Personal Data Processing Policy
Cartagena For Travelers S.A.S. · NIT (Tax ID) 901230150-1 · National Tourism Registry (RNT) 120752
Calle 6A #3-17, Edificio Jasban, Oficina 409A, Cartagena de Indias, Bolívar, Colombia
Email: reservas@cartagenafortravelers.com · WhatsApp: +57 316 373 3364
This policy is adopted under Colombian Statutory Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and the rules that amend or complement them. It explains what personal data we collect, what we use it for, who we share it with and how you can exercise your rights as a data subject.
1. Data controller
The controller of your personal data is Cartagena For Travelers S.A.S., with the identification and contact details shown above.
2. Data we collect
- Identification and contact data: name, passport or ID number, nationality, email address and phone or WhatsApp number.
- Booking data: dates, tours or services booked, number and names of the people traveling with you, children’s ages, hotel or pickup address, cruise ship name and special requests.
- Billing data: what is needed to issue the electronic invoice required by the Colombian tax authority (DIAN).
- Payment data: card payments are processed directly by our payment gateway (Bold). We do not receive or store full card numbers.
- Conversations: the messages you send us by WhatsApp, email, the contact form or the website chat.
- Browsing data: IP address, device and browser type, pages visited and preferences such as language and currency, through cookies (see section 9).
We do not ask for sensitive data. If you choose to tell us something about your health, mobility or diet so we can adapt a service, we will use it only for that purpose. Providing sensitive data is optional.
3. Purposes
- To manage, confirm and deliver the tours, transfers, day passes and rentals you book, and coordinate them with the suppliers who operate them.
- To contact you about your booking before, during and after the service: confirmations, pickup times, weather changes, balance payment links and customer service.
- To issue electronic invoices, report purchase information to the DIAN and meet our other legal, accounting and tax obligations.
- To manage payments, refunds and claims, and to prevent fraud.
- To answer your questions by WhatsApp, email or the website chat.
- To measure how the website is used, improve our services and show ads for our services on platforms such as Google and Meta.
We only send you emails about your bookings. We do not send newsletters or promotional emails.
4. Authorization
By booking, writing to us or using our forms, you give us your prior, express and informed authorization to process your data for the purposes in this policy. You may revoke it at any time, except where a legal or contractual duty requires us to keep the data.
5. Data of children and adolescents
We only process minors’ data when they travel with their parents or legal guardians and it is needed for the booking (for example, name and age for pricing or safety on board). That data is provided and authorized by the parent or legal guardian, and we process it respecting the best interests of the child and their fundamental rights.
6. Who we share your data with
- Suppliers of the services you book: beach clubs, hotels, boats, captains, drivers and guides, only with the data needed to deliver the service.
- Technology providers acting as processors: the payment gateway (Bold), our web hosting and online store, Meta (WhatsApp, Facebook and Instagram), Google (email, analytics and advertising), the customer management tools (CRM) we use and the artificial intelligence provider that powers the website chat.
- Authorities: the DIAN and other competent authorities when the law requires it.
Some of these providers store information on servers outside Colombia, for example in the United States. In those cases the international transfer or transmission is made for the purposes of this policy and with providers that offer adequate levels of protection, in line with Law 1581 of 2012. We do not sell your personal data.
7. Your rights
- To know, update and correct your personal data.
- To request proof of the authorization you gave us.
- To be informed about how your data has been used.
- To file complaints with the Superintendence of Industry and Commerce (SIC) for violations of the law, after completing the inquiry or claim process with us.
- To revoke the authorization and/or request deletion of your data when there is no legal or contractual duty to keep it.
- To access your personal data free of charge.
8. How to exercise your rights
Inquiries and claims are handled by our Customer Service team at reservas@cartagenafortravelers.com. Please include your full name, ID or passport number, your request and a way to contact you.
- Inquiries: answered within ten (10) business days of receipt. If that is not possible, we will tell you why and give a new date, no more than five (5) additional business days later.
- Claims (correction, update, deletion or non-compliance): handled within fifteen (15) business days of receipt. If that is not possible, we will tell you why and give a new date, no more than eight (8) additional business days later. If a claim is incomplete, we will ask you to complete it within five (5) business days; if two (2) months pass without it being completed, it will be considered withdrawn.
9. Cookies
We use technical cookies, needed for the website and the booking process to work; functional cookies, which remember your language and currency; analytics cookies, such as Google Analytics, to understand how the website is used; and advertising cookies from Google and Meta, to measure and show our ads. You can block or delete cookies in your browser settings; some features may stop working if you block technical cookies.
10. Security and retention
We apply reasonable technical, human and administrative measures to protect your data against loss, unauthorized access or misuse. We keep your data as long as needed for the purposes described and for the periods required by accounting and tax rules.
11. Effective date and changes
This policy is effective as of October 16, 2026. If we change it substantially, we will publish the new version on this page.
Prevention of the commercial sexual exploitation of children
Cartagena For Travelers S.A.S. rejects the commercial sexual exploitation of children and adolescents. In compliance with Colombian Laws 679 of 2001 and 1336 of 2009, we warn that the sexual exploitation and abuse of minors in Colombia are crimes punishable by prison. Any case can be reported to the ICBF line 141 or to the 123 emergency line.