Official document · Data protection
This policy governs the collection and processing of personal data of users and customers of Cocoratours (hereinafter, "the Agency"), in accordance with Law 1581 of 2012, Decree 1377 of 2013 (Colombia) and, where applicable, the European Union General Data Protection Regulation (GDPR). By providing their data, the Data Subject declares that they understand and accept this policy.
The data controller is Cocoratours, located at Calle 2 # 6-09, Salento, Quindío (Colombia), email info@cocoratours.com.co. This policy applies to the website cocoratours.com.co and to the Agency's official customer service channels.
We process your data only under the following bases and for the following purposes:
| Data type | Purpose | Retention |
|---|---|---|
| Identification (name, ID document, contact) | Issuing insurance and confirming bookings | 5 years |
| Browsing (cookies) | Site operation and personalization | Up to 1 year |
| Comments / reviews | Social proof and service improvement | Indefinite (until deletion is requested) |
| Payment data (tokens) | Process transactions through an encrypted payment gateway | As determined by the payment provider |
Your data may be shared, strictly to provide the service, with affiliated providers: tour guides, transportation companies, lodging establishments, insurers and payment gateways. These third parties may not use the information for purposes other than the contracted service.
Law 1581 of 2012 As the Data Subject, you may at any time:
The Agency applies reasonable technical and administrative measures to protect data: SSL encryption, secure password storage and access controls. No system is infallible, so absolute security against unauthorized access cannot be guaranteed.
Law 679 of 2001 Use of our services by minors requires authorization from their parents or legal guardians. The Agency maintains a zero-tolerance policy toward the sexual exploitation and abuse of children and adolescents.
The site uses first-party and third-party cookies for its operation, analytics and personalization. Users can configure or delete cookies in their browser; disabling them may affect some site features.
To update, correct or delete your data or revoke your authorization, send a request to info@cocoratours.com.co with the subject line “Exercise of Rights — Habeas Data”, stating your name and your specific request, and attaching a copy of your ID to verify ownership. We will respond within the legal time frames.
This policy is effective upon publication and may be updated in accordance with current regulations; the applicable version will be the one published on the site. Substantial changes will be announced through our official channels.
English
