Privacy Policy

Last updated: September 24, 2026

KOA Expeditions respects the privacy of travelers and website visitors.

This Privacy Policy explains what personal information we may collect, why we use it, how it may be shared, and the choices available to you.

KOA Expeditions operates from Cusco, Peru.

Privacy contact: koaexpeditions@gmail.com

1. INFORMATION WE MAY COLLECT

Depending on how you interact with KOA Expeditions, we may collect information such as:

• name
• email address
• telephone or WhatsApp number
• country
• nationality
• travel dates
• number of travelers
• travel interests
• destinations
• accommodation preferences
• trip preferences
• accessibility or dietary information voluntarily provided
• messages and enquiry content
• information required to arrange confirmed travel services

Where necessary for confirmed services, additional traveler information may be requested separately.

2. PLAN MY TRIP

The Plan My Trip experience may allow users to save travel selections in their browser.

Local browser storage used for planning preferences is intended for travel planning functionality and should not be used to store sensitive personal information.

Personal information is collected only when the traveler chooses to submit an enquiry or otherwise communicates it to KOA Expeditions.

3. WHY WE USE PERSONAL INFORMATION

Information may be used to:

• respond to enquiries
• design requested itineraries
• prepare quotations
• communicate with travelers
• arrange confirmed services
• coordinate with relevant travel suppliers
• provide customer support
• protect website security
• prevent abuse or fraud
• improve website usability
• understand website performance where analytics consent has been provided
• comply with applicable legal obligations

4. BASIS FOR PROCESSING

Depending on the interaction, personal information may be processed because:

– you have requested information or travel planning services – processing is necessary to take steps requested by you – it is necessary to provide confirmed travel services – you have provided consent where consent is required – processing is necessary for legitimate operational or security purposes to the extent permitted by applicable law – KOA Expeditions must comply with an applicable legal obligation

5. SERVICE PROVIDERS

Where necessary to provide a requested or confirmed service, relevant information may be shared with appropriate service providers, which may include:

• accommodation providers
• transportation providers
• guides or local operators
• train or flight providers
• attractions or ticketing systems
• other suppliers included in the confirmed itinerary

Only information reasonably required for the relevant service should be shared.

6. WEBSITE AND TECHNOLOGY PROVIDERS

KOA Expeditions may use technology providers for functions such as:

• website hosting
• email
• security
• spam and abuse prevention
• analytics
• website performance
• consent management

These providers may process technical or personal information according to their role and applicable contractual or privacy requirements.

7. ANALYTICS

KOA Expeditions intends to use Google Analytics 4 to understand website performance and usage.

Analytics should activate only according to the visitor's consent preferences where consent is required.

Analytics information is not intended to include sensitive information submitted inside enquiry forms.

8. BEHAVIORAL ANALYTICS

KOA Expeditions may use Hotjar to understand how visitors interact with website pages and interfaces.

Hotjar should activate only according to the visitor's applicable consent choice.

Sensitive form information should not intentionally be recorded for behavioral analytics.

9. SECURITY

KOA Expeditions uses reasonable technical and organizational measures intended to protect website and traveler information.

These may include access controls, security plugins, encrypted connections, hosting protections, anti-abuse measures and Cloudflare security technologies.

No online system can guarantee absolute security.

10. INTERNATIONAL SERVICE PROVIDERS

Some technology or travel suppliers may operate or process information outside Peru.

Where such providers are used, information should be limited to what is reasonably necessary for the relevant purpose and handled according to applicable data-protection requirements.

11. DATA RETENTION

Personal information is retained only for as long as reasonably necessary for:

• handling an enquiry
• providing requested travel services
• maintaining appropriate booking records
• resolving disputes or customer-service matters
• complying with applicable obligations
• legitimate security and operational needs

Retention periods may differ depending on the type of information and service.

12. YOUR DATA-PROTECTION RIGHTS

Subject to applicable Peruvian data-protection law, individuals may have rights regarding their personal information, including rights to request access, correction, cancellation or opposition, as applicable.

Where processing relies on consent, consent may also be withdrawn subject to applicable legal and operational requirements.

Requests may be sent to:

koaexpeditions@gmail.com

We may need to verify the identity of the requester before acting on a request.

13. CHILDREN AND MINORS

Travel information relating to minors should be supplied by a parent, guardian or responsible adult where required for travel planning or confirmed services.

The website is not intended to invite children to independently submit sensitive personal information.

14. COOKIES

Information about cookies and similar technologies is available at:

/cookie-policy

15. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated when KOA's services, technology or applicable requirements change.

The version displayed on the website is the current applicable version.

16. CONTACT

KOA Expeditions Cusco, Peru koaexpeditions@gmail.com