TOBY EXPEDITIONS – TOURISM AGENCY
Last updated: May 6, 2026
1. GENERAL INFORMATION
Toby Expeditions is a tourism agency located in Cusco, Peru, committed to the protection and responsible processing of the personal data of our clients, suppliers, and collaborators, in compliance with Law No. 29733 – Personal Data Protection Law of Peru and its current Regulations.
Contact details:
- Business Name: Toby Expeditions
- RUC: 10239769701
- Address: Urb. Santa Rosa, Pje. Chávez 316, Cusco, Peru
- Phone: +51 958 629 468
- Email: info@tobyexpeditions.com
- Activity: Tourism services and travel agency
2. PURPOSE OF DATA PROCESSING
We collect and process your personal data for the following purposes:
2.1 Main Purposes:
- Manage bookings and tourism services
- Provide information about tour packages and destinations
- Process payments and billing
- Provide assistance during your trip
- Coordinate services with tourism providers, such as hotels, transportation companies, guides, restaurants, and local operators
- Comply with legal, tax, administrative, and fiscal obligations
2.2 Secondary Purposes:
- Send promotions, special offers, and news about our services
- Improve our services through satisfaction surveys
- Send commercial and direct marketing communications, when applicable
- Perform statistical analysis to improve the customer experience
3. TYPES OF DATA COLLECTED
3.1 Identification Data:
- Full names and surnames
- Identity document or passport number
- Date of birth
- Nationality
3.2 Contact Data:
- Postal address
- Phone numbers
- Email addresses
- Social media accounts, when voluntarily provided
3.3 Service Data:
- Travel preferences
- Booking history
- Payment data, processed securely
- Medical information relevant to the trip, such as allergies or special conditions, when provided by the data subject
- Data of companions and beneficiaries
4. LEGAL BASIS FOR PROCESSING
The processing of your personal data is carried out in accordance with the bases permitted by current regulations, including:
- Express consent granted by the personal data subject
- Execution of the contractual relationship for the provision of requested tourism services
- Compliance with legal obligations in tax, administrative, fiscal, immigration, or other applicable matters
- Legitimate interest to improve our services, where applicable under current regulations
5. DATA RETENTION
Personal data will be retained for the time necessary to fulfill the purposes for which it was collected and in accordance with the periods required by applicable regulations:
- Contractual data: During the term of the business relationship and subsequently for the time necessary to comply with legal, tax, or administrative obligations
- Marketing data: Until the data subject withdraws consent or requests to stop receiving commercial communications
- Data of minors: Only processed with the express authorization of parents or legal guardians, when applicable
6. RIGHTS OF THE DATA SUBJECT
As a personal data subject, you have the right to exercise the rights recognized by Peruvian personal data protection regulations.
6.1 Right of Access:
- Know what personal data we have about you
- Request information about the processing of your personal data
6.2 Right of Rectification:
- Correct inaccurate or incomplete data
- Update outdated information
6.3 Right of Cancellation:
- Request the deletion of your personal data when applicable
- Withdraw the consent granted, without affecting the legality of the processing carried out previously
6.4 Right of Objection:
- Object to the processing of your data for marketing purposes
- Request the limitation of processing when applicable
7. EXERCISE OF RIGHTS
To exercise your rights, you may contact us through:
- Email: info@tobyexpeditions.com
- Subject: “Exercise of ARCO Rights”
Required information:
- Full names and surnames
- Copy of identity document
- Clear description of the right you wish to exercise
- Address or means of notification
Response period: Your request will be handled within the deadlines established by the current personal data protection regulations.
8. SECURITY MEASURES
We implement reasonable technical, legal, and organizational measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or improper processing.
8.1 Technical Measures:
- Encryption or protection of sensitive data when applicable
- Secure backup systems
- Access control through usernames and passwords
- Use of reasonable and updated information security tools
8.2 Organizational Measures:
- Staff training on personal data protection
- Confidentiality policies
- Periodic review of internal procedures
- Security incident response protocols
9. DATA TRANSFER
9.1 National Transfers:
Your personal data may be shared, when necessary, with:
- Tourism service providers, such as hotels, transportation companies, restaurants, guides, and local operators
- Financial entities or payment platforms for transaction processing
- Competent authorities when legally required
- Technology or administrative providers that support the provision of our services
9.2 International Transfers:
- They will only be carried out when necessary for the provision of the contracted tourism service or when consent from the data subject exists, as applicable
- Appropriate security measures and safeguards will be applied in accordance with current regulations
- They may involve tourism providers, booking platforms, hotels, operators, or services located outside Peru
10. COOKIES AND SIMILAR TECHNOLOGIES
Our website may use cookies and similar technologies to:
- Improve the browsing experience
- Analyze website traffic
- Personalize content, promotions, and offers
- Facilitate the inquiry, booking, or contact process
You may configure your browser to reject cookies, although this could affect some functionalities of the website.
11. MINORS
We do not intentionally collect data from minors without the corresponding authorization from their parents or legal guardians. For family or group tourism services, we may request data from minors only when necessary for the provision of the contracted service and in accordance with applicable regulations.
12. CHANGES TO THIS POLICY
This policy may be updated periodically to adapt to legal, operational, or commercial changes. Changes may be communicated through:
- Publication on our website
- Email to registered clients, when applicable
- Notification during the booking or contracting process
13. CONTACT AND INQUIRIES
For any inquiry regarding this policy or the processing of your personal data, you may contact us:
Toby Expeditions – Tourism Agency
- RUC: 10239769701
- Address: Urb. Santa Rosa, Pje. Chávez 316, Cusco, Peru
- Phone: +51 958 629 468
- Email: info@tobyexpeditions.com
- Business hours: Monday to Sunday from 8:00 AM to 8:00 PM
14. APPLICABLE LAW
This policy is governed by current Peruvian regulations on personal data protection, including:
- Law No. 29733 – Personal Data Protection Law
- Supreme Decree No. 016-2024-JUS – Regulation of Law No. 29733, Personal Data Protection Law
- Rules, directives, and criteria issued by the National Authority for Personal Data Protection, when applicable
Effective date: May 6, 2026
By using our services or providing your personal data, you accept this Personal Data Processing Policy of Toby Expeditions.