Privacy Policy & Personal Data Protection

At Edgar Adventures (registered in Peru under trade and tourism licenses), we are committed to safeguarding your privacy and protecting the personal information you share with us. This Privacy Policy outlines how we collect, use, store, process, and protect your data in strict compliance with the Peruvian Personal Data Protection Law (Law N° 29733), its Supreme Decree Regulation (D.S. 003-2013-JUS), and applicable international data privacy frameworks (including GDPR principles for our international visitors).

1. Data Controller Identity

The entity responsible for your personal data bank is:

  • Operating Agency: Edgar Adventures E.I.R.L.
  • Registered Address: Puno, Peru
  • Official Data Protection Contact: info@edgaradventures.com

2. Personal Information We Collect

To arrange, confirm, and operate your travel itineraries, boat charters, and excursions across Lake Titicaca and Peru, we may collect the following information:

  • Identity & Contact Details: Full legal name, nationality, passport or national ID number, date of birth, gender, email address, phone/WhatsApp number, and country of residence.
  • Logistical & Operational Details: Hotel pick-up/drop-off locations, flight/train details, dietary requirements, and physical/health conditions necessary to ensure your safety during high-altitude activities.
  • Transactional & Billing Details: Payment receipts, transaction references, billing names, and tax identifiers (credit card payments are processed securely through certified PCI-DSS compliant third-party payment gateways; we do not store full credit card numbers or security CVV codes on our servers).

3. Purpose of Data Processing

Your personal data is collected and processed exclusively for the following legitimate purposes:

  1. Service Execution & Booking Management: Issuing boat manifests, island entrance permits (Uros, Taquile, Amantaní), train tickets, and coordinating private land transportation.
  2. Safety & High-Altitude Preparedness: Ensuring appropriate assistance, emergency contact readiness, and compliance with the Peruvian Coast Guard (Capitanía de Puerto) and civil protection standards.
  3. Customer Support: Providing pre-departure briefings, operational updates, and immediate assistance via email or messaging channels.
  4. Legal Compliance: Fulfilling Peruvian administrative, taxation (SUNAT), and tourism regulatory requirements (MINCETUR).

4. Cross-Border Data Transfers & Third-Party Service Providers (Google Cloud Infrastructure)

To deliver seamless communication, high availability, and secure enterprise management, Edgar Adventures utilizes cloud-based technological infrastructure.

  • Cross-Border Transfer to Google LLC:You are hereby informed and give express consent that certain categories of your personal data (such as booking correspondence, contact forms, operational itineraries, and backup records) are hosted and processed via Google LLC servers (Google Workspace / Google Cloud Platform) located outside the Republic of Peru (primarily in the United States and global data center facilities).
  • Security & Safeguards: Google complies with international security and data protection standards (including ISO/IEC 27001, SOC 2/3, and standard contractual clauses). Edgar Adventures ensures that your information remains encrypted in transit (TLS/SSL) and at rest, maintaining confidentiality and restricted administrative access at all times.
  • Operational Partners: Data strictly required for tour logistics is shared only with direct operational third parties (e.g., licensed boat crew, local community homestay hosts in Lake Titicaca, certified tour guides, and transportation partners). We never sell, rent, or trade your personal information to third-party marketing brokers.

5. Data Retention Period

We retain your personal information only for as long as necessary to fulfill the purposes for which it was gathered, including satisfying legal, accounting, tax, and reporting obligations under Peruvian law (generally up to five years for accounting and contractual liability records). Afterward, data is securely anonymized or permanently deleted.

6. Exercise of ARCO Rights (Access, Rectification, Cancellation & Opposition)

Under Peruvian Law N° 29733, you hold the fundamental rights to access, update, rectify, cancel, or oppose the processing of your personal data at any time (ARCO Rights):

  • How to Request: You may exercise these rights free of charge by sending a formal written request along with a copy of your valid identification document (Passport or DNI) to info@edgaradventures.com with the subject line “Data Privacy – Exercise of ARCO Rights”.
  • Response Timeline: Your request will be evaluated and answered within the statutory deadlines established by Peruvian data protection law.

7. Cookies & Web Tracking

Our website uses standard technical cookies to ensure smooth navigation, preserve user preferences (such as selected language and currency), and measure aggregated, anonymous analytics. You can configure or disable cookies through your browser settings; however, disabling certain technical cookies may impact booking functionality.

8. Changes to this Privacy Policy

Edgar Adventures reserves the right to update or amend this Privacy Policy to reflect operational improvements, technological changes, or legislative updates in Peru. Any revisions will be published on this page with an updated revision date.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our cross-border data handling practices, please contact us: