Protection of personal data policy

PRIVACY POLICY

Participants will experience an exciting adventure doing rappelling on the natural rock walls of Pillco Mozo, Huánuco. They will start with a brief safety and equipment orientation, followed by a hike to the descent area. Guided by professional instructors, they will practice basic rappelling techniques and perform one or two controlled descents. During the activity, they will enjoy panoramic views of the Huánuco valley and the surrounding nature. Finally, they will return to the starting point, sharing moments of teamwork and personal achievement.

Participants will experience an exciting adventure doing rappelling on the natural rock walls of Pillco Mozo, Huánuco. They will start with a brief safety and equipment orientation, followed by a hike to the descent area. Guided by professional instructors, they will practice basic rappelling techniques and perform one or two controlled descents. During the activity, they will enjoy panoramic views of the Huánuco valley and the surrounding nature. Finally, they will return to the starting point, sharing moments of teamwork and personal achievement.

High Expeditions, hereinafter “the Company,” recognizes the importance of ensuring the protection and proper handling of the personal data entrusted to us by our clients, users, and visitors. In compliance with current Peruvian regulations and our institutional standards of integrity and security, we present the following Privacy Policy.

1. APPLICABLE LEGAL FRAMEWORK

The processing of personal data carried out by High Expeditions is governed by:

• Law No. 29733 – Personal Data Protection Law

• Supreme Decree No. 003-2013-JUS – Regulations of Law No. 29733

• Standards and directives issued by the National Authority for Personal Data Protection (ANPD)

In accordance with these provisions, the Company applies the principles of legality, consent, purpose, proportionality, quality, security, and confidentiality in all processes involving personal data.

2. PURPOSE OF PERSONAL DATA PROCESSING

Personal data provided by the data subject will be used exclusively for the following purposes:

a) Managing reservations, expeditions, tourist services, and activities operated by High Expeditions.
b) Contacting the user to coordinate logistical, administrative, informational, or operational aspects of the contracted service.
c) Complying with legal, accounting, tax, and administrative obligations.
d) Processing payments, issuing receipts, and validating information required for service contracting.
e) Ensuring the user’s safety throughout the expedition or trip.
f) Carrying out essential procedures with third parties involved in the service (operators, hotels, transportation, permits, etc.).
g) Optimizing website navigation through cookies and analytical tools.

Under no circumstances will we use personal data for purposes different or incompatible with those described above without obtaining prior consent.

3. CATEGORIES OF PERSONAL DATA COLLECTED

Depending on the service contracted and interaction process, High Expeditions may collect the following categories of data:

a) Identification and contact data

• Full name

• Phone number

• Nationality

• Email address

b) Data required for service execution

• Passport information

• Passport expiration date

• Photograph or image associated with official documents

• Emergency contact information

4. METHODS OF DATA COLLECTION

Personal data may be collected through:

• Electronic forms on the official website

• WhatsApp Business communications

• Corporate email

• Messaging platforms

• On-site or virtual registration during the booking process

• Automated reservation systems on the website

All data are provided voluntarily by the data subject.

5. SECURITY AND CONFIDENTIALITY MEASURES

High Expeditions adopts technical, organizational, and legal measures to preserve the integrity, availability, and confidentiality of personal data, including:

• Secure transmission of information through encrypted protocols (HTTPS/SSL)

• Restricted access granted only to authorized personnel

• Storage in systems protected against unauthorized access

• Data retention only for the time necessary to fulfill its purpose

• Internal procedures for incident prevention, management, and access control

The Company continuously strives to ensure that data are not compromised through misuse, loss, manipulation, or unauthorized access.

6. TRANSFER AND DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

High Expeditions does not sell, transfer, or disclose personal data for advertising or unauthorized purposes.

Data may only be shared with third parties under the following circumstances:

a) When essential for providing the contracted service (accommodations, transportation, permits, authorities, insurance, etc.)
b) When the data subject provides explicit consent
c) When required by law or by a competent authority

In all cases, the Company ensures that such third parties assume equivalent obligations of security and confidentiality.

7. RIGHTS OF THE DATA SUBJECT

At any time, the data subject may exercise the rights recognized by Peruvian law:

• Access: Know which data High Expeditions holds

• Rectification: Correct or update inaccurate information

• Deletion: Request removal of data when applicable

• Objection: Refuse processing for non-essential purposes

• Revocation: Withdraw previously granted consent

To exercise these rights, the data subject may contact the Company through its official communication channels.

8. VALIDITY AND UPDATES OF THE POLICY

High Expeditions may update this Privacy Policy to adapt it to regulatory, technological, or institutional changes.

Any modification will be published through the same medium where this Policy is available and will take effect from the date of publication.

Attentively, team high expeditions