Privacy policy
Privacy and Personal Data Protection Policy
Last updated: September 2026
At Climb Sunday, we respect the privacy of our website visitors, travelers, customers, and users of our digital services.
This Privacy and Personal Data Protection Policy explains how CLIMB SUNDAY E.I.R.L. collects, uses, stores, shares, and protects personal data obtained through climbsunday.com, our booking process, contact forms, WhatsApp communications, payment services, Virtual Complaints Book, and other digital channels associated with our tourism services.
Personal data is processed in accordance with Peruvian Law No. 29733, Personal Data Protection Law, its Regulation approved by Supreme Decree No. 016-2024-JUS, and other applicable regulations issued by the Peruvian Personal Data Protection Authority (Autoridad Nacional de Protección de Datos Personales – ANPD). Peruvian regulations require users to be informed, among other matters, about the purposes of processing, recipients, data storage, transfers, retention periods, and mechanisms for exercising their rights.
1. Data Controller
The entity responsible for processing personal data collected through this website and Climb Sunday’s official digital channels is:
Legal Name: CLIMB SUNDAY E.I.R.L.
Brand: Climb Sunday
RUC: 20616287053
Address: Sector Pinchec S/N, Carretera Cusco–Pisac Km 23, Taray, Calca, Cusco, Peru
Website: https://climbsunday.com/
Email: contacto@climbsunday.com
2. Scope of This Policy
This Policy applies to personal data collected through climbsunday.com and the digital channels used by Climb Sunday to provide information, respond to travel inquiries, manage bookings, process tourism services, communicate with travelers, process complaints, and operate and improve the website.
It applies, as relevant, to prospective travelers, customers, passengers, website users, and individuals who contact Climb Sunday through its official channels.
3. Personal Data We Collect
The personal data collected depends on how you interact with Climb Sunday.
When you contact us, request a travel plan, or complete a website form, we may collect your full name, email address, telephone number, and the information you voluntarily provide about your trip or request.
When you initiate or complete a booking, we may process information such as your name, email address, telephone number, country or region, billing information, selected tour or service, preferred travel date, booking or order number, amounts paid, discounts, payment status, cancellation or refund status, and other information necessary to manage your booking.
Depending on the tourism service contracted, additional information may be required to issue entrance tickets, transportation tickets, accommodation reservations, permits, or other services provided by third parties. Where such information is required, only data reasonably necessary to coordinate the contracted service will be requested.
Our website and booking systems may also automatically generate technical information such as IP address, date and time, browser and device information, source page, traffic source, session information, and technical identifiers related to forms, bookings, or website use.
Information submitted through the Virtual Complaints Book may include identification, contact, booking, service, and complaint-related information required to process and respond to the corresponding claim or complaint.
4. Mandatory and Optional Information
Fields identified as required in our forms or booking process are necessary to respond to your request, process your booking, provide the contracted tourism service, or comply with applicable legal obligations.
If required information is not provided, Climb Sunday may be unable to process the request, confirm the booking, issue tickets or reservations, or provide the requested service.
Optional fields may be left blank unless the information later becomes necessary for a particular service requested by the traveler.
5. Purposes of Processing
Climb Sunday may process personal data in order to respond to inquiries and requests for information; provide information about tours and travel services; prepare travel recommendations, quotations, or itineraries; verify availability; process and manage bookings; coordinate contracted tourism services; process orders and payments; issue booking confirmations and operational communications; coordinate entrance tickets, transportation, accommodation, guides, or other providers involved in the itinerary; manage changes, cancellations, travel credits, or refunds; provide customer service; process complaints and claims; comply with legal, tax, accounting, consumer-protection, and tourism-related obligations; maintain website security; prevent spam, fraud, and misuse; and analyze website use and performance.
Personal data will not be used for purposes that are incompatible with those communicated to the user unless Climb Sunday provides the corresponding information and obtains consent where required by applicable law.
6. Legal Basis and Consent
Where required by Peruvian personal data protection law, Climb Sunday will process personal data with the prior, informed, free, express, and unequivocal consent of the data subject.
Certain processing may also be carried out when it is necessary to respond to a request made by the user, manage or perform a contractual relationship, comply with a legal obligation, or where another exception expressly permitted by applicable legislation applies.
The publication of this Privacy Policy does not replace the requirement to obtain consent where consent is legally required. Peruvian regulations expressly distinguish the duty to provide privacy information from the obligation to obtain valid consent.
7. Contact and Travel Planning Forms
When you submit a contact or travel-planning form through climbsunday.com, Climb Sunday may process the information entered in the form as well as technical information associated with the submission.
This information is used to review your request, contact you, answer questions, provide information about our services, prepare travel proposals where applicable, and maintain an operational record of the communication.
Form submissions may be stored within the website’s systems and may also be transmitted to Climb Sunday’s corporate email infrastructure for customer-service purposes.
