Privacy Policy and Personal Data Protection

At Sakura Expedition, we value the privacy and security of the information our travelers provide when browsing our website, making inquiries and booking our services.

The purpose of this Privacy Policy is to explain clearly and transparently how Inversiones Turísticas Sakura Expedition E.I.R.L., with Tax ID (RUC) No. 20600271319 and trade name Sakura Expedition, collects, uses, stores and, when necessary, shares personal data in the course of its activities.

Personal data is processed in accordance with current Peruvian personal data protection legislation, including Law No. 29733, the Personal Data Protection Law, and its applicable regulations.

1. Personal data we collect

Depending on how users interact with Sakura Expedition, we may collect different categories of information. The data we may request includes:

• First and last name.
• Nationality.
• Passport or ID number.
• Date of birth or age, when required for the service.
• Phone number.
• Email address.
• Travel dates.
• Information related to the service booked.
• Information related to payments and transactions, depending on the payment method used.

When payment is made through an external platform or financial institution, data directly related to the card or payment method may be processed by that provider in accordance with its own privacy and security policies.

Sakura Expedition will not request personal information that is not necessary for the purposes described in this Policy, unless required by law or for an additional purpose that has been properly disclosed.

2. Purposes of processing

The personal data collected by Sakura Expedition may be used for the following purposes:

2.1. Booking management

We use the data provided to process, confirm and manage the bookings requested by the customer.

2.2. Service delivery

Certain data must be shared with the suppliers, operators or service providers involved in the service in order to carry out the booking correctly.

For example, when necessary, we may provide information to transportation companies, accommodations, tour operators, guides, railway companies or other suppliers directly related to the service booked.

Only the information necessary to fulfill the corresponding purpose will be shared.

2.3. Communication with the customer

We may use contact details to:

• Confirm bookings.
• Send itinerary information.
• Share schedules.
• Report changes related to the service.
• Answer inquiries.
• Resolve issues and handle complaints.

2.4. Payments and receipts

Data may be used to process payments, issue receipts and comply with the corresponding administrative, tax and accounting obligations.

2.5. Compliance with legal obligations

Sakura Expedition may process and retain personal information when necessary to comply with obligations established by Peruvian law or to respond to requests from competent authorities.

3. Sharing data with third parties

To provide certain tourism services, Sakura Expedition may need to share personal information with third parties directly related to the booking.

Data will only be shared when necessary to fulfill a specific purpose, deliver the service booked, comply with a legal obligation, or when another valid legal basis applies.

Sakura Expedition will make reasonable efforts to ensure that third parties involved in processing personal information adopt appropriate security and confidentiality measures.

4. Tourism services operated by partner suppliers

Some tours and trips sold by Sakura Expedition may be operated, fully or partially, by partner suppliers or companies.

In these cases, certain personal data may be shared with the responsible supplier when such information is strictly necessary.

5. Cookies and similar technologies

Our website may use cookies and similar technologies to improve the browsing experience, remember certain preferences, analyze how the site performs and, where applicable, understand how users interact with our content.

When cookies or technologies are used for purposes that require consent, Sakura Expedition will implement the appropriate mechanisms in accordance with applicable regulations.

6. Information security

Sakura Expedition adopts reasonable technical, organizational and administrative measures to protect personal data against unauthorized access, loss, alteration, improper disclosure or any other form of unauthorized processing.

However, no system for transmitting or storing information over the Internet can guarantee absolute security.

For this reason, Sakura Expedition recommends that users take appropriate security measures, such as not sharing passwords, banking details or confidential information through unofficial channels.

7. Retention of personal data

Personal data will be kept for as long as necessary to fulfill the purposes for which it was collected and, where applicable, for the periods required by legal, administrative, tax, accounting or contractual obligations.

Once the data is no longer needed for those purposes and there is no legal obligation to keep it, Sakura Expedition will delete it, anonymize it or apply the appropriate measures in accordance with current legislation.

8. Withdrawal of consent and data subject rights

When the processing of personal data is based on the data subject’s consent, they may request to withdraw it in the cases and under the conditions permitted by current legislation.

Withdrawal of consent will not affect the lawfulness of any processing carried out beforehand.

When certain data is essential to deliver a booked service or comply with a legal obligation, a request to delete or restrict its processing may affect Sakura Expedition’s ability to provide or continue providing that service. The customer will be informed of this situation when applicable.

In addition, data subjects may exercise their rights of access, rectification, cancellation and objection (ARCO rights) by writing to info@sakuraexpedition.com, stating their full name and the request they wish to make, and attaching a copy of their ID document.

9. National and international transfers

Due to the international nature of tourism services, certain personal data may be shared with or processed by suppliers located outside Peru when necessary to carry out a booking or provide a booked service.

This may happen, for example, when international payment platforms, technology providers, tour operators, accommodations or other travel-related providers are involved.

Where applicable, Sakura Expedition will take the necessary measures to ensure that such transfers or processing comply with applicable personal data protection legislation.

10. Links to third-party websites

Our website may contain links to third-party pages, payment platforms, social networks or other external sites.

Sakura Expedition does not control the privacy policies or data processing practices of those sites.

We recommend that users review the corresponding privacy policies before providing personal information to third parties.

11. Updates to this Privacy Policy

Sakura Expedition may update this Privacy Policy when necessary due to changes in our services, processes, technologies used or applicable legislation.

The updated version will be published on this page, indicating the date of the update where applicable.

We recommend reviewing this Policy periodically to stay informed of any relevant changes.