Privacy and Data Processing Policy

Your privacy is sacred to us. At Bioturismo Colombia® we are committed to protecting your personal information with the same dedication we put into caring for the territories we visit. This policy transparently explains how we handle your data, in accordance with Colombian law and the principles of confidentiality, security, and trust that guide our work.

Data Controller

Bioturismo Colombia®, with tax identification number 901470980-7, with registered address at Km 6.7 Vereda Tres Esquinas, Cañón del Combeima, Ibagué, Tolima, is responsible for processing your personal data. You can contact us at any time via email at Email or by phone at +573115082816.

We are committed to managing your information with total transparency, always respecting your dignity and fundamental rights.


Personal Data We Collect

We collect only the information necessary to provide you with exceptional biotourism experiences and maintain effective communication with you:

Identification and contact data:

  • Full name
  • Identity document (type and number)
  • Email address
  • Phone number
  • Postal address
  • Country of residence

Travel-related data:

  • Biotourism experience preferences
  • Relevant dietary or medical restrictions
  • Fitness level
  • Specific interests in biodiversity or cultures
  • Travel history with us
  • Photos taken during experiences (with your express consent)

Transaction data:

  • Billing information
  • Payment history
  • Payment method used (without storing complete card details)

Web browsing data:

  • IP address
  • Browser type
  • Pages visited on our site
  • Time spent on pages
  • Cookies and similar technologies

We do not collect sensitive data (ethnic origin, political, religious or philosophical beliefs, health, or sexual life) unless strictly necessary to ensure your safety during experiences, and only with your explicit and informed consent.


Purposes of Data Processing

We use your personal information for the following legitimate purposes:

1. Provision of tourism services:

  • Design and operate biotourism experiences tailored to your interests
  • Coordinate logistics for transportation, accommodation, and meals
  • Manage bookings and confirmations
  • Ensure your safety during activities
  • Facilitate respectful interactions with local communities

2. Communication and support:

  • Respond to your inquiries and requests
  • Send information regarding your booking
  • Notify you of important itinerary changes
  • Provide assistance during and after your trip
  • Request feedback on experiences

3. Continuous improvement:

  • Evaluate the quality of our services
  • Develop new biotourism experiences
  • Personalize future recommendations
  • Measure our regenerative impact

4. Marketing and promotion (with your consent):

  • Send newsletters about conscious biotourism
  • Inform you about new experiences and destinations
  • Share educational content on biodiversity and cultures
  • Invite you to events and special activities

5. Legal and contractual compliance:

  • Fulfill tax and accounting obligations
  • Respond to requests from competent authorities
  • Manage legal proceedings if necessary
  • Prevent fraud and ensure safety

6. Photographic documentation (with specific consent):

  • Document experiences for promotional purposes
  • Create educational content on regenerative tourism
  • Publish testimonials and success stories

Legal Basis for Processing

We process your personal data based on:

Informed consent: When you register on our website, request information, or contract our services, you grant us your free, prior, express, and informed consent for the processing of your data for the purposes described.

Contractual performance: Processing is necessary to execute the tourism services agreement we have with you.

Legal obligation: Certain data must be processed to comply with tax, accounting, and regulatory obligations in the Colombian tourism sector.

Legitimate interest: We process data to improve our services, prevent fraud, and ensure the security of our operations—always respecting your fundamental rights.


Use of Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience:

Essential cookies: Required for the basic functioning of the site (session management, security).

Analytical cookies: Help us understand how you interact with our site to improve it (Google Analytics with anonymized IPs).

Personalization cookies: Remember your preferences for future visits.

Marketing cookies (optional): With your consent, they allow us to display relevant content on social media and other sites.

You can manage or reject cookies at any time from your browser settings. Note that disabling essential cookies may affect site functionality.


Sharing Information with Third Parties

We value your trust and only share your information when absolutely necessary:

Local partners and communities: We share basic data (name, dietary preferences, relevant medical restrictions) with host communities, local guides, and logistics operators to ensure your safety and an authentic experience.

Service providers: We use third-party providers for payment processing, email delivery, web hosting, and data analytics. All are contractually required to protect your information.

Competent authorities: When legally required, we will share information with government, judicial, or administrative entities.

Corporate transfers: In case of a merger, acquisition, or asset sale, your information may be transferred under the same protection conditions.

We never sell or rent your personal data to third parties for commercial purposes.


International Data Transfers

Some of our technology service providers (hosting, email marketing, analytics) may be located outside Colombia, including in the United States and the European Union.

When we transfer data internationally, we ensure that:

  • The recipient country provides adequate data protection levels
  • Standard contractual clauses are in place
  • Additional security measures are implemented
  • You are clearly informed about such transfers

We always prioritize providers with international privacy and data protection certifications.