8. Bookings and Tourism Services
When you make or initiate a booking, Climb Sunday processes the information necessary to identify the traveler, manage the reservation, confirm availability, coordinate the selected tour, and communicate information related to the service.
Where necessary for the contracted itinerary, certain personal data may be communicated to tourism suppliers such as hotels, transportation companies, railway companies, local operators, guides, entrance-ticket providers, or other suppliers involved in providing the requested service.
Only information reasonably necessary to coordinate or provide the corresponding tourism service will be communicated.
9. Payment Processing
Climb Sunday currently uses Mercado Pago as an external payment-processing provider for online transactions.
When the traveler proceeds with an online payment, the transaction is processed through the environment provided by Mercado Pago.
Climb Sunday does not request or directly store full payment-card numbers, CVV security codes, or online banking passwords through its own checkout fields.
Climb Sunday may receive information necessary to associate the payment with the corresponding booking, such as transaction status, payment confirmation, transaction reference, amount, and other information required to manage the order.
Personal and financial information entered directly into Mercado Pago’s environment is processed by Mercado Pago in accordance with its own privacy and security policies.
10. WhatsApp Communications
Climb Sunday provides WhatsApp as an optional communication channel, including for checking tour availability before completing certain online bookings.
When a user contacts Climb Sunday through WhatsApp, we may process the telephone number, messages, profile information made available through the platform, and any information or documents voluntarily submitted during the conversation.
This information will be used to answer inquiries, check availability, assist with bookings, coordinate services, and provide customer support.
Communications made through WhatsApp are also subject to the privacy practices and terms of WhatsApp and Meta.
Travelers should not send full card numbers, CVV codes, online banking passwords, or similar financial credentials through WhatsApp.
11. Virtual Complaints Book
Climb Sunday provides a Virtual Complaints Book at:
Complaints book
Personal data submitted through this mechanism will be used to register, review, process, respond to, and maintain evidence of complaints and claims submitted by consumers.
Such information may also be provided to INDECOPI or another competent authority where required by law or through a valid official request.
12. Service Providers and Recipients
To operate its website and digital services, Climb Sunday may use external technology and service providers.
The services currently identified include Webempresa for website and email infrastructure; Google for services such as Google Analytics and Google reCAPTCHA; Mercado Pago for payment processing; WhatsApp/Meta for communications initiated through WhatsApp; and GTranslate for website translation and language functionality.
Personal data may also be communicated to tourism suppliers where necessary to provide a service requested or contracted by the traveler, including accommodation providers, railway companies, transportation companies, local operators, guides, ticket providers, and other suppliers involved in the itinerary.
Climb Sunday may additionally disclose information to administrative, judicial, tax, tourism, consumer-protection, or other competent authorities where required by applicable law.
Climb Sunday does not sell users’ personal data to third parties.
13. International Processing and Data Transfers
Some technology platforms and service providers used by Climb Sunday operate internationally and may process or store information through infrastructure located outside Peru.
Where a national or international transfer of personal data takes place, Climb Sunday will process such information in accordance with applicable Peruvian personal data protection requirements and will adopt the measures required for the corresponding transfer.
The applicable Peruvian regulation requires international and national data transfers to be included in the information provided to data subjects where they occur.
14. Cookies and Similar Technologies
Climbsunday.com uses cookies and similar technologies to support the operation, functionality, security, and analysis of the website.
The website currently uses Google Analytics to obtain statistical information about website use, including information related to traffic, pages visited, devices, and user interactions.
Google reCAPTCHA may be used to protect website forms against spam, automated submissions, and abuse.
GTranslate is used to provide translation and language-related functionality.
Certain cookies are necessary for the operation of the website, while others may support functionality, preferences, or analytics.
Users may control or delete cookies through their browser settings. Disabling certain cookies may affect the functionality or performance of parts of the website.
Climb Sunday may update its cookie-management mechanisms as its website and technologies evolve.
15. Personal Data Banks and Storage
Personal data collected through Climb Sunday’s digital channels may be incorporated into databases and personal data banks under the responsibility of CLIMB SUNDAY E.I.R.L., according to the nature and purpose of the information collected.
These may include information associated with prospective travelers and inquiries, customers and bookings, and complaints or claims, as applicable.
Climb Sunday will manage such databases in accordance with the registration, security, updating, and other obligations established under applicable Peruvian personal data protection law.
16. Data Retention
Personal data will be retained only for as long as reasonably necessary to fulfill the purposes for which it was collected and, where applicable, for the additional period required to comply with legal, contractual, tax, accounting, tourism, consumer-protection, or dispute-management obligations.
Information relating to bookings and transactions may be retained for the periods necessary to demonstrate the contractual relationship and comply with applicable legal obligations.
Information relating to complaints and claims will be retained for the period required under applicable consumer-protection regulations.
Information related solely to an inquiry may be deleted or anonymized when it is no longer necessary for customer service, follow-up, legal compliance, or the defense of possible claims.
