Privacy policy

• Legal name: [PENDING]
• RUC: [PENDING]
• Address: Cuzco, Peru
• Contact: privacidad@apu.pe

This document describes how we collect, use, protect, and share personal data of users of our website and our clients, in accordance with Law 29733 and its regulations.

2.1 Data you provide

• First and last names.
• Passport or ID number.
• Email address.
• Phone or WhatsApp number.
• Country of origin.
• Payment data (processed by the gateway; we do not store full card numbers).
• Service details: date, time, hotel, flight or train, passengers, preferences.

2.2 Data we collect automatically

• IP address, browser, operating system, device.
• Pages visited, time spent, source of traffic.
• Cookies and similar technologies. See Cookies policy.

We use your data to:

1. Process and confirm your booking.
2. Assign you a driver and vehicle.
3. Send you voucher, reminders, and driver details.
4. Handle inquiries and complaints.
5. Issue electronic payment receipts.
6. Comply with legal and tax obligations.
7. Improve our service and the website experience.
8. Send commercial communications only if you expressly authorized them.

• Your express consent when accepting this policy.
• Performance of the transport contract you enter into when booking.
• Compliance with tax, accounting, and consumer protection obligations.

• Booking and billing data: 10 years, in accordance with tax regulations.
• User account data: until you request deletion.
• Marketing data: until you withdraw your consent.

We share your data only with:

• Payment gateways: Culqi, Stripe, PayPal to process payment.
• Technology providers: Supabase, Resend, Vercel. They act as processors and handle data only under our instructions.
• Competent authorities when legally required.

Some providers store data outside Peru. We ensure they apply security measures equivalent to those required by Peruvian law.

You may exercise at any time:

• Access: know what data we have about you.
• Rectification: correct inaccurate data.
• Cancellation: delete your data when it is no longer necessary.
• Objection: object to a specific processing.
• Information: know purposes and recipients.
• Revocation: withdraw your consent.

Write to privacidad@apu.pe attaching a copy of your ID. We respond within 20 business days.

If you believe we did not properly handle your request, you may contact Peru's National Authority for the Protection of Personal Data (ANPDP) at the Ministry of Justice and Human Rights.

We apply reasonable technical and organizational measures: encryption in transit (HTTPS), access controls, backups, and internal policies. No system is completely invulnerable.

We do not process data of children under 14 without express authorization from their parents or guardians.

We may update this policy. The current version will always be published with the last updated date. If changes are substantial, we will notify you by email.

For any privacy inquiry: privacidad@apu.pe.