Data Processing Policy
of Personal Data

1. Who is responsible for your data

The data controller is Mateo Bohórquez Rivera, identified with NIT 1110552713-1, which operates the establishment Agencia de Viajes La Perla del Norte and the brand Murillo 360.

• Address: Calle 2A #4-61, Lt 3, Barrio 8 de Marzo, Murillo, Tolima
• Email: murillo360t@gmail.com
• WhatsApp: 3004425982
• National Tourism Registry: 82582

This policy is governed by Law 1581 of 2012, the Decree 1074 of 2015 and other Colombian regulations on personal data protection.

2. What data we collect

We only ask for what we need to serve you:

• When booking an experience: your name, your email, your WhatsApp number, the date of the trip, how many people are going and the notes you write for us (allergies, mobility, if children are traveling).
• For the Tarjeta VIP Murillo 360: your email, which is your identifier, and the record of the experiences you have completed.
• From your browsing: the pages you visit and the clicks within the site. These metrics are stored on our own server, no third-party cookies and with your anonymized IP address: we discard the last block before saving, so it cannot identify you.
• In the chat with Kuma: what you write is sent to Groq, Inc. (United States), the AI provider that generates the response, and returns as text. We do not keep what you write in the chat: we only note that a conversation occurred, without its content. Kuma only knows the public catalog of this site — it has no access to your reservations, passport or anyone’s data — and cannot modify anything. Even so, do not write personal, health or payment data in the chat: for that WhatsApp is available, where a person assists you.

We do not request or store card or bank account data: the site does not charge online. Payment is agreed and made directly with us.

3. How we use them

• Contact you to confirm availability, date and price of your plan.
• Provide the contracted experience and comply with medical assistance insurance.
• Keeping your Tarjeta VIP Murillo 360 and applying the benefits you earn.
• Handle your questions, complaints, and requests.
• Fulfill legal, accounting and tax obligations.
• Only if you authorize by checking the corresponding box: send you news, new routes and promotions to your email.

We do not sell, lease or transfer your data to third parties for commercial purposes. We only share it with those who help us provide the service — guides, accommodation, insurer — and only with what is essential for your reservation, or when a competent authority requires it.

Transfers outside Colombia. Two of the tools we use operate outside: the email, hosted by Google LLC, from which confirmations and passport codes are sent, and Groq, Inc., which processes the chat messages from Kuma. Both are in the United States. They act as data processors — they work following our instructions and cannot use your data for their own purposes— and by accepting this policy you authorize that transfer under the terms of Article 26 of Law 1581 of 2012. No other data of yours leaves our server.

4. Your authorization

By sending us your plan you authorize us to process your data to manage that reservation. Sending commercial communications is optional and separate: only we do it if you checked the box, and you can withdraw it whenever you want without that affecting your reservation or your passport.

Each email we send you will include a link to unsubscribe.

5. Your rights

As the data subject, the law recognizes your right to:

• Access, update, and correct your data.
• Request proof of the authorization you gave us.
• Be informed about how we have used it.
• Revoke the authorization and request that we delete it, when there is no legal or contractual duty that obliges us to keep it.
• Access your data for free.
• File complaints with the Superintendency of Industry and Commerce.

6. How to exercise them

Message us at murillo360t@gmail.com desde el correo con el que reservaste, indicando qué necesitas. También puedes escribirnos por WhatsApp al 3004425982.

• Inquiries: we respond within ten (10) business days.
• Complaints: we respond within fifteen (15) business days, counted from the day after receipt.

If we need more time, we will inform you before the deadline expires, explaining the reasons and the new date.

7. How long we keep them

We keep your data for as long as our relationship with you lasts and, afterwards, for as long as legal, accounting and tax obligations require. The stamps on your Tarjeta VIP Murillo 360 are kept while the program is running, or until you ask us to delete them.

8. Safety

We store your data on our own server, with encrypted connection, passwords protected by hash functions, and access restricted to authorized staff. No measure is foolproof, but we apply reasonable ones to prevent unauthorized access, loss, or alteration of your information.

9. Children and adolescents

We do not collect data from minors directly. When a minor travels with their family, the adult responsible provides the data, declares authorized to do so, and it is used only for service provision and their safety.

10. Changes to this policy

We may update this policy. When the change is substantial we will inform you through the contact methods you have provided, before it takes effect.