Privacy and Personal Data Protection Policy

KL Viaggi Mystery Peru Adventure E.I.R.L. (Mystery Peru), RUC 20534946415, with registered address at Hacienda Curve Alto S/n, Nazca, Ica, Peru 08000, is the owner of the personal data bank "Customers and bookings" and the controller of the processing described here. Contact: [email protected].

When you book: name, surname, email, phone or WhatsApp, nationality, passport or ID number (required by airlines and transport operators in Peru), hotel or pick-up point, booking date and details and, if you request an invoice, billing details.

Sensitive data: health, mobility or dietary conditions that you choose to tell us. We use them only to adapt the service and look after your safety, and their processing is based on your express consent, which you give by sharing them.

When you contact us: what you type in the contact form, in an email or in a WhatsApp conversation.

When you browse: technical data such as IP address, browser, device, pages visited and approximate country, collected through cookies and similar technologies. In the booking process we also record events such as arriving at payment, to measure and improve the service and to recover bookings that were not completed.

When you create an account: your login email, a password stored in encrypted form (hash) and your booking history.

To perform your contract: confirm and operate your tour, share the passenger list with the airlines, drivers, guides and hotels involved, collect payment, issue receipts and handle changes or cancellations.

To communicate with you about your booking: confirmations, vouchers, reminders, changes, a notice if you left a booking unfinished and a short satisfaction survey after the tour.

To process payments and prevent fraud.

To improve the site, measure which pages are useful and fix errors.

To comply with legal obligations in Peru, including tax and tourism rules.

We will only send you promotions or newsletters if you consent, and you can withdraw that consent at any time.

By booking and ticking the acceptance box, you consent to the processing described in this policy. You may withdraw your consent at any time by writing to [email protected], without retroactive effect. If you withdraw data needed to provide the service, we will not be able to provide it.

Data of minors must be provided by their parent or guardian, who declares having the authority to do so.

Card payments are processed by Izipay (Lyra Network), a licensed payment provider in Peru. Your card number is entered in a secure form served by Izipay and is never stored on our servers. We keep only the transaction reference, amount and status.

Only the providers needed to run your tour or this website: airlines for the Nazca Lines flights, transport companies, guides, hotels, our payment provider, our email and web hosting providers, and analytics tools. We do not sell personal data. We may also disclose data to an authority when the law requires it.

Some providers process data outside Peru, including in the United States and the European Union. In those cases we require an adequate level of protection through contractual commitments, in line with Law No. 29733 and its Regulation.

mysteryperu.com uses strictly necessary cookies (session, language, cart) and, where enabled, analytics cookies such as Google Analytics to understand how the site is used. You can block cookies in your browser; necessary cookies are required for booking.

Booking and invoicing data is kept for the periods required by Peruvian tax and commercial rules. Contact messages are kept for up to two years. Account data is kept while the account is active and deleted on request. Once the period ends, data is deleted or anonymized.

You may exercise your rights of information, access, update, rectification, cancellation (erasure) and objection, withdraw your consent and ask not to be subject to decisions based solely on automated processing. Residents of the European Union also have the rights to data portability and restriction of processing.

To exercise them, write to [email protected] with the subject "Personal data", stating which right you are exercising and attaching a copy of your ID. We answer within the time limits set by Peruvian rules.

If you believe we did not handle your request properly, you may file a complaint with the National Authority for Personal Data Protection of the Ministry of Justice and Human Rights or, if you live in the European Union, with the supervisory authority of your country.

We use HTTPS across the site, restricted access to booking data, encrypted passwords and reputable providers for hosting and payments. No system is completely secure: if an incident affects your data, we will tell you as the law requires.

After your tour we may send you a satisfaction survey, and if you leave a booking unfinished, a reminder. If you do not want to receive them, write to [email protected] and we will stop sending them.

We may update this policy when our services or the law change. The current version is always published on this page with its date. Questions: [email protected].