Version 1.0 · Effective September 23, 2026

Privacy Policy and Personal Data Processing

This policy explains how Huemul en Ruta handles the personal data of people who visit this site, contact us or book a program, under Chilean Law No. 19.628 on personal data protection, as amended by Law No. 21.719.

1. Who is responsible

• Company: Huemul en Ruta SpA
• Chilean tax ID (RUT): 78.301.384-3
• Address: Villa Cerro Castillo, Río Ibáñez, Aysén Region, Chile
• Email for data requests: huemulenruta@gmail.com (subject "Personal data")
• WhatsApp: +56 9 9886 1612

We have no designated data protection officer: requests are handled directly by the company's management.

2. What data we process and where it comes from

All data comes directly from you. We do not buy databases or collect data from publicly available sources.

• Quote forms: name, email, WhatsApp, group size, estimated dates, city of origin, nationality or country, add-on services and any message you write.
• WhatsApp, email and Instagram: whatever information you send us through those channels.
• Confirmed booking: the registration form and, for your safety on the trail, a medical form. Health data is sensitive data: we only process it with your express consent, given on that form.
• Payments: made by bank transfer, Mercado Pago or PayPal. We never receive or store card data; we only keep the receipt.
• Browsing: IP address and technical data logged by the site's server and font service; and, only if you accept, Google Ads cookies.

3. Why we use it and on what legal basis

• Answering your questions and sending quotes — your consent, given on the form, and pre-booking steps you request.
• Managing your booking, payments and logistics (transport, guides, porters) — performance of the contract.
• Keeping you safe during the activity (medical form) — your express consent.
• Issuing tax documents and meeting other legal duties — legal obligation.
• Measuring which ads lead to requests (Google Ads) — your consent, given in the cookie notice.

We never sell your data, and we won't send you marketing without asking for separate permission first.

4. Who we share it with

Only with those who help us provide the service, and only what is needed:

• Formspree (form delivery), Google (Gmail and Google Ads), Vercel (site hosting) and Meta (WhatsApp and Instagram).
• Mercado Pago, PayPal and the receiving bank, to process payments.
• The team members who run your departure (guides, porters and transport).
• Authorities, when there is a legal obligation to provide it.

5. International transfers

Formspree, Google, Vercel, Meta and PayPal store data outside Chile, mainly in the United States, a country that may not have a level of protection declared adequate by the Chilean authority. These transfers take place only as needed to handle your request or booking, with providers that offer contractual data protection terms and their own security measures.

6. How long we keep it

• Inquiries that don't become bookings: up to 12 months after the last contact.
• Booking data and receipts: for the duration of the business relationship and then for the period required by tax law.
• Medical form: deleted no later than 30 days after the program ends, unless it must be kept because of an incident during the activity.
• Your cookie choice: stored in your browser until you change or delete it.

7. How we protect your data

• The whole site runs over an encrypted connection (HTTPS).
• Access to your data is limited to the Huemul en Ruta team members who need it to handle your request.
• We work with established providers that apply their own security measures.
• If a security breach affects your data, we will notify the Chilean Personal Data Protection Agency and, where applicable, you.

8. Your rights

You can request access, rectification, erasure, objection, portability and temporary blocking of your data. Email huemulenruta@gmail.com with the subject "Personal data", stating your name, what you are requesting and how to reach you. We may ask you to verify your identity.

• We reply within 30 calendar days, extendable once by another 30. Temporary blocking requests are answered within 2 business days.
• Exercising your rights is free of charge.
• You can withdraw your consent at any time, by the same email or, for cookies, via "Cookie settings" at the bottom of every page. Withdrawal does not affect processing carried out before it.
• If we reject your request or don't reply on time, you can file a complaint with the Chilean Personal Data Protection Agency (Agencia de Protección de Datos Personales).

9. Automated decisions

We do not make automated decisions or build profiles from your data. Every request is reviewed by a person on our team.

10. Cookies

• Necessary (always on): store in your browser whether you accepted or declined cookies.
• Advertising (Google Ads), only if you accept: let us know whether a visit that came from an ad ended in a request (e.g. the _gcl_au cookie). If you decline, Google Ads is not loaded on the site.

You can change your choice at any time: Cookie settings.

11. Changes to this policy

If we change it, we will publish the new version with its date and number. If the purposes change in a relevant way, we will ask for your consent again.

This English version is provided for convenience; the Spanish version prevails.