Privacy Policy

1. What this policy covers

This policy explains what personal data Galápagos & Beyond collects through this website, why we collect it, and the choices you have. It applies to visitors browsing the site and to guests making a booking or inquiry.

2. Information we collect

• Booking and inquiry details — name, email, phone number, number of travelers, and trip preferences you submit through a booking or contact form.
• Payment information — processed directly by Stripe and PayPal. We receive confirmation that payment succeeded, not your full card number.
• Usage data — pages visited and general device/browser information, collected automatically to keep the site working and secure.
• Cookies — see our Cookie Policy for details on what we use and how to control them.

3. How we use your information

• To process and confirm cruise, tour, and stay bookings
• To respond to inquiries and quote requests
• To send booking confirmations and trip-related communication
• To improve the site and our services
• To meet legal, tax, and accounting obligations

4. Who we share it with

We share the minimum information necessary with: payment processors (Stripe, PayPal) to complete transactions; the cruise, tour, or accommodation operator you book with, so they can honor your reservation; and infrastructure providers (hosting, content management, email delivery) who process data on our behalf under their own security commitments. We do not sell your personal data.

5. Data retention

We keep booking records for as long as needed to handle payment disputes, accounting, and legal requirements — typically several years after your trip. Inquiry data with no resulting booking is kept only as long as reasonably useful for follow-up.

6. Your rights

Depending on where you live, you may have the right to access, correct, or request deletion of your personal data, or to object to certain processing. To exercise any of these rights, contact us through ourcontact page and we will respond within a reasonable time.

7. Security

We use industry-standard safeguards to protect your information, including encrypted connections (HTTPS) and payment processing handled entirely by PCI-compliant providers. No online system is 100% secure, but we take reasonable steps to protect your data.

8. Children's privacy

This site is not directed at children, and we do not knowingly collect personal data from children beyond what a parent or guardian submits when booking a family trip.

9. Changes to this policy

We may update this policy as the site and our services evolve. Material changes will be reflected by updating the date at the top of this page.

10. Contact

For any privacy question or request, reach us via ourcontact page.