Book a trip

Privacy Policy

How Machulas Journey collects, uses and protects your personal data, in accordance with Peruvian Law No. 29733 on Personal Data Protection.

1. Data controller

Machulas Journey, with offices at Matara 222, Cusco, Peru, is responsible for the personal data collected through this website. Contact: info@machulasjourney.com.

2. Data we collect

  • Contact data: name, email, phone, country.
  • Booking data required by Peruvian authorities to issue permits, entrance tickets and train tickets: full name, passport number, nationality, date of birth and gender.
  • Optional data you share with us: dietary requirements, health notes relevant to your safety, hotel and arrival details.
  • Payment data is processed directly by PayPal or Izipay; we never see or store your full card number.
  • Technical data: IP address and cookies strictly needed for the site to work (session, cart, language) and, only with your consent, analytics cookies.

3. Purposes

We use your data to answer inquiries, manage bookings, buy permits and tickets on your behalf, process payments, meet legal and tax obligations and, if you agree, send you travel information. We do not sell your data.

4. Recipients

Only what is necessary is shared with: the Ministry of Culture and SERNANP (permits and entrance tickets), train and transport companies, hotels and suppliers involved in your trip, payment processors and, when legally required, public authorities.

5. Security and retention

Passport numbers are stored encrypted, access to our booking system is restricted and protected, and the site uses HTTPS encryption. We keep data for the time needed to provide the service and to meet legal obligations.

6. Your rights

You may exercise your rights of access, rectification, cancellation and opposition (ARCO) by writing to info@machulasjourney.com. You may also file a claim with the National Authority for Personal Data Protection of Peru.

7. International transfers

Some providers (for example, payment processors or email services) may process data outside Peru with adequate safeguards.

8. Changes

We may update this policy; the current version is always published on this page.

Last updated: 2026-09-28