Privacy Policy – Jatun Mayo

Last updated: February 6, 2026
Website: jatunmayo.com

1) Who is responsible

The data controller is Agencia de Viajes y Turismo Jatun Mayo SPA, 78096153-8, with address at Latorre 1751.
Privacy email: viajesdeexperiencias@jatunmayo.com

2) What data we collect

Depending on how you use the website, we may collect:

Images/files, if you upload them: please avoid uploading images with geolocation data, such as EXIF GPS data.

Contact and booking information: name, email, phone number, message, tour dates/preferences, number of passengers, and any information you submit through forms.

Payments: transaction data, such as status, amount, and ID. We do not store full card numbers; these are processed by the payment gateways.

WhatsApp: your number, name if available, messages, and interaction metadata when you contact us.

Technical data: IP address, browser/device, pages visited, cookies/identifiers.

Comments, if enabled: form data, IP address, and user-agent for anti-spam purposes.

3) Why we use your data

Respond to inquiries and manage requests/bookings.

Coordinate services related to the trip, such as logistics and customer support.

Process payments and payment confirmations.

Contact you by WhatsApp or email regarding your request/booking.

Maintain website security, prevent fraud/spam, and ensure technical operation.

Measure and improve the website, if you enable non-essential cookies.

4) Legal basis

We process data when:

  • There is consent, for example, for marketing and non-essential cookies.
  • It is necessary to manage your request or contract, such as a booking.
  • There is a legitimate interest, such as security, fraud prevention, and service improvement.
  • It is necessary to comply with applicable legal obligations.

In Chile, Law 19.628 applies, and Law 21.719 modernizes the system and enters into force on December 1, 2026.

5) GoHighLevel — forms/CRM

We use GoHighLevel/HighLevel to capture forms, manage contacts, and run automations, such as confirmations.
HighLevel states that, for data protection purposes, it acts as a processor following the instructions of the client/controller, and its general policy is published by the platform.

6) Payments: PayPal and Webpay/Transbank

Cuando pagas:

  • PayPal may process your data to provide its service, ensure security and fraud prevention, and comply with legal obligations, according to its Privacy Statement. In the context of payment services, PayPal may act as an independent controller for certain customer data.
  • Webpay/Transbank processes data in accordance with its published privacy policies.

Important: Jatun Mayo receives payment confirmation and transaction details, such as payment status and transaction ID, but sensitive card information is handled by the payment gateways.

7) WhatsApp

If you contact us through WhatsApp using the “click to chat” button/link or WhatsApp Business, WhatsApp processes your information according to its own policies and acts as the data controller for its service.

8) Who we share your data with

We only share what is necessary with:

  • Technology providers such as hosting, security, email services, and GoHighLevel.
  • Payment gateways, such as PayPal and Webpay/Transbank.
  • WhatsApp, when you choose to contact us through that channel.
  • Authorities, when there is a legal obligation to do so.

Some providers may be located outside Chile, which may involve international data transfers.

9) How long we retain your data

Inquiries: 3 months from the last interaction.

Bookings/sales: 1 year for administrative and legal reasons.

WhatsApp: retained according to operational needs and customer support records. Recommended retention period: 3 months.

Comments (if any): may be retained indefinitely for moderation purposes.

10) Your rights

You may request access, rectification, cancellation, and objection, where applicable, by writing to agenciajatunmayo@gmail.com. Law 19.628 regulates data processing based on legal authorization or consent.

11) Cookies

We may use cookies:

  • Technical cookies (necessary).
  • Preference cookies — for example, to remember your details when leaving a comment.
  • Analytics/marketing cookies — only if you enable them. We recommend using a consent banner.

12) Embedded content

Articles may include embedded content such as videos, maps, or similar elements. This content may behave as if you had visited the third-party website directly, including the use of cookies or tracking technologies.

13) Security

We apply reasonable measures to protect your data, including access controls, security practices, and specialized providers. However, no system is 100% foolproof.Aplicamos medidas razonables para proteger los datos (control de acceso, prácticas de seguridad y proveedores especializados). Ningún sistema es 100% infalible.

14) Changes

We may update this policy. The current version will be the one published on this website.