Backup copies may temporarily retain information until they are securely overwritten or deleted in accordance with the applicable backup cycle.
17. Sensitive Personal Data
Climb Sunday does not request users to provide sensitive personal data through general contact or travel-planning forms unless such information is reasonably necessary for a specific service.
Where information concerning health, accessibility requirements, or another sensitive circumstance is necessary to properly coordinate a tourism service, Climb Sunday will process it only to the extent necessary and in accordance with the specific consent and safeguards required by applicable law.
Users should avoid including sensitive or unnecessary personal information in open message fields.
18. Personal Data of Minors
Tourism services may involve travelers who are minors.
Where information about a minor is necessary to manage a booking, issue a ticket, arrange transportation, accommodation, or provide another tourism service, such information should be provided by the minor’s parent, guardian, or duly authorized representative, as applicable.
Climb Sunday does not intend to use its general website forms to knowingly collect personal data directly from children for advertising or unrelated commercial purposes.
19. Marketing Communications
Personal data collected to respond to an inquiry, manage a booking, process a payment, or provide a tourism service will not automatically be used for unrelated advertising purposes.
Where Climb Sunday offers newsletters, promotional messages, travel offers, or other direct marketing communications requiring consent, the corresponding authorization will be requested separately where required by law.
Users may withdraw their consent to optional marketing communications or request that such communications cease through the unsubscribe mechanism provided, where available, or by contacting Climb Sunday.
20. Automated Decisions
Climb Sunday does not currently use its website to make decisions that produce significant legal or similar effects on travelers based solely on automated processing of personal data.
Automated systems may be used for operational purposes such as payment status, booking records, website analytics, spam prevention, or transaction management.
21. Data Security and Confidentiality
Climb Sunday adopts reasonable technical, organizational, and legal measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, destruction, or improper processing.
These measures may include secure website communications, access controls, authentication mechanisms, software maintenance, backups, security tools, and restrictions on access to personal data.
Personnel and service providers who require access to personal data must process such information only for authorized purposes and subject to the confidentiality and security obligations that apply to them.
No internet-based system can guarantee absolute security. However, Climb Sunday will maintain safeguards appropriate to the nature of the personal data and the processing performed.
22. Your Personal Data Rights
Under Peruvian personal data protection law, data subjects may exercise their rights of Access, Rectification, Cancellation, and Opposition (ARCO), as well as other rights recognized by applicable law.
These rights allow individuals, as applicable, to know what personal data is being processed and how it is being used; request correction or updating of inaccurate or incomplete information; request cancellation when the legal requirements are met; and object to certain processing activities.
The Peruvian Personal Data Protection Authority recognizes these as the ARCO rights available to individuals in relation to the processing of their personal data.
23. How to Exercise Your Rights
To exercise your personal data rights, you may submit a request to:
CLIMB SUNDAY E.I.R.L.
Email: contacto@climbsunday.com
Address: Sector Pinchec S/N, Carretera Cusco–Pisac Km 23, Taray, Calca, Cusco, Peru
The request should allow Climb Sunday to reasonably identify the applicant, indicate the right being exercised, and clearly describe the request.
Additional documentation may be requested when reasonably necessary to verify the identity of the data subject or authorized representative.
Climb Sunday will process requests within the time limits established by applicable Peruvian law.
If the request is not answered within the applicable legal period or the data subject disagrees with the response, the individual may pursue the corresponding procedure before the Autoridad Nacional de Protección de Datos Personales (ANPD). The ANPD confirms that individuals must first request exercise of their ARCO rights from the responsible organization before seeking review by the Authority.
24. Third-Party Websites and Services
Climbsunday.com may contain links to or integrations with third-party websites, platforms, payment services, social networks, maps, videos, transportation providers, or other external services.
When a user leaves the Climb Sunday website or interacts directly with a third-party environment, that third party may process personal data in accordance with its own privacy policy and terms.
Climb Sunday recommends reviewing the privacy information provided by the relevant third party before submitting personal information.
25. Changes to This Privacy Policy
Climb Sunday may update this Privacy and Personal Data Protection Policy when its services, technology, suppliers, data-processing activities, or applicable legal requirements change.
The current version will remain available at:
Privacy policy
The date of the most recent update will be displayed at the beginning of this Policy.
Where a change involves a new processing purpose that requires consent under applicable law, Climb Sunday will apply the corresponding consent requirements before carrying out that processing.
26. Contact
For questions about this Privacy and Personal Data Protection Policy, the processing of your personal data, or the exercise of your data-protection rights, please contact:
CLIMB SUNDAY E.I.R.L.
RUC: 20616287053
Email: contacto@climbsunday.com
Address: Sector Pinchec S/N, Carretera Cusco–Pisac Km 23, Taray, Calca, Cusco, Peru
Website: https://climbsunday.com/