Privacy Policy
Last updated: November 5, 2026
This policy explains what data we process when you book on machupicchu.world or use the Machupicchu World app, what for, and who we share it with. We never sell your data.
1. Who we are
machupicchu.world and the Machupicchu World app are operated by Health Care Provider S.A.C., RUC 20604159165, with its registered address at Av. Javier Prado 2965, San Borja, Lima, Peru, and its team in Cusco. On Google Play you may also see us under the developer name Lainds.
We are responsible for the data you give us in order to book. The Ministry of Culture and the operators process, on their own account, the data they receive to issue their tickets and services, in accordance with their own policies.
2. What this policy covers
It applies to the site, the app, My Tour, the planner, Private Journeys, payment links, the contact form, availability alerts and the Complaints Book. It expands on the “Your data” section of our Terms and Conditions.
3. What data we process
| Service | Data |
|---|---|
| Tickets and 2-Day Tour | The buyer: name, email, phone and ID document. Each traveler: full name, passport or ID document number, date of birth, gender and nationality. For the tour, also the pickup hotel. |
| Train, bus, transfers and tours | The traveler data that the operator needs, the service chosen, the dates and the times. |
| Tickets | The documents issued by the Ministry and the operators, with your name and ID document. |
| Payments | Amount, status and reference of the transaction. Your card or account details are processed by Izipay or PayPal. |
| Contact and Private Journeys | Name, email, phone if you provide it, and whatever you write to us. |
| Availability alert | Your email, and the ticket and month you are interested in. |
| Complaints Book (Libro de Reclamaciones) | Name, ID document, address, phone, email, details of the complaint and, if you are a minor, those of your father, mother or guardian. |
| Use of the site | Pages viewed, booking steps, device and origin of the visit, through Google Analytics and Meta Pixel. |
4. What we use it for
| Purpose | Why we may do it |
|---|---|
| Buying and delivering your tickets and services | It is necessary to fulfill what you contracted. |
| Collecting payment and preventing fraud | It is necessary for the contract and to protect customers and the company. |
| Sending you messages about your booking and assisting you | It is necessary to provide the service. |
| Invoicing, complaints and legal obligations | The law requires it. |
| Measuring and improving the site and our advertising | Our interest in improving the service and, where the law requires it, your consent. |
| Asking you for a review after the trip | Our interest in improving the service. You can ask us not to do so. |
5. The app
- Camera: it is only used if you decide to scan a passport, and always with your permission. The image is read on your phone and does not reach us; we only receive the text that you confirm in the form. You can also type the data in by hand.
- Tickets on your phone: they are saved when you open “Your tickets”, so that they work without signal. They are excluded from backups and are deleted 7 days after the trip or if the booking stops being valid.
- Plans and bookings: they are saved on your phone. The saved index does not contain your signed link.
- Notifications: if you allow them, we store a device identifier linked to your booking, to send you trip notifications. We delete it when access to your booking ends.
- The app has no ads and does not use Meta Pixel or Google Analytics in its screens. Payment pages open in the system browser and follow this policy.
6. My Tour and the links
Each traveler has a personal, signed link to their My Tour and their tickets. The person who booked sees those of the group; a companion sees only their own. The address with only the booking code shows the itinerary, without tickets. We record when an invitation is opened, so that the person who booked knows whether their companion has seen it. Access closes 7 days after the trip.
Anyone who opens your link can see your tickets: do not share it.
7. Payments
Izipay and PayPal process payments on their own systems. We do not receive or store your full card number. We only keep the result and the reference of each transaction. If a payment is declined, we may send you an email to help you try again.
9. Data outside Peru
Some providers operate in other countries, so your data may be processed outside Peru. We only share it with those who need it for the purposes of this policy.
11. Emails and messages
We write to you about your booking, pending payments, tickets and trip notifications, and after your visit we may ask you for a review. If you write to us on WhatsApp, that conversation is also governed by WhatsApp's terms.
12. How long we keep it
| Data | Period |
|---|---|
| Bookings and payments | The time necessary to provide the service and comply with our legal and tax obligations. |
| Access to My Tour | Up to 7 days after the trip. |
| Tickets in the app | Up to 7 days after the trip. |
| Identifier for notifications | Until access to your booking ends, or earlier if the notification service rejects it. |
| Availability alert | Until the alert is sent or until that month has passed. |
| Complaints Book | The period required by law. |
13. Your rights
You can ask us to access, correct or delete your data, or to object to its use, by writing to team@machupicchu.world. You do not need an account or to install anything. We will keep what the law obliges us to keep, and tickets already issued cannot be modified. We will reply to you within the legal deadlines.
If you are not satisfied, you can file a complaint with the National Authority for the Protection of Personal Data of Peru (ANPD). If you are in the European Union or the United Kingdom, you can also go to your local authority.
14. Minors
Minors travel on a booking made by an adult, who gives us their data so that we can issue their tickets. The site and the app are not directed at minors on their own.
15. Security
Data travels encrypted. Personal links are signed and tickets are only delivered with that proof. No system is infallible: if we detect an incident that affects you, we will notify you as the law requires.
16. Changes to this policy
We may update this policy. The date above indicates the latest version.
17. Contact
WhatsApp +51 924 184 566 · team@machupicchu.world · Health Care Provider S.A.C., RUC 20604159165.