Security of Your Information

We implement robust technical, administrative, and physical measures to protect your data:

Technical measures:

  • SSL/TLS encryption for all data transmissions
  • Secure servers with firewalls and malware protection
  • Restricted access via multi-factor authentication
  • Regular, encrypted backups
  • Continuous security monitoring

Administrative measures:

  • Strict internal information management policies
  • Ongoing team training on privacy
  • Confidentiality agreements with employees and collaborators
  • Periodic risk assessments

Physical measures:

  • Controlled access to offices and physical files
  • Secure document destruction
  • Safe storage of printed information

Despite our efforts, no system is 100% secure. We recommend safeguarding your credentials and notifying us immediately of any suspicious activity.


Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described:

Active client data: During the business relationship and up to 5 years after your last interaction, to handle potential claims and comply with legal obligations.

Accounting and tax data: 10 years, as required by the DIAN and Colombian commercial regulations.

Marketing data: Until you withdraw your consent or request deletion.

Cookies and browsing data: According to each cookie’s specified period (typically between 1 month and 2 years).

Once retention periods expire, we securely delete or irreversibly anonymize your data unless the law requires additional conservation.


Your Data Protection Rights

Colombian law (Law 1581 of 2012 and Decree 1377 of 2013) grants you fundamental rights regarding your personal data:

Right of access: Know what data we hold about you, how we use it, and with whom we share it.
Right to update: Request correction of inaccurate, incomplete, or outdated data.
Right to rectification: Modify information you consider erroneous.
Right to erasure: Request deletion of your data when unnecessary, unlawfully processed, or upon withdrawal of consent.
Right to revocation: Withdraw your consent at any time without retroactive effects.
Right to object: Object to data processing on legitimate grounds.
Right not to be subject to automated decisions: Request human intervention in decisions that significantly affect you.
Right to data portability: Receive your data in a structured format and transfer it to another controller.

To exercise any of these rights, you can:

  • Send an email to Email
  • Call +573115082816
  • Write to our physical address mentioning the right you wish to exercise: Km 6.7 Vereda Tres Esquinas, Cañón del Combeima, Ibagué, Tolima

We will respond within 15 business days of your request, as required by Colombian law.


Data of Minors

Our services are intended for individuals aged 18 and older. We do not knowingly collect data from minors without the express consent of their parents or legal guardians.

If a minor participates in our experiences:

  • We require written authorization from parents or legal representatives
  • We request only data necessary for safety
  • We implement additional protection measures
  • We ensure processing is in the child’s best interest

If you discover we have collected a minor’s data without proper authorization, please contact us immediately for deletion.


Changes to This Policy

Regenerative tourism and technology are constantly evolving. We reserve the right to update this Privacy Policy when necessary to:

  • Reflect changes in our data processing practices
  • Comply with new regulations or legal requirements
  • Improve transparency and clarity
  • Incorporate new services or features

When we make substantial changes, we will notify you via:

  • Email to your registered address
  • Prominent notice on our website
  • Direct message if you are in the booking process

We recommend reviewing this policy periodically. The date of the last update will always be visible at the top of the document.


Complaints and Supervisory Authority

If you believe we have violated your privacy rights or have concerns about our data processing, we invite you to contact us first to resolve the matter directly and constructively.

If you are not satisfied with our response, you have the right to file a complaint with the Superintendence of Industry and Commerce (SIC), Colombia’s data protection authority:

Superintendence of Industry and Commerce

  • Address: Carrera 13 No. 27-00, Bogotá D.C.
  • Toll-free line: 01 8000 910165
  • Website: www.sic.gov.co
  • Data Protection Delegation

Our Regenerative Commitment to Your Privacy

At Bioturismo Colombia®, we understand that privacy is a fundamental right that transcends legality. Just as we commit to leaving positive footprints in the territories we visit, we commit to handling your personal information with the utmost respect and care.

We believe transparency is a core value of conscious tourism. Therefore, this policy is not mere words—it is a living pact we renew with you every day.

Our promise:

  • We will never share your information for commercial purposes unrelated to our mission
  • We will proactively inform you of any situation affecting your privacy
  • We will maintain the highest security standards
  • We will respond to your inquiries warmly and promptly
  • We will treat your data as we would want ours to be treated

Your trust is our most valuable asset. We honor it every day through actions, not just words.


Contact and Inquiries

For any questions, concerns, or to exercise your data protection rights:

Data Protection Officer:

  • Email: Email
  • Phone: +573115082816
  • Service hours: Monday to Friday, 8:00 AM – 6:00 PM (Colombian time)

We are committed to responding to all inquiries within the legally established timeframes (maximum 15 business days), though our goal is to assist you much sooner.

We are here to listen and protect your privacy with the same dedication we apply to caring for Colombia’s biodiversity and cultures.


Last updated: 2025-10-07
Version: 1.0


This Privacy Policy has been drafted in compliance with Law 1581 of 2012, Decree 1377 of 2013, and other applicable regulations on personal data protection in Colombia.