Privacy Policy

1. Introduction

Tayrona ("we", "our", "us") is a business consulting practice based at Calle 22 #3-45, Santa Marta, Magdalena, Colombia. We provide advisory services to hospitality and tourism operators, and we are committed to handling personal information with care and transparency.

This Privacy Policy describes how we collect, use, store, and protect personal data when you visit our website at tayrona.blog or contact us to enquire about or use our services. It also explains your rights in relation to that data.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal information:

• Contact information: name, email address, phone number — provided when you submit our contact form or reach out directly.
• Business information: details about your property or operation that you share during an engagement, including operational records, financial summaries, and team information.
• Website usage data: pages visited, time on site, browser type, and approximate location — collected via analytics cookies if you consent.
• Communications: the content of emails or messages exchanged with us.

We do not collect sensitive personal data (health, ethnicity, political views, etc.) and do not require it for any of our services.

3. Legal Basis for Processing

We process personal data on the following legal grounds, consistent with Colombia's Law 1581 of 2012 (Habeas Data) and its regulatory decrees:

• Consent: when you submit our contact form or accept analytics cookies, you consent to the relevant processing.
• Contractual necessity: when we engage with you as a client, processing your contact and business information is necessary to deliver the agreed service.
• Legitimate interest: we may retain engagement records for a reasonable period to manage our practice effectively, provided this does not override your rights.

4. How We Use Your Data

We use personal information to:

• Respond to enquiries and schedule initial conversations.
• Deliver the consulting services agreed in writing (Guest Experience Read, Season Companion, or Operations Study).
• Prepare written deliverables specific to your business.
• Send service-related communications, including delivery of summaries and follow-up materials.
• Improve our website based on aggregated, anonymised usage data.

We do not use your data for advertising, and we do not sell it to any third party.

5. Data Retention

We retain contact information for up to 24 months from your last interaction with us. Client engagement records (summaries, notes, and correspondence) are retained for up to 5 years for professional reference purposes. You may request earlier deletion at any time (see Section 9).

Analytics data collected via cookies is retained for the period set by the third-party provider (typically 26 months for Google Analytics). You may opt out at any time via our Cookie Policy page.

6. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

• Service providers: we use Google Analytics (if you consent) to understand website usage. Google processes this data under their own privacy policy. We do not share client engagement data with Google or any other platform.
• Legal obligation: if required by Colombian law or a competent authority, we may disclose information to comply with that requirement.

Client business information shared during an engagement is never disclosed to other clients, competitors, or the public.

7. Data Protection Measures

We take reasonable technical and organisational steps to protect personal information:

• Our website uses HTTPS encryption for data in transit.
• Digital files containing client information are stored in access-controlled, password-protected environments.
• Physical documents are stored securely at our Santa Marta office with restricted access.
• Only members of the Tayrona team directly involved in an engagement can access its associated records.
• In the unlikely event of a data breach that affects your rights or interests, we will notify you promptly and take appropriate remedial action.

8. Cookies

Our website uses cookies to manage your session and, with your consent, to collect anonymised analytics data. We do not use advertising or tracking cookies. For a full description of the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under Colombian Law 1581 of 2012, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete information.
• Erasure: request that we delete your personal data, subject to any legal retention obligations.
• Objection: object to processing based on legitimate interest.
• Portability: receive your data in a structured, commonly used format.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 15 business days.

If you believe your rights have not been respected, you may lodge a complaint with the Superintendencia de Industria y Comercio (SIC), Colombia's data protection authority, at www.sic.gov.co.

10. Third-Party Links

Our website may occasionally reference external resources. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies independently before sharing personal information with them.

11. Children's Privacy

Our services are intended for business operators and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided personal information to us, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website after any changes constitutes your acceptance of the updated policy.

13. Contact for Privacy Matters

For any questions about this policy or requests related to your personal data:

• Email: [email protected]
• Post: Tayrona, Calle 22 #3-45, Santa Marta, Magdalena, Colombia
• Phone: +57 605 421 6839