PRIVACY POLICY AND PERSONAL DATA PROTECTION

This Privacy Policy and Personal Data Protection (“Policy”) is intended to inform you how we collect, use, spread and/or disclose the information we obtain through our Platform and other Services. The terms in capital letters that are not defined herein shall have the meaning ascribed to them in our Terms of Use.

This Policy does not govern the use of any data you provide us when you call, write, or communicate with us in a different way by means of the Services. By using the Services, you agree to comply with the provisions of this Policy.

1. WHAT DATA DO WE COLLECT?

We collect your personal data and general data (as such terms are defined below):

“Personal Data” is the data that allows us to identify and/or make you identifiable, such as your name, surname, postal address, telephone number, e-mail address, credit or debit card number, location data, among others. You acknowledge and expressly authorize us, by means of your acceptance of this Policy, to use and process all the Personal Data you provide us when using the Services, including but not limited to, the Personal Data obtained by:

a.) Filling out the inquiry form.

b.) Filling out the traveler form after your booking has been completed.

c.) Participating in contests, raffles, giveaways, and special offers. In the event this data is to be shared with a third party, we shall notify you at the time of collection. If you do not want your Personal Data to be shared, you can always refuse to participate in raffles, contests, or special offers that may be created.

d.) Conducting voluntary surveys, panels, and market studies, for which you have given your consent. The data you provide in response to the questions of the survey, panel, or optional market study may be shared, but only in aggregate, with our advertisers and partners.

e.) Browsing our Platform (cookies, IP address, beacons) in order to track the use of the content. More info about the usage of cookies in our Cookies Policy (https://exploorperu.com/cookies-policy/).

This Personal Data shall be stored in our personal data banks, which have the necessary security measures and comply with the highest standards of protection. Likewise, the Personal Data shall only be shared with the Operators and third parties, if applicable, to carry out the management, development, and contracting realization of the services provided by the Operators, in accordance with the provisions of the applicable legislation and, in the cases of c) and d) above mentioned.

“General Data” refers to information that, by itself, does not allow you to be identified (for example, demographic data or visits to the website). We may collect General Data by means of any of the methods above mentioned, as well as automatically by means of the use of industry-standard technologies described below. For example, each time you visit the Services, your IP address, browser, type of equipment, and access time can be automatically collected.

“Sensitive Data” refers to information you provide us related to dietary restrictions, allergies, medical conditions, mobility limitations, or other health-related information that is relevant to the physical activities and travel experiences you undertake with the Operators, such as trekking, high-altitude excursions, or other adventure activities. By your acceptance of this Policy, you expressly authorize us to process your Sensitive Data, including collecting, registering, conserving, and, if applicable, transferring such Sensitive Data to the Operators, solely for the purpose of assessing your suitability for a given activity, arranging appropriate accommodations, and safeguarding your safety and wellbeing during the Services, provided you are under a contractual relationship with the Operators.

2. DO WE USE YOUR DATA?

You acknowledge and agree that the Personal Data and Sensitive Data processing is performed within the framework of the contractual relationship you have entered into with us. Unless otherwise indicated in this article of our Policy, we shall not share your Personal Data and Sensitive Data with any third party without your consent, unless it is necessary for the management, development, and contracting realization of the services to the Operators. Your Personal Data or General Data will be used, including but not limited to, in case of:

a.) System Management: We may use your General Data for the purposes of our system management, the assistance in the diagnosis of problems with the servers, the supervision of the performance and traffic of our systems, as well as collecting demographic data. Occasionally, we shall share dissociated or anonymized General Data with third parties, that is, data that does not allow the third party to identify or contact you personally.

b.) Communication and Advertising: We shall use your Personal Data to send you, from time to time, to your email address and/or by means of text messages or any other available means, announcements, updates of services, offers, invitations to raffles or contests, or advertising of us. Also, we can send you, through the same means, surveys about the tours, the Services received, and/or about any other matter of interest to ensure the improvement of your experience. You may request that the sending of surveys or advertising be omitted by means of the email [email protected]. Mobile phone numbers collected through SMS opt-in consent are used exclusively for the purposes described in the SMS Terms and Conditions set out in section (f) below, and will not be shared with third parties or affiliates for marketing or promotional purposes.

c.) Service Operators: In case we decide to request the services of third parties in which your Personal Data, Sensitive Data, or General Data is involved (for example, data management and storage services), we shall transfer the Personal Data, Sensitive Data, or General Data that is necessary for such operators to perform their services. In this case, they are bound to hold in trust the information to which they have or may have access, including their employees or operators.

d.) Other types of disclosure: Subject to any provision to the contrary set in this Policy, we reserve the right, and you hereby expressly authorize us, to share your Personal Data or General Data: (1) in response to subpoenas, judicial commands, or legal or administrative proceedings of any nature, or to establish, protect, or exercise our legal rights or defend ourselves against lawsuits, administrative procedures, and investigations of any nature; (2) if we believe it necessary to investigate, prevent, or take action regarding potentially illegal activities, fraud, or situations that involve potential threats to the safety of any person or property; (3) if we believe it necessary to investigate, prevent, or take action regarding significant abuse of the Services infrastructure or the Internet in general (such as sending junk mail (spam), denial of service attacks, or attempts to compromise information security); (4) with affiliated companies or entities under common control with us, in which case we shall require such entities to honor this Policy; and (5) if we were acquired by or merged with another entity, and in cases of corporate reorganization, sale of assets, or bankruptcy.

e.) Surveys: We can send to your email and/or via text messages or any other available means, surveys about the Services we provide or the services offered by the Operators and/or about any other matter of interest to ensure the improvement of our Services.

f.) SMS TERMS & CONDITIONS

Product Description
By providing your mobile phone number, you consent to receive SMS messages from Exploor related to your travel plans, schedules, and itinerary updates.

