Privacy Policy

01

Data protection

Cusco Luxury Suites is responsible for the personal data used to answer enquiries, manage direct reservations, provide accommodation and comply with applicable obligations.

02

Data we may collect

• Contact and identity data: full name, telephone number, email, nationality, national ID or passport information.
• Stay data: selected suite, arrival and departure dates, number and identity of guests, special requests and messages related to the stay.
• Transaction data: quoted amount, payments, payment confirmations, refunds and information needed to issue a sales receipt.
• Service and security data: reported incidents, damage, access coordination, lost property and information necessary to assist guests and protect the property.
• Basic technical data: language preference stored in your browser and technical logs that may be generated by the hosting infrastructure, such as IP address, device, browser, date and access time.

Cusco Luxury Suites does not store complete card numbers, card security codes, online banking passwords or other banking credentials.

03

How we obtain the data

Data may be provided directly by you through the website, WhatsApp, email, telephone, payment communications or during the stay. The main guest may also provide necessary information about accompanying guests. For platform bookings, we receive the information that Airbnb, Booking.com or another platform is authorized to share with us.

04

Why we use personal data

• Answer enquiries and prepare quotations.
• Verify availability, confirm and manage reservations.
• Identify registered guests and coordinate check-in, check-out and access.
• Process payments, deposits and refunds and issue sales receipts.
• Provide support before, during and after the stay, including luggage storage when previously arranged.
• Manage incidents, claims, security deposits, damage and lost property.
• Comply with tax, accounting, consumer protection, security and other legal obligations.

Promotional messages will be sent only when you have given prior consent. You may withdraw that consent at any time, free of charge.

05

Required and optional information

Information identified as necessary is required to answer the request, confirm the booking, register guests or comply with legal obligations. If it is not provided, we may be unable to confirm or provide the requested service. Optional information and marketing consent are voluntary.

06

Who may access or receive the data

Access is limited to the management of Cusco Luxury Suites, Katherine and other personnel expressly authorized to manage reservations, guest assistance, cleaning, maintenance, administration or accounting, only to the extent required for their functions and subject to confidentiality.

Data may also be processed by service providers needed for the operation, including website hosting and technical infrastructure, email, WhatsApp/Meta, banks, Yape, card processors, accounting services and booking platforms. Public authorities may receive information when required by law.

07

International data processing

Some technology providers, such as website infrastructure, email, WhatsApp/Meta or international booking platforms, may process information outside Peru. We will use providers and safeguards appropriate to the service and will comply with the requirements applicable to international transfers or flows of personal data.

08

How long we retain the data

When data is no longer necessary, it will be deleted, securely destroyed or anonymized, unless it must be retained to meet a legal obligation or defend a legitimate claim.

09

Cookies and browser storage

The current website does not use advertising cookies, Meta Pixel or Google Analytics. It stores only a functional language preference in your browser so that the selected language can be remembered. The availability form processes dates and guest numbers in your browser and opens WhatsApp; it does not send that information to a Cusco Luxury Suites database before you choose to continue through WhatsApp.

If analytics, advertising or other non-essential technologies are introduced, this policy will be updated and consent will be requested when required.

10

Data security

We apply reasonable organizational and technical measures to restrict access, preserve confidentiality and reduce the risk of loss, alteration, unauthorized access or disclosure. Access is limited according to operational need. No internet transmission or storage system can guarantee absolute security; if a security incident occurs, we will act and notify affected persons or authorities when required by law.

11

Children and accompanying minors

We do not direct booking services to unaccompanied minors. Information about a minor guest must be provided by a parent, legal guardian or responsible accompanying adult and will be used only to manage the stay, safety and applicable obligations. We apply special care and restrict access to this information.

12

Your data protection rights

Under Peruvian law, you may request information about processing and exercise the rights of access, rectification, cancellation and opposition (ARCO), as well as withdraw consent where processing depends on consent.

• Information: receive clear information about how your data is processed.
• Access: know what personal data we hold and how it is used.
• Rectification: correct inaccurate, incomplete or outdated information.
• Cancellation: request deletion when the data is no longer necessary or processing is not justified, subject to legal retention obligations.
• Opposition: object to processing in the circumstances allowed by law, including promotional use.

13

How to exercise your rights

Send a free request to reservas@cuscoluxurysuites.com with the subject “Personal Data Request”. Include your full name, sufficient proof of identity, the right you wish to exercise, a clear description of the request and an email or address for the response. If acting through a representative, include proof of representation.

These are maximum response periods counted from the day after a valid request is submitted. If the response is denied in whole or in part, we will explain the reason and inform you of the available complaint channels.

14

Complaints before the authority

If you consider that your request has not been properly addressed, you may submit a claim to the Peruvian National Authority for Personal Data Protection or use the judicial remedies available under Peruvian law.

15

Personal data records

The personal data records corresponding to customers, guests and enquiries will be maintained and registered with the National Registry for Personal Data Protection when required, and their information will be kept updated in accordance with Peruvian law.

16

Changes to this policy

We may update this policy to reflect legal, operational or technological changes. The current version and its update date will always be published on this page. Material changes affecting consent will be communicated or submitted for renewed consent when required.