Personal Data Protection and Privacy Policy

Last updated: November 1, 2026

This policy explains how Zeven Travel EIRL, RUC 20615860337, Av. El Sol 948, Cusco, Peru («Rainbow Mountain», «we», «us») collects, uses and protects your personal data when you use rainbowmountain.org.pe (the «Website») or book a tour with us. We respect your privacy and process your data in line with the personal data protection laws that apply in Peru.

1. Data we collect

Booking data: name, email, phone number, nationality or country, number of travelers, tour date and time, language, pick-up location (hotel, address or a point on a map) and any notes you add.
Payment data: payments are processed by a third-party payment provider. Card details are entered on the provider’s secure form and are not stored on our servers. We keep the booking reference, amount and payment status.
Contact data: the details you send us through the contact or question forms, by email or by WhatsApp.
Newsletter and discount data: your name, email and country if you sign up for a discount or updates, and the discount code we issue to you.
Technical data: basic information such as browser type, device, pages visited and IP address, which is used for security and to keep the Website working. We also store a few preferences in your browser (see section 6).

2. Why we use your data

To process, confirm and manage your booking and to organize your tour, including pick-up and communication with your guide.
To process payments, send receipts and handle cancellations or refunds.
To answer your questions and give customer support.
To send you discount codes or updates you have asked for. You can unsubscribe at any time.
To keep the Website secure, prevent fraud and improve how it works.
To meet legal, accounting and tax obligations.

3. Legal basis and consent

We process your data because you have given your consent (for example, when you subscribe or send a form), because it is needed to carry out the booking you requested, or because the law requires it. By submitting your data you confirm that it is accurate and you accept this policy. You can withdraw your consent at any time by contacting us, although this may stop us from providing some services.

4. Who we share your data with

We do not sell your personal data. We share it only when needed to provide the service, with:

Our guides, drivers and operating partners, who receive the details needed to run your tour (such as names, number of travelers and pick-up location).
Our payment provider, to process your payment.
Service providers that help us run the Website, such as hosting, email delivery and maps.
Public authorities, when the law requires it.

Some of these providers may be located outside Peru. In that case, we expect them to protect your data with a level of security appropriate to this policy.

5. How long we keep your data

We keep your data only as long as needed for the purposes above and to meet legal obligations. Booking and payment records are kept for the periods required by accounting and tax rules. Subscription data is kept until you unsubscribe or ask us to delete it. Messages sent through the contact form are kept in our inbox for as long as needed to answer you and follow up. Messages that our filters flag as possible spam are held in quarantine and deleted automatically after 30 days. To limit abuse we store only an anonymous code derived from your IP address, not the address itself.

6. Cookies and browser storage

The Website may use cookies and similar technologies, such as your browser’s local storage, to keep it working and to remember simple choices, for example your light or dark mode, the tours you marked as favorites, or whether you already saw a pop-up. The Website also loads fonts from an external provider. You can block or delete cookies in your browser settings, although parts of the Website may not work as expected. If we add analytics or advertising tools in the future, we will update this policy and ask for your consent when required.

Our contact page includes a Google Maps map. It does not load until you press the «Show map» button. When it loads, Google may set its own cookies and receive data such as your IP address, under its own privacy policy.

7. Security

We take reasonable technical and organizational measures to protect your data against loss, misuse and unauthorized access, including secure connections (HTTPS) and limited access to personal data. No system is completely secure, so we cannot guarantee absolute security.

8. Your rights

You have the right to access, update, correct, delete and object to the use of your personal data, and to withdraw your consent, as provided by law. To exercise these rights, write to info@rainbowmountain.pe with your name, the email used for your booking and what you request. We will reply within the time set by law. If you believe your rights were not respected, you can also file a claim with the Peruvian data protection authority.

9. Children

The Website is not directed to children. If a booking includes travelers under 18, the data of the minors is provided by their parent or legal guardian, who is responsible for it.

10. Third-party links

The Website may include links to other sites, such as social networks, maps or payment pages. We are not responsible for their privacy practices, so please read their policies.

11. Changes to this policy

We may update this policy from time to time. The new version will be published on this page with its date of update. Please review it periodically.

12. Contact

Zeven Travel EIRL · RUC 20615860337
Av. El Sol 948, Cusco, Peru
Email: info@rainbowmountain.pe · Phone / WhatsApp: +51 900 657 040