Privacy policy | Latidos Tours Medellín

1. Who is responsible

Latidos Tours Medellín, a private tour operator based in Medellín, Antioquia, Colombia. For anything about your data, message us on WhatsApp at +57 314 361 5483.

2. What data we collect

Your trip request: name, WhatsApp number, tour, date and number of people, plus the language and the page you write from. If you arrive from a Google ad, also the ID of that click and the short code explained in the cookies section. We log the IP address the request comes from, to stop automated submissions.
Your permission to message you on WhatsApp: if you tick the box on the form, we record that you ticked it, the date and the text you agreed to.
The messages you send us on WhatsApp.
What you write to Helbert, our virtual guide: it is sent to Anthropic, the provider of the AI model that writes the answers. We do not keep those conversations. Please do not share sensitive data with Helbert.
Browsing data: pages you visit, WhatsApp clicks, browser, device type and referring page, for our own measurement, and the Google cookies explained below.

3. What we use it for

Answering your request, putting your plan together and running the tour.
If you tick the WhatsApp box, sending you an automatic reply about your request there (the tour, the date and the price). If you do not tick it, your request still reaches us and we handle it without that automatic message.
Knowing how many people visit the site and which ads bring in requests and bookings.

We do not sell or rent your data, and we do not use it to send you third-party advertising.

4. Who we share it with

Only with the providers we need: the hosting for the site and database (Hostinger, with servers in the United States, so your data is stored there); WhatsApp (Meta), when you message us there or when we send you the automatic reply to your request, in which case Meta acts as our data processor and handles those messages on our behalf; Google, to measure our ads; Anthropic, for Helbert's answers; and the email service that notifies us of each request. And with the authorities, when the law requires it.

5. Cookies and measurement

We use Google Ads to know whether a visit came from one of our ads and whether it ended in a request or a WhatsApp message. For this, Google sets cookies on this domain (_gcl_au and _gcl_aw, which last up to 90 days) and on its own domains (for example, IDE on doubleclick.net). Google may also use them to personalize ads. Our own measurement stores a visit ID in your browser (latidos_session_id) to count visits and clicks.

If you are in the European Economic Area, the United Kingdom or Switzerland, Google's cookies and that ID stay off until you accept them in the notice we show you. If you reject them, Google only receives cookieless signals that a visit or a conversion happened. You can change your choice at any time with the "Cookie preferences" link in the footer. Everywhere else they are set when you arrive, and you can block or delete them in your browser settings.

Separately, we store your cookie choice in your own browser for six months.

If you arrive from an ad or a campaign link, or if you message us on WhatsApp from the site, we store a first-party cookie, lat_clic, for 90 days. It holds the ad click ID (if there is one), the campaign and a short code, for example K7M2P. That code is added to the end of the WhatsApp message the site opens, as "(ref: K7M2P)"; you can delete it before sending if you prefer. It tells us which ad brought you and, if you book a tour, lets us report to Google Ads that the ad led to a sale, with the tour's value. We only send Google the click ID, the date and the value: never your name or phone number. That click record deletes itself after 180 days if it did not lead to a booking. In the European Economic Area, the United Kingdom and Switzerland, none of this is stored unless you accepted cookies, and rejecting them deletes the cookie.

6. How long we keep it

The data in your request, for as long as we need to answer it and run the tour. You can ask us to delete it at any time.

7. Your rights

You can access, update and correct your data, ask us to delete it and withdraw your consent, under Colombia's Law 1581 of 2012. If you live in the European Union, you also have the rights of the General Data Protection Regulation —access, rectification, erasure, restriction, objection and portability— and you can complain to the data protection authority in your country. To exercise them, message us on WhatsApp at +57 314 361 5483.

8. Changes

If we change this policy, we will publish the new version here with its date.