests may be sent to [email protected] or submitted through Tierra Biru's official customer service channels.

The maximum response times are:

• Right to information: Eight (8) business days.
• Right of access: Twenty (20) business days.
• Rights to correction, cancellation or deletion and objection: Ten (10) business days.

These periods will be calculated in accordance with current regulations and may be subject to permitted procedures for correcting incomplete requests or extending deadlines under the applicable regulations.

12. Children's Personal Information

Tierra Biru's website is not intended for minors to independently purchase travel services.

When personal information about a minor is required to manage a booking, it must be provided by the minor's parent, guardian, legal representative or another person legally authorized to make the reservation.

Processing will be limited to the information necessary to manage the booking, meet supplier requirements and provide the contracted service, while respecting the best interests of the child and applicable rules on legal representation.

13. Cookies and Similar Technologies

Our website may use cookies and similar technologies for technical functionality, traffic measurement, analytics, advertising and personalization.

When the use of a particular technology requires consent, it will be requested through the consent mechanism available on the website.

14. Changes to This Privacy Policy

This Policy may be updated when internal procedures, technology providers, data processing purposes or legal requirements change.

The current version will be available on the Tierra Biru Expeditions website.

Last Updated: August 1, 2026