Privacy Policy

TripZoneFly, operated by Multiservicios Kada EIRL (Jr. Arica 280, Miraflores, Lima, Peru), is the data controller for personal data collected through tripzonefly.com. Contact: legal@tripzonefly.com

From travelers:

• Contact details when submitting an inquiry or booking: name, email, phone number.
• Payment data processed securely by Izipay (we do not store card numbers).
• Nationality and passport number (required for certain products, e.g. Machu Picchu entry tickets).
• Booking history and preferences (for registered users).
• Anonymous usage data: pages visited, search queries (no personal identification).
• Wishlist items (stored locally in your browser — not sent to our servers).

From agencies:

• Business name, RUC (Peruvian tax ID), registered address.
• MINCETUR license number and expiry date.
• Contact person name, corporate email, phone.
• Bank account details for payout settlements.
• Published content (packages, photos, itineraries).

• Process bookings and inquiries: connecting travelers with the relevant agency.
• Send confirmations and vouchers: booking confirmation, voucher, updates by email and WhatsApp.
• Payments: processing transactions and issuing receipts via Izipay.
• Customer support: resolving disputes and complaints.
• Platform improvements: analyzing usage patterns to improve search and recommendations.
• Legal compliance: fulfilling obligations under Peruvian law.
• Re-engagement (with consent): reminders about saved wishlist items or incomplete bookings.

We share your data only in the following cases:

• With the agency: your name, email, phone, and booking details are shared with the agency you book with, so they can provide the service.
• With Izipay: payment data for transaction processing. Izipay's privacy policy applies to card data.
• With Twilio/WhatsApp: your phone number for booking notifications and confirmations.
• With Mapbox: anonymized location for map display.
• Legal obligation: when required by law (e.g. tax authorities).

We do not sell or share your data with third parties for advertising purposes.

• Booking data: 5 years (tax and legal compliance).
• Inquiry data (no booking completed): 2 years from last interaction.
• Agency accounts: for the duration of the relationship plus 2 years after closure.
• Marketing communications: until you unsubscribe.

You may request early deletion — see Section 7 below.

We use essential cookies for session management and your wishlist is stored locally in your browser (localStorage) — it is never sent to our servers. For full details, see our Cookie Policy.

Under Ley N.° 29733 (Peru's Personal Data Protection Law), you have the right to:

You may also lodge a complaint with Peru's Directorate General for Personal Data Protection (MINJUS).

All data transmissions are protected by TLS/HTTPS encryption. Card payments are processed by Izipay using PCI-DSS compliant infrastructure — TripZoneFly never stores card numbers. We maintain server-side security logs and restrict access to personal data to authorized personnel only.

Material changes will be communicated via email to registered users 30 days in advance. The current version is always available at this URL.