Privacy policy
Last updated: October 16, 2026
At Colombia Tierra Querida we respect your privacy. This policy explains what personal data we collect, what we use it for and how we protect it, in accordance with Colombian Law 1581 of 2012 and Decree 1377 of 2013. If you live in the European Union, you also have the rights granted by the General Data Protection Regulation (GDPR).
Data controller
[Company name], Tax ID (NIT) [number], located at [city and address], Colombia. Contact email: info@colombiatq.com.
What data we collect
- If you browse or get a quote without an account: we don't ask for personal data. We store the quote options (dates, destinations, interests, number of travelers and comments) without knowing who you are, to improve our packages.
- If you create an account: your name, email, phone or WhatsApp (if you give it), your preferred language and the date you accepted this policy.
- With your account: the quotes you make while signed in and the reviews you write.
- Photos: the profile photo you upload (optional) and the trip photos you add to a review (up to 3). They are shown next to your review only once we publish it, and you can remove your profile photo at any time from My account.
- If you buy a trip: the package, dates, number of travelers, amount, payment status, payment method and its reference. We never see or store your card details: Wompi or PayPal handle them directly.
- Technical data: a cookie needed to keep you signed in, with no advertising purpose, and the IP address of each request, which we use only to protect the site against abuse.
What we use it for
- Creating your account and letting you sign in with a link we email you.
- Answering your quotes, managing your bookings and contacting you about your trip.
- Publishing your reviews, with your first name, only after checking them.
- Protecting the site against bots and misuse.
- Meeting our legal, accounting and tax obligations.
We don't sell your data or use it for advertising. We will only send you marketing information if you separately authorize it.
Who we share it with
Only with the providers we need to deliver the service, who process the data on our behalf:
- Cloudflare: hosts the site and the database, and protects forms against bots.
- Resend: sends the site's emails (sign-in links and notices).
- Anthropic: the artificial intelligence that drafts the trip proposal. It only receives the trip details, never your name, email or phone.
- Wompi (Bancolombia) and PayPal: our payment gateways. They process your payment by card, PSE, Nequi or your PayPal account, depending on the method you choose.
- The hotels, guides and transport companies of your trip, only with the data needed for the booking.
Some of these providers store data on servers outside Colombia (for example, in the United States or the European Union). By accepting this policy you authorize that transfer, which we make with providers offering adequate levels of protection.
How long we keep it
- Your account, quotes and reviews: until you delete your account or ask us to delete them.
- Sign-in links expire after 30 minutes and sessions after 60 days.
- Your purchase records: for as long as Colombian commercial and tax law requires, even if you delete your account (in that case, without your name, email or phone).
Your rights
You can access, update, correct and request deletion of your data, and revoke your authorization. In My account you can change your details and delete your account at any time. You can also write to info@colombiatq.com: we answer inquiries within 10 business days and complaints within 15 business days. If you are not satisfied, you can contact Colombia's Superintendence of Industry and Commerce (SIC). If you live in the European Union, you can also request data portability, object to or restrict processing, and file a complaint with your country's data protection authority.
Minors
Accounts are only for people aged 18 or over. Data of minors traveling with their family is provided and authorized by the responsible adult, only for the booking.
Security
The site uses an encrypted connection (HTTPS). We don't use passwords: you sign in with a single-use link that expires in 30 minutes. Our database doesn't store the links or sessions themselves, only an encrypted fingerprint of them.
Changes to this policy
If we change this policy we will say so on the site and, if the change is significant, by email.
