1. Data Controller
WayraTravel, a travel and tourism agency domiciled in Cusco, Peru, is the controller of the personal data you provide us through this website, booking forms, email, WhatsApp or in person.
2. Data We Collect
Identification data: full name, ID type and number (DNI, passport or foreigner card), nationality and date of birth.
Contact data: email address, phone number and country of residence.
Booking data: contracted tours, travel dates, dietary preferences and relevant medical conditions you choose to share with us for your safety.
Browsing data: IP address, browser type, visited pages and cookies, for statistical purposes and site improvement.
3. Purpose of Processing
To manage your bookings, issue tickets and permits (e.g., Machu Picchu entrance), coordinate contracted services and process payments.
To answer your inquiries and provide support before, during and after your trip.
To send you promotional information and offers, only with your express consent; you may withdraw it at any time.
To comply with legal obligations before Peruvian authorities (MINCETUR, SUNAT, among others).
4. Cookies
We use first-party cookies necessary for the site to work (selected language, booking cart and session) and statistical cookies to understand how the site is used.
You can configure your browser to block or delete cookies; some site features may no longer be available.
5. Data Sharing
We share your data only with the providers required to deliver the contracted service: train operators, ticket issuing entities, hotels, payment gateways and authorities when required by law.
We never sell or rent your personal data to third parties for advertising purposes.
6. Security and Retention
We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration. Online payments are processed by certified gateways; we do not store card numbers.
We keep your data while a contractual relationship exists and for the periods required by Peruvian tax and tourism regulations.
7. Your Rights (ARCO)
Under Law No. 29733, you may exercise your rights of Access, Rectification, Cancellation and Opposition (ARCO) over your personal data, as well as withdraw your consent.
To exercise them, send us a request to our contact email indicating your name, ID document and the right you wish to exercise. We will respond within the legally established deadlines.
If you believe your request was not addressed, you may file a claim with the National Authority for Personal Data Protection of the Ministry of Justice of Peru.
8. Changes to this Policy
We may update this policy to reflect regulatory changes or changes in our services. The current version will be published on this page, indicating the date of the last update.
Questions about your personal data?
Write to us to exercise your ARCO rights or resolve any question.