Privacy policy
Effective October 23, 2026 · Last updated: October 23, 2026
In short
- We only use your data to manage your Guatapé tour booking, assist you and comply with the law.
- We never sell or rent your data.
- We do not store card details: you pay on the day of the tour.
- You can access, correct or ask us to delete your data by writing to viajesmaxitours@hotmail.com.
This policy explains how we handle the personal data we receive through touraguatape.com and our booking channels, in accordance with Colombian Law 1581 of 2012, Decree 1377 of 2013 (incorporated into Decree 1074 of 2015) and other Colombian data protection rules. The Spanish version prevails in case of any discrepancy.
1. Data controller
- Company: Inversiones Maxitours S.A.S., which operates the business Viajes Maxitours.
- Tax ID (NIT): 901.719.727-1 · National Tourism Registry (RNT): 172253
- Address: Carrera 45E #70-22, interior 202, Medellín, Antioquia, Colombia.
- Email: viajesmaxitours@hotmail.com
- Phone: +57 311 788 5599 · WhatsApp: +57 311 744 7988
- Website: touraguatape.com
2. Data we collect
When you book via WhatsApp or by phone
- Full name and ID or passport number of each traveler.
- Hotel or chosen meeting point.
- WhatsApp phone number, including country code.
- Tour date and language.
- For children: name, ID and age.
When you visit the website
Browsing data that does not identify you by name: pages viewed, device and browser type, approximate location, traffic source (for example, a Google ad) and clicks on the WhatsApp or call buttons.
Data we do not request
We do not request sensitive data. If you voluntarily tell us about a health or mobility condition, we only use it to take the necessary precautions during the tour. We do not receive or store card details: card payments are processed on a card terminal on the day of the tour.
3. How we use your data
- To manage your booking, coordinate pickup and notify you of any changes.
- To issue the medical assistance card included in the tour.
- To share with the providers involved in the tour (transportation, guides, boat, restaurants and attractions) the information they need to serve you.
- To issue invoices and comply with legal, accounting, tax and tourism obligations.
- To handle requests, complaints, claims and suggestions.
- To measure website use and the effectiveness of our advertising.
- To send you offers or news, only with your consent, which you can withdraw at any time.
Children: their data is provided by a parent or accompanying adult and is only used for the booking and the medical assistance card, always in the child's best interest.
Consent: by sending us your data to book, you authorize us to process it for these purposes. You may withdraw your consent, except where there is a legal or contractual duty to keep the data.
4. Who we share your data with
- Tour providers: only the data needed to provide the service.
- The insurer that issues the medical assistance card.
- Technology providers: WhatsApp (Meta), Google (Google Analytics and Google Ads) and our web hosting provider. Some store information on servers outside Colombia; we require them to apply appropriate security and confidentiality measures.
- Authorities that request it in the exercise of their legal duties.
We do not sell, rent or transfer your data to third parties for commercial purposes.
5. Your rights
- To access, update and correct your data.
- To request proof of the consent you gave.
- To be informed about how your data has been used.
- To withdraw your consent or request deletion of your data, where there is no legal or contractual duty to keep it.
- To access your data free of charge.
- To file complaints with Colombia's Superintendence of Industry and Commerce (SIC), after first submitting your request to us.
6. How to exercise your rights
Write to viajesmaxitours@hotmail.com or message us on WhatsApp at +57 311 744 7988 with: your name and ID, what you want to do (access, correct, delete or file a claim), how you would like to receive our answer, and any supporting documents.
| Type of request | Response time | If we need more time |
|---|---|---|
| Inquiry | Up to 10 business days | We will notify you and reply within 5 additional business days |
| Claim | Up to 15 business days | We will notify you and reply within 8 additional business days |
If a claim is incomplete, we will ask you for the missing information within 5 days. If we do not receive it within 2 months, the claim will be considered withdrawn.
7. Cookies and analytics
This website uses Google Analytics and Google Ads cookies to count visits, see which pages and buttons are used and measure the results of our ads. These cookies do not identify you by name. You can block or delete them in your browser settings, or turn off Google Analytics measurement with Google's official opt-out browser add-on.
8. Security and retention
We apply reasonable technical and administrative measures to protect your information, and only the people handling your booking can access it. We keep data for as long as the business relationship lasts and as required by accounting, tax and tourism rules; accounting records are kept for up to 10 years.
9. Effective date and changes
This policy is effective as of October 23, 2026. Our databases will remain in force for as long as the company operates. We will publish any significant changes on this page. Please also read our terms and conditions.