Personal Data Processing Policy

1. Who is responsible for your data

The data controller is Mateo Bohórquez Rivera, identified with tax ID (NIT) 1110552713-1, who operates the establishment Agencia de Viajes La Perla del Norte and the Murillo 360 brand.

• Address: Calle 2A #4-61, Lt 3, Barrio 8 de Marzo, Murillo, Tolima
• Email: murillo360t@gmail.com
• WhatsApp: 3246888793
• National Tourism Registry (RNT): 216861

This policy is governed by Law 1581 of 2012, Decree 1074 of 2015 and all other Colombian regulations on personal data protection.

2. What data we collect

We only ask for what we need to look after you:

• When you book an experience: your name, email, WhatsApp number, travel date, number of people and any notes you send us (allergies, mobility, whether children are traveling).
• For the Murillo 360 VIP Card: your email, which is your identifier, and a record of the experiences you have completed.
• From your browsing: the pages you visit and the clicks you make on the site. These metrics are stored on our own server with your IP address anonymized: we discard the last block before saving it, so it cannot identify you. We also use Google Analytics, by Google LLC, to count visits in aggregate. That tool stores its own measurement cookies in your browser, which you can delete or block in your browser settings without the site ceasing to work.
• In the chat with Kuma: what you write is sent to Groq, Inc. (United States), the artificial intelligence provider that generates the reply, and comes back as text. We do not store what you write in the chat: we only record that a conversation took place, without its content. Kuma only knows this site’s public catalog — it has no access to your bookings, your passport or anyone’s data — and cannot change anything. Even so, do not share personal, health or payment details in the chat: that is what WhatsApp is for, where a real person will help you.

We do not ask for or store card or bank account details: the site does not take payments online. Payment is agreed and made directly with us.

3. What we use it for

• Contacting you to confirm availability, date and price for your plan.
• Providing the experience you booked and meeting the requirements of the medical assistance insurance.
• Managing your Murillo 360 VIP Card and applying the benefits you earn.
• Answering your questions, complaints and requests.
• Meeting our legal, accounting and tax obligations.
• Only if you authorize it by checking the corresponding box: sending news, new routes and promotions to your email.

We do not sell, rent or hand over your data to third parties for commercial purposes. We only share it with those who help us provide the service — guides, accommodation, insurer — and only what is essential for your booking, or when a competent authority requires it.

Transfers outside Colombia. Three of the tools we use operate abroad: email, hosted by Google LLC, through which confirmations and passport codes are sent; Google Analytics, also by Google LLC, which measures visits to the site; and Groq, Inc., which processes the messages in the Kuma chat. All three are in the United States. They act as data processors — they work on our instructions and may not use your data for their own purposes — and by accepting this policy you authorize that transfer under Article 26 of Law 1581 of 2012. No other data of yours leaves our server.

4. Your authorization

By sending us your plan, you authorize us to process your data to manage that booking. Receiving commercial messages is optional and separate: we only send them if you checked the box, and you can withdraw your consent at any time without affecting your booking or your passport.

Every email we send you will include a link to unsubscribe.

5. Your rights

As the data subject, the law grants you the right to:

• Know, update and correct your data.
• Request proof of the authorization you gave us.
• Be informed of how we have used it.
• Revoke your authorization and ask us to delete your data, unless a legal or contractual duty requires us to keep it.
• Access your data free of charge.
• File complaints with the Superintendencia de Industria y Comercio (SIC), Colombia’s data protection authority.

6. How to exercise them

Write to us at murillo360t@gmail.com from the email address you booked with, telling us what you need. You can also message us on WhatsApp at 3246888793.

• Inquiries: we reply within a maximum of ten (10) business days.
• Complaints: we reply within a maximum of fifteen (15) business days, counted from the day after we receive them.

If we need more time, we will let you know before the deadline expires, explaining why and giving you the new date.

7. How long we keep it

We keep your data for as long as our relationship with you lasts and, after that, for as long as legal, accounting and tax obligations require. The stamps on your Murillo 360 VIP Card are kept for as long as the program is running, or until you ask us to delete them.

8. Security

We store your data on our own server, with an encrypted connection, passwords protected with hash functions and access restricted to authorized staff. No measure is infallible, but we apply reasonable ones to prevent unauthorized access to, loss of or alteration of your information.

9. Children and adolescents

We do not collect data directly from minors. When a minor travels with their family, their data is provided by the responsible adult, who declares that they are authorized to do so, and it is used only to provide the service and keep them safe.

10. Changes to this policy

We may update this policy. If the change is substantial, we will let you know through the contact details you have given us before it takes effect.