Privacy policies

Last updated: August 15, 2026

At TodoPatagonia we respect your privacy and take the protection of your personal data seriously. This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what your rights are. This policy complies with the EU General Data Protection Regulation (Regulation 2016/679, “GDPR”), the UK GDPR, the Chilean Personal Data Protection Law (Law 19.628 and its update Law 21.719) and Brazil’s General Data Protection Law (LGPD).

1. Who we are (Data Controller)

• Legal name: TodoPatagonia SpA
• Tax ID (RUT): 77.883.008-6
• Address: Los Canelos 2661, Punta Arenas, Chile
• Email: hola@todopatagonia.net
• Phone: +56 9 5935 9049
• Website: https://todopatagonia.net
• SERNATUR Registration: 96274

For any data-protection enquiry, email us at hola@todopatagonia.net with the subject “Data protection”.

2. What personal data we collect

We only collect the data we need to deliver our services. Depending on the situation, this may include:

• Identification and contact data: first and last name, email, phone, country, language.
• Booking data: tour selected, date, number of passengers, dietary requirements, special needs, passport number when required by the operator.
• Payment data: payments are processed by secure gateways (PayPal, Stripe, etc.). We never store full credit-card numbers or CVV codes on our servers.
• User account data: username, hashed password, booking history (if you register or sign in via Google/Facebook).
• Browsing data: IP address, browser type and version, OS, pages visited, time spent, traffic source, cookie identifiers. Collected with your consent if you are an EU/EEA/UK visitor.
• Communication data: messages you send us via email, forms, WhatsApp or social networks.
• Conversations with our automated assistant: the content of what you write in the website chat or over WhatsApp, together with the booking details needed to answer you.

We do not collect special categories of data (health, religion, sexual orientation, etc.) unless you voluntarily provide them to ensure tour safety or accessibility (e.g. allergies, reduced mobility).

3. Why we use your data (purposes) and legal basis

4. Who we share your data with

We only share your data when necessary to deliver the service or when required by law. We never sell your personal data. The following may have access to your data:

• Local tour operators that run the tours you book (strictly the data needed: name, contact and, if required by the destination, passport number).
• Payment gateways: PayPal, Stripe, Webpay, MercadoPago.
• Technology providers: SiteGround (hosting in Europe/US), Google (Analytics, Ads, Workspace), Meta (Facebook, Instagram, WhatsApp Business), Tourmaster, WP Rocket.
• Artificial intelligence assistant: the conversations you hold with our automated assistant are processed through Google Gemini, which generates the replies. Google acts as a data processor and its servers are located outside Chile. The service is contracted under its paid tier, in which Google does not use these conversations to train its models or to improve its products. If you would rather not use the assistant, you can write to us directly at hola@todopatagonia.net or call +56 9 5935 9049.
• Email and messaging providers: SMTP/transactional services to send confirmations and notifications.
• Public authorities: SERNATUR, SII or others, when required by law or court order.

All our processors are bound by contracts requiring them to handle your data in accordance with applicable law.

5. International data transfers

Some of our providers have servers outside Chile or the EU (e.g. United States). When this happens, we ensure the transfer is carried out under:

• European Commission adequacy decisions, where applicable.
• Standard Contractual Clauses (SCC) approved by the European Commission.
• Certification programmes such as the EU-U.S. Data Privacy Framework for adhering US providers (Google, Meta, Stripe).

6. How long we keep your data

• Booking and billing data: up to 6 years after service completion (Chilean and European tax obligations).
• User account data: while the account is active. If you request deletion, within 30 days.
• Marketing and newsletter data: until you withdraw consent.
• Analytics and marketing cookies: between 30 days and 24 months, depending on the cookie. See detail below.
• Support data: 2 years from the last interaction.
• Conversations with the automated assistant: 12 months from the last message. They are deleted automatically afterwards.

7. Your rights

You have the following rights over your personal data, which you can exercise free of charge at any time:

• Access: obtain confirmation of whether we process your data and a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure (right to be forgotten): request deletion when no longer necessary or you withdraw consent.
• Restriction: restrict processing in certain cases.
• Objection: object to processing based on legitimate interest or direct marketing.
• Portability: receive your data in a structured, common format.
• Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.
• Not be subject to automated decisions with significant legal effects. We do not perform such automated profiling.
• Lodge a complaint with a supervisory authority:
  • EU: the supervisory authority of your country (list at edpb.europa.eu).
  • UK: the Information Commissioner’s Office (ico.org.uk).
  • Chile: Consejo para la Transparencia and, from 2026, the Data Protection Agency (Law 21.719).
  • Brazil: ANPD (gov.br/anpd).

To exercise your rights, email hola@todopatagonia.net stating the right you want to exercise and attaching a copy of your ID document. We will reply within 30 days.

8. Cookies and similar technologies

We use first- and third-party cookies for different purposes. If you are an EU/EEA/UK or Switzerland visitor, before loading non-essential cookies we display a banner where you can accept all, reject optional ones, or configure them individually. You can change your decision at any time by clicking the settings icon (cog) in the bottom-left corner of the site.

You can also manage cookies from your browser settings. Note that blocking necessary cookies may affect site functionality.

9. Security

We apply reasonable technical and organisational measures to protect your data: HTTPS encryption, hashed passwords, backups, access controls, staff training and periodic provider review. In the event of a security breach affecting personal data, we will notify the supervisory authority and the affected individuals as required by law.

10. Minors

Our services are aimed at people over 18. We do not knowingly collect personal data from minors without the express consent of parents or legal guardians. If you believe a minor has provided us with data without authorisation, contact us to delete it.

11. Changes to this policy

We may update this Privacy Policy to reflect legal or service changes. The date of the last update is shown at the top. If changes are substantial, we will notify you by email or through a prominent notice on the site.

12. Contact

For any questions about this Privacy Policy or how we handle your data:

• Email: hola@todopatagonia.net
• WhatsApp: +56 9 5935 9049
• Postal address: Los Canelos 2661, Punta Arenas, Chile