Message Frequency
Message frequency may vary.

Message and Data Rates
Standard message and data rates may apply.

Opting Out
You may opt out of receiving SMS messages at any time by replying “STOP” to any message you receive from us. After opting out, you’ll receive a confirmation message, and we will stop sending SMS messages to your number.

Help and Support
If you need help or have questions about our SMS service, reply “HELP” to any message you receive, or contact us at [email protected] or +1 (786) 706-7470.

Your phone number will be handled in accordance with our Privacy Policy. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent, this information will not be shared with any third parties.

3. HOW DO WE PROTECT YOUR DATA?

We continually strive to provide you with the best Service and, for this, we are constantly seeking to implement new technologies and processes to better protect your Personal Data and General Data:

a.) Security Measures: We will adopt appropriate security measures to protect against unauthorized access, alteration, disclosure, loss, or destruction of your Personal Data, Sensitive Data, and General Data, under the parameters set forth in Law No. 29733, Personal Data Protection Law, its Regulations approved by Supreme Decree No. 003-2013-JUS, and any subsequent amendments thereto. These mechanisms include, without limitation, internal reviews of: (a) our data collection systems; (b) storage and processing practices; (c) the electronic security measures of the platform; and (d) the physical security measures protecting our physical and virtual storage spaces of Personal Data, Sensitive Data, and General Data. Our employees, operators, and agents who have access to Personal Data or Sensitive Data are bound by the duty of confidentiality and the obligations specified in the applicable regulations for the protection of personal data, and their non-compliance may be subject to disciplinary measures, including dismissal and payment of indemnity, if applicable, for the unauthorized use or disclosure of Personal Data or Sensitive Data.

b.) Third-Party Links: We may contain links to third parties that may collect your Personal Data and General Data. In addition, we may use third parties to provide components of our systems. In any case, third parties may have different privacy policies, and their collection practices are independent of ours. We: (a) have no responsibility or liability for these policies or the actions of third parties; (b) are not responsible for the privacy practices or content of such websites; and (c) make no warranties or representations about the content, products, or services offered on such websites, or the security of any Personal Data or General Data you may provide to them.

4. DATA RETENTION

We retain your Personal Data and Sensitive Data for as long as necessary to fulfill the purposes described in this Policy, including for the duration of your contractual relationship with us. Following the end of that relationship, we retain your Personal Data for an additional period of five (5) years, in order to comply with applicable tax, accounting, and commercial record-keeping obligations under Peruvian law, and to address any claims that may arise from the Services provided. After this period, your Personal Data will be securely deleted or anonymized, unless a longer retention period is required by law or is necessary to establish, exercise, or defend legal claims.

5. PRIVACY OF MINORS

We are committed to the protection of minors’ data, so we encourage parents and guardians to play an active role in the online activities and interests of their children. The Services are not designed for children, nor can they be used by children under 16 years old. The only exception is if the children are accompanied by their parents. We do not knowingly collect Personal Data from minors, and we do not market the Services to children under 16 years old.

6. CHANGES IN THE PRIVACY AND PERSONAL DATA PROTECTION POLICY

You acknowledge that this Policy is an integral part of our Terms of Use, which regulates access to and use of Reservations and other Services. Our Services and the legislation applicable thereto may change, so we reserve the right to update or modify this Policy at any time; when we do, we shall seek to notify you of any variation and, where a change to the treatment of your data that you authorized by accepting this Policy occurs, request your renewed consent to the new version. Notwithstanding this, we recommend that you review this Policy from time to time, and especially before providing additional Personal Data. This Policy was last updated on the date indicated at the end.

7. HOW TO ACCESS, RECTIFY OR CANCEL YOUR PERSONAL DATA?

In order to keep your Personal Data and Sensitive Data updated and complete, we would appreciate you communicating with us so we can take reasonable measures to update or correct it. Likewise, you acknowledge that at any time you may exercise the rights granted by the current regulations for the protection of personal data, including your rights of access, inclusion, rectification, deletion, and opposition regarding the Personal Data you provided at the time of accessing our Services. To do so, please send us a notice to [email protected].

Similarly, do not hesitate to contact us if you have any questions about this Policy. You can communicate with us at [email protected].

8. GOVERNING LAW

This Policy, and the processing of your Personal Data, Sensitive Data, and General Data described herein, are governed by the laws of the Republic of Peru, including Law No. 29733, Personal Data Protection Law, its Regulations approved by Supreme Decree No. 003-2013-JUS, and any subsequent amendments thereto.

This Policy was last updated on August 11, 2026.