Privacy Policy
Last updated: January 2026
1. Introduction
At Zarpar.com.co ("we", "our", or "Zarpar"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, phone number, password
- Booking Information: Travel dates, number of guests, special requests
- Payment Information: Processed securely through Mercado Pago and Wompi (we do not store complete credit card numbers)
- Billing Information: ID number, tax ID (NIT), company name (if applicable)
- Passenger Information: Full names and ID numbers of all passengers
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the platform
- Device Information: IP address, browser type, operating system, device identifiers
- Cookies: We use cookies to enhance your experience (see Cookie Policy below)
3. How We Use Your Information
We use your information for the following purposes:
- Processing Bookings: To complete your reservations and send confirmations
- Customer Service: To respond to your inquiries and provide support
- Payment Processing: To facilitate secure payment transactions
- Communication: To send booking confirmations, reminders, and important updates
- Marketing: To send promotional offers (with your consent, which you can withdraw at any time)
- Legal Compliance: To comply with Colombian laws and regulations
- Platform Improvement: To analyze usage patterns and improve our services
4. Sharing Your Information
We may share your information with:
- Service Providers: Hotels, boat operators, and tour providers need your booking information to deliver their services
- Payment Processors: Mercado Pago and Wompi process payments on our behalf
- Accounting Software: Siigo for invoicing and accounting purposes
- Mailing Providers: To send transactional and promotional emails
- Legal Authorities: When required by Colombian law or to protect our rights
We do NOT sell your personal information to third parties for marketing purposes.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- SSL/TLS encryption for data transmission
- Secure payment processing through PCI-DSS compliant providers
- Regular security audits and monitoring
- Access controls and authentication requirements
- Employee training on data protection
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Booking records are typically retained for 5 years for tax and accounting purposes.
7. Your Rights
Under Colombian data protection law (Ley 1581 de 2012), you have the following rights:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Objection: Object to processing of your data for marketing purposes
- Portability: Receive your data in a structured format
- Withdrawal of Consent: Withdraw consent for data processing at any time
To exercise these rights, contact us at privacy@zarpar.com.co
8. Cookies Policy
We use cookies and similar tracking technologies to:
- Remember your preferences and settings
- Maintain your login session
- Analyze platform usage and performance
- Deliver personalized content and advertisements
You can control cookies through your browser settings. However, disabling cookies may limit some platform functionality.
9. Third-Party Links
Our platform may contain links to third-party websites (e.g., service provider websites, social media). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.
10. Children's Privacy
Our services are not directed to children under 18. We do not knowingly collect personal information from minors. Bookings involving minors must be made by an adult responsible for the child.
11. International Data Transfers
Your information is primarily stored and processed in Colombia. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform. The "Last Updated" date at the top indicates when changes were last made.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us:
- Email: privacy@zarpar.com.co
- Phone: +57 310 123 4567
- Address: Cartagena, Colombia