Privacy Policy

Last updated: October 22, 2026

At Bosque Guardián Lodge we respect your privacy. This policy explains which personal data we collect through the website bosqueguardianlodge.com and when you book or stay with us, what we use it for, who we share it with and how you can exercise your rights.

1. Who is responsible for your data

The data controller is Bosque Guardián Lodge with address at Km 27.9 de la carretera Tarapoto – Yurimaguas, Tarapoto, San Martín, Peru. For any matter related to your personal data you can write to reservas@bosqueguardian.com.

2. What data we collect

  • Contact form: name, email address and the message you send us.
  • Proof of consent: date and time, IP address, browser and the text you accepted when sending the form.
  • Bookings and stays: full name, ID or passport number, nationality, phone, email, dates of stay, number of guests and the details needed to provide the service (for example food preferences, allergies or special requests you choose to tell us).
  • Payments: they are processed by banks or payment platforms. We do not store full card details.
  • WhatsApp: the messages and contact details you share when you write to us through this channel.
  • Browsing: technical and usage data collected through cookies, only with your consent when they are not strictly necessary. See our Cookie Policy.

Allergies, dietary needs or health conditions are sensitive data: we only ask for them when needed to look after you during your stay and we process them with your express consent.

3. Why we use your data and on what legal basis

  • To answer your enquiries sent through the form, email or WhatsApp. Basis: your consent and, where applicable, steps taken at your request before a contract.
  • To manage your booking and stay (confirmation, check-in, services, tours and invoicing). Basis: performance of the contract.
  • To comply with legal obligations, such as the guest register, tax and accounting rules. Basis: legal obligation.
  • To understand how our website is used and improve it, with aggregated statistics. Basis: your consent (analytics cookies).
  • To send you news or offers, only if you have asked for them. You can unsubscribe at any time. Basis: your consent.

We do not make automated decisions or create profiles that produce legal effects on you.

4. Who we share your data with

We do not sell your personal data. We only share it with:

  • Service providers who process data on our behalf: website hosting, email, booking and payment platforms, WhatsApp (Meta) and statistics (Google Analytics, only with your consent).
  • Tour operators and local guides, only the data needed to provide the excursions you book.
  • Public authorities, when required by law.

Some of these providers are located outside Peru (for example in the United States). In these international transfers we make sure that an adequate level of protection is guaranteed, in accordance with Law No. 29733 and its Regulation.

5. How long we keep your data

  • Form enquiries: for the time needed to answer them and up to 2 years after the last contact.
  • Booking and invoicing data: for the periods required by tax and tourism regulations.
  • Proof of consent: while you keep a relationship with us and for the period in which claims may arise.

After these periods the data is deleted or anonymised.

6. Your rights

You can exercise at any time your rights of information, access, rectification, cancellation (deletion), objection and portability, and withdraw the consent you gave us, without this affecting the processing carried out before. To do so, write to reservas@bosqueguardian.com with the subject «Personal data», stating your name, what you are asking for and attaching a copy of your ID document (or that of your representative).

We will reply within the time limits set by the Regulation of Law No. 29733. If you consider that your rights have not been respected, you can file a complaint with the National Authority for Personal Data Protection of the Ministry of Justice and Human Rights of Peru. If you live in the European Union, you can also contact the data protection authority of your country.

7. Security

We apply technical, organisational and legal measures to protect your data against loss, misuse, unauthorised access, alteration or disclosure: encrypted connection (HTTPS), restricted access to the information and providers that offer security guarantees.

8. Minors

Our services are aimed at adults. We do not knowingly collect data from children under 14 without the consent of their parents or guardians. Data of minors travelling with their family is provided by the adult making the booking.

9. Changes to this policy

We may update this policy to reflect legal or service changes. The current version will always be on this page with its update date.

Contact us