Privacy

Privacy Policy

Last updated · May 2026

Kantu Garden Lodge ("we", "us") operates kantugardenlodge.com (the "Site") and the property of the same name in Moyobamba, San Martín, Perú. This policy explains what personal information we collect, why we collect it, and what you can ask us to do with it. It applies to website visitors, prospective guests sending inquiries, and confirmed guests.

We follow Peruvian Law N° 29733 on Personal Data Protection ("Ley de Protección de Datos Personales") and its regulation, alongside applicable international standards (GDPR principles where relevant for European visitors).

1. What we collect

You give us, directly

• Inquiry information. When you write to us or use a form on the Site, we collect your name, email address, WhatsApp / phone number, travel dates, group size, dietary requirements, and the body of your message.
• Booking information. If you confirm a stay, we collect billing address, payment confirmation details (we do not store full card numbers), passport / ID number where required by Peruvian hospitality regulations, arrival method, and any preferences you share.
• Newsletter signups. Only your email address.

We collect automatically

• Usage data. IP address, browser type, pages viewed, referring page, and approximate location (city level). Used only to understand how the Site is used and to keep it secure.
• Cookies. A small set of first-party cookies for site preferences, plus analytics cookies (Google Analytics) for aggregated traffic statistics. No advertising cookies. You can disable cookies in your browser; the Site continues to work.

2. Why we collect it

• To answer your inquiry and prepare a quote.
• To confirm and manage your reservation (room assignment, dietary planning, arrival arrangements).
• To comply with Peruvian hospitality law (guest registration with SUNAT and Ministry of Tourism where applicable).
• To send you the occasional letter — retreat dates, seasonal menus, news from the garden — only if you've subscribed.
• To improve the Site and the way we host guests.

3. How long we keep it

• Inquiry messages: up to 24 months after the last contact, then deleted unless they've become bookings.
• Booking records: retained for 5 years for tax and accounting purposes, as required by Peruvian law.
• Newsletter list: until you unsubscribe (one click in any newsletter, or by email).
• Analytics data: aggregated and retained for up to 26 months.

4. Who we share it with

We don't sell personal information. We share only what is necessary, only with the parties below:

• Payment processors (Stripe and / or local Peruvian processors) for handling deposits and balances.
• The booking engine and channel managers we use to keep room availability synchronized (Booking.com, eventually other OTAs).
• Email infrastructure (Cloudflare Email Routing for forwarding, our newsletter provider).
• Peruvian tax authorities (SUNAT) and government bodies, where legally required.
• Our retreat partners, only when you've booked a retreat that they're co-hosting, and only what's necessary to host you well.

5. International transfers

Some of our service providers (analytics, email, payment processors) are based outside Peru. Where personal data crosses borders, it is transferred under appropriate safeguards: vendor agreements, standard contractual clauses, or adequacy decisions where applicable.

6. Your rights

Under Peruvian Law N° 29733 you have the right to:

• Access the personal information we hold about you.
• Correct it if it's inaccurate.
• Ask us to delete it (subject to legal retention obligations).
• Object to specific uses (e.g. newsletters — one-click unsubscribe).
• Withdraw consent you previously gave.
• Lodge a complaint with the Autoridad Nacional de Protección de Datos Personales (Peru) if you believe we've handled your data improperly.

To exercise any of these rights, write to info@kantugardenlodge.com. We respond within 20 business days.

7. Security

The Site is served over HTTPS with TLS encryption. Internal access to guest data is limited to staff who need it to do their work. Payment card data is never stored on our servers — it is processed directly by our payment partners under PCI-DSS standards.

8. Children

The Site and our inquiry forms are not directed to children under 13. Children under 4 stay free as part of a parent's reservation but we do not collect personal data about minors separately from the parent making the booking.

9. Photography and video

From time to time we photograph the lodge, the garden, the shala, retreats in progress, and the property in general. We do not photograph guests close-up without explicit permission. If you appear incidentally in a wide image (e.g. a yoga class, a group meal) and you'd prefer not to, write to us and we will remove the image from our archives.

10. Changes

If we update this policy, we will post the new version here and update the "last updated" date above. Material changes will also be sent to the newsletter list.

11. Contact

Kantu Garden Lodge — Jr. Edmundo del Águila S/N, Puerto de Tahuishco, Moyobamba, San Martín, Perú.
info@kantugardenlodge.com · +51 939 139 088