Privacy Policy

1. Information We Collect

We may collect the following types of personal information:

a. Information you provide directly

• Name, surname

• Email address

• Phone number

• Postal / billing address

• Payment information (credit card, bank data)

• Booking details (dates, location, number of guests, service preferences)

• Communications / messages you send to us

• Other information you provide when making a booking, contacting us, or filling out forms

b. Automatically collected information

• IP address

• Browsing data (pages visited, time spent, referring/exit pages)

• Device information (browser type, operating system, device model)

• Cookies, tracking technologies, analytics data

c. Third-party sources

• Payment processors and financial institutions

• Marketing / advertising partners

• Analytics providers (e.g. Google Analytics)

• Social media platforms (if you interact via or through them)

2. How We Use Your Information

We use your personal data for the following purposes:

• To provide and manage your bookings and reservations

• To process payments and refunds

• To communicate with you (confirmations, customer service, updates, marketing)

• To improve and personalize your experience on our Site

• To carry out analytics and understand usage of the Site

• To perform fraud detection, risk management, and ensure security

• To comply with legal obligations (tax, regulatory, accounting)

• To send promotional or marketing messages (where you have given consent)

3. Legal Basis & Consent

• We rely on your consent (e.g. when you sign up, submit forms, agree to receive marketing)

• Performance of a contract (when you book a service via us)

• Legitimate interest (operating, securing, improving our services)

• Compliance with legal obligations

You may withdraw consent (e.g. for marketing) at any time (see Your Rights, below).

4. Cookies & Tracking Technologies

We (and our service providers) use cookies, pixels, web beacons, local storage, and similar technologies to:

• Recognize your device

• Keep you signed in

• Track and analyze how you use the site

• Serve targeted ads or marketing

• Measure campaign performance

You can manage or disable cookies via your browser settings, though doing so may limit site functionality.

5. Sharing & Disclosure

We may share your data in the following cases:

• Service providers / partners: companies who help us operate the business (payment processors, hosting, analytics, email delivery, marketing)

• Affiliates / group companies (if applicable)

• Business transfers: in case of merger, acquisition, sale of assets

• Legal compliance: when required by law, regulation, court order, or governmental request

• Protection of rights: to protect our rights, property, safety, or users

Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

We require that third parties processing your data follow privacy and security obligations.

6. International Transfers

Because we operate globally, your personal data may be transferred to (and stored in) countries other than your own, including Colombia and other jurisdictions. Where required by law, we ensure such transfers comply with applicable safeguards (e.g. standard contractual clauses, data transfer agreements, security measures).

7. Data Security & Retention

We use reasonable organizational, technical, and administrative measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.

We retain your data for as long as necessary to fulfill the purposes listed in this policy, comply with legal obligations, resolve disputes, enforce agreements, or as otherwise permitted by law.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access your personal data

• Rectify (correct) inaccurate or incomplete data

• Delete or erase your data

• Restrict or object to processing

• Withdraw consent (for processing based on consent)

• Data portability (request your data in a common format)

• Lodge a complaint with a supervisory authority

To exercise these rights, contact us (see Contact Information below). We may request verification before acting on any request.

You can also opt-out of marketing communications at any time (unsubscribe link, etc.).

9. Minors

The Site and our services are not intended for children under the age of 18 (or the relevant minimum age in your jurisdiction). We do not knowingly collect or solicit personal information from minors. If you believe we have collected such information, please contact us to delete it.

10. Links to Other Sites

Our Site may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We are not responsible for their practices. We encourage you to review their privacy policies before using them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Site and revise the “Last updated” date. For significant changes, we may notify you by email or via prominent notice.

12. Contact Information

If you have questions, concerns, or wish to exercise your rights regarding your personal data, please contact:

Grupo Privato
Email: info@privatocolombia.com