Privacy Policy

1. Who is responsible for your data

[Company legal name], [registered address], is the data controller for personal data collected through matchlatin.com. Contact our privacy team at [privacy email].

2. What we collect

• Account data: name, email, date of birth, password (stored encrypted) and, if you provide it, phone number and profile photo.
• Tour application: your answers to our questionnaire, including preferences, travel availability, marital status and a self-declaration about criminal convictions.
• Messages: the content of messages you send and receive, and their translations.
• Bookings and payments: the tours you book, amounts paid and payment status. Card details are handled by our payment provider; we do not store full card numbers.
• Usage data: pages visited, device and browser information, and, with your consent, analytics cookies (see our Cookie Policy).
• Referral data: if you arrived through an affiliate link, the identifier of that affiliate.

3. Why we use it

• To create and run your account and deliver messages (contract).
• To assess tour applications, keep participants safe and prevent fraud (legitimate interest; legal obligation where applicable).
• To process bookings and payments and contact you about your tour (contract).
• To send service emails such as activation and booking confirmations (contract).
• To improve the site with analytics (consent).
• To pay commissions to affiliate partners (legitimate interest). Affiliates only see your first name and the tour booked.

4. Who we share it with

We share data only with service providers who help us run MatchLatin: hosting, email delivery, payment processing, Google (Analytics, Translate API, Google Meet for sales calls), and our local tour team in Colombia. We do not sell your personal data. Some providers are located outside your country; where required, we use appropriate safeguards such as Standard Contractual Clauses.

5. How long we keep it

We keep account data while your account is active and for [period] after closure. Booking and payment records are kept for as long as tax and accounting law requires. [Legal team: confirm retention periods.]

6. Your rights

Depending on where you live (including under the GDPR and US state laws such as the CCPA), you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent at any time. To exercise these rights, email [privacy email]. You can also complain to your local data protection authority.

7. Security

We use encryption in transit, encrypted password storage and access controls that limit staff access to what each role needs.

8. Changes

We will post any changes on this page and notify you by email of significant ones.