Privacy Policy and Personal Data Protection
Cauce Travel E.I.R.L.
Last updated: August 22, 2026
1. Data controller
Cauce Travel E.I.R.L., Peruvian Tax ID (RUC) 20616376684, registered at Jr. Romero Hidalgo 266, Dpto. 102, San Borja, Lima, Peru, is responsible for the processing of personal data it collects and uses in the course of its activities as a travel agency.
For any question about the processing of personal data: hello@cauce.travel · +51 910 984 116
2. Scope of this Policy
This Policy explains how Cauce collects, uses, retains and protects personal data received through its website, email, Instagram and other digital channels used to provide its services.
Publishing this Policy fulfills the duty of information and transparency applicable to the processing of personal data and does not replace consent that may be legally required for certain processing activities.
Personal data is processed in accordance with Law No. 29733, Peru's Personal Data Protection Law, its regulations, and other applicable rules.
3. Personal data we may collect
Identification and contact data: full name, email address, phone number, nationality and other data necessary to identify and contact the traveler.
Data necessary to organize the trip: date of birth, passport or other travel document information, accommodation preferences, booking-related information, special requirements, and other data that may be requested by Providers involved in the itinerary.
Information related to personal travel needs: dietary restrictions, allergies, mobility, physical conditions, or other information the traveler chooses to share when relevant to the safety, planning or proper delivery of services.
Browsing information: technical information that may be automatically collected when using the website, such as IP address, device type, browser, and data related to site security and performance.
Information provided via Instagram and other third-party channels: data the user chooses to share through those channels, based on the content of their communications.
Cauce seeks to collect only the data necessary for the corresponding purpose.
4. Sensitive personal data
Certain health-related information may constitute sensitive personal data.
When Cauce requests or receives this type of information, it will use it only for purposes related to planning, safety, or the proper delivery of the trip, and will share it only when necessary for those purposes.
When the law requires consent for the processing of sensitive data, Cauce will use a mechanism that allows it to demonstrate the data subject's expressed consent in accordance with applicable regulations.
The traveler is responsible for providing truthful and relevant information and for deciding what personal information to share through the channels made available by Cauce, without prejudice to the fact that omitting relevant information may limit the ability of Cauce or its Providers to take appropriate safety measures or adapt the service.
5. Purposes of processing
Cauce may use personal data to: a) respond to information and quote requests; b) design and personalize itineraries; c) manage and confirm bookings; d) coordinate services with hotels, transport companies, operators, guides and other Providers; e) communicate with the Client before, during and after the trip; f) manage changes, cancellations, postponements, refunds and other booking-related matters; g) comply with legal, tax, accounting and administrative obligations; h) handle complaints, inquiries and service-related requests; i) protect system security and prevent fraudulent or unlawful use; and j) send commercial communications when there is a valid legal basis and, where applicable, the data subject's consent.
6. Legal bases for processing
Depending on the purpose, the processing of personal data may be based, among other bases provided by applicable law, on: performance of pre-contractual measures or of a contract requested by the data subject; compliance with legal obligations; the data subject's consent, where applicable; and other legally permitted bases.
Cauce does not treat the publication of this Policy as a substitute for consent when consent is legally required.
7. Who we share data with
Cauce may share only the data strictly necessary with Providers involved in delivering the booked services.
Depending on the itinerary, these may include hotels, transport companies, tour operators, guides, restaurants, activity providers, entities managing tourism services, and other third parties necessary to execute the booking.
Cauce may also share information when necessary to comply with legal obligations or when required by competent authorities.
Third parties receiving information may be subject to their own privacy policies and legal data protection obligations.
8. Technology providers
Cauce uses technology providers and digital platforms necessary to operate its business, manage communications, store information and maintain its systems.
Tools used by Cauce may include web hosting, email and cloud storage services, as well as communication platforms and social media.
These providers may process certain personal data under their own terms and privacy policies and, where applicable, from locations outside Peru.
Cauce will seek to use providers with adequate security measures and will limit shared information to what is necessary for the corresponding purpose.
9. Information security
Cauce adopts reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, improper disclosure or destruction.
These measures may include access controls, account and password management, authentication mechanisms, secure HTTPS connections, information access restrictions, and other reasonable security measures applicable to the systems Cauce uses.
However, no data transmission or storage system can guarantee absolute security.
10. Payments
Cauce currently manages payments through the payment methods it communicates directly to its clients.
When payments are made by bank transfer, Cauce does not request or store full credit or debit card numbers to process those transfers.
If Cauce later adopts a payment gateway or other mechanism involving a different treatment of financial data, this Policy will be updated accordingly.
11. Data retention
Cauce will retain personal data for as long as necessary to fulfill the purposes for which it was collected, manage the contractual relationship, respond to requests, comply with legal and tax obligations, and protect its rights.
Once there is no longer a legitimate purpose justifying its retention, Cauce will delete, anonymize, or otherwise handle the data in accordance with applicable regulations.
Retention periods may vary depending on the nature of the data and the applicable legal obligation.
12. Data subject rights
Data subjects may exercise the rights recognized under Peruvian law, including access, rectification, cancellation and objection, as well as any other applicable rights.
To exercise these rights, please send a request to hello@cauce.travel. The request should allow us to identify the data subject and should clearly specify the right being exercised and the information needed to process it. Cauce will respond within the timeframes established by applicable law.
13. Commercial communications
Cauce may send commercial information, updates or offers related to its services when it has a valid legal basis to do so and, when necessary, the corresponding consent.
Data subjects may opt out of commercial communications by following the instructions included in such communications or by writing to hello@cauce.travel.
14. Minors
Cauce's services are primarily intended for adults.
When a minor takes part in a trip booked by their parent, guardian, or legal representative, Cauce may process the data strictly necessary to organize and provide the booked services, in accordance with applicable law and under the responsibility of whoever holds that representation.
15. Instagram and other third-party platforms
When someone contacts Cauce via Instagram or another third-party platform, certain data may initially be processed by that platform under its own terms and privacy policies.
Cauce will only use the information it receives or that the user provides directly, within what is necessary to respond to their inquiry or manage the corresponding service.
Users are encouraged to avoid sending highly sensitive information that isn't necessary for their inquiry through social media channels.
16. Cookies and similar technologies
Cauce's website may use cookies or similar technologies necessary for its operation, security, and to improve the user experience.
Where cookies or technologies requiring consent under applicable law are used, Cauce will implement the corresponding mechanisms.
Any additional analytics, advertising or tracking tool adopted later will be evaluated and, where applicable, reflected in this Policy.
17. Security incidents
If a security incident affecting personal data is detected, Cauce will take appropriate measures to contain it, assess its effects, and comply with the notification and response obligations set by applicable law.
18. Updates to this Policy
Cauce may amend this Policy when necessary to reflect changes in its services, systems, technology providers or applicable law. The current version, published on Cauce's website, will show the date of its last update.
19. Contact
Cauce Travel E.I.R.L.
RUC: 20616376684
Jr. Romero Hidalgo 266, Dpto. 102, San Borja, Lima, Peru
hello@cauce.travel · +51 910 984 116