Inner Forest LodgeAmazonian Retreat & Sanctuary

Legal information

Privacy Policy

This Privacy Policy explains how Inner Forest Lodge processes personal data related to this website, its forms, communications and analytics tools.

Last updated: September 9, 2026

1. Controller and identification

Data controller

The available details of the responsible organization are shown below. Information that does not yet formally exist, such as a Peruvian RUC, is not published until it is added to Organization information.

Trade name: Inner Forest Lodge
Administrative address: Peru
Privacy: privacidad@innerforestlodge.comprivacy@innerforestlodge.com

Inner Forest Lodge administers this website and the processing described in this policy. Public identity is sourced from Organization information: a legal name and RUC are shown only when a real value has been registered.

2. Scope of this policy

This policy applies to the website, public forms, newsletter, Complaints Book, first-party Retreat Analytics and related communications. It is interpreted under Peru's Law No. 29733 on Personal Data Protection and its Regulation approved by Supreme Decree No. 016-2024-JUS, together with any other applicable Peruvian rules. It does not replace specific notices that may become necessary for future processes involving special categories of data.

3. Data we process

Depending on the feature used, we may process name, email, country, optional phone number, inquiry reason and message, declared discovery source, service status and follow-up, newsletter subscription data, information required for the Complaints Book and limited technical data related to security and analytics. We do not request more information than is needed for the relevant function.

4. Contact and CRM

The Contact form may record name, email, country, optional phone number, reason, message, declared source and administrative follow-up. When Analytics is allowed, it may also associate campaign information such as UTM parameters, landing path and referrer. If Analytics is rejected, those technical attribution fields are not stored or reconstructed from the URL for form submission.

6. Complaints Book

The Complaints Book is a separate processing activity connected to consumer-protection obligations. It may require identification details, document information, email, contact data, product or service information and the content of the complaint or claim. Its retention is governed by the applicable legal period rather than the general analytics retention period.

7. Analytics and approximate origin

With Analytics permission we may record first-party events related to Retreats navigation, campaigns, packages viewed, displayed prices and conversions. We may also technically obtain a general estimate of the country from which the site is accessed for statistical, analytical and service-improvement purposes. This estimate does not use GPS or precise device geolocation.

8. Cookies and similar technologies

We use cookies and local-storage technologies that are necessary for security, operation and recording the visitor's privacy choice. Non-essential analytics technologies are used only when the visitor allows them. The choice can be changed at any time through the Privacy preferences button available on the site.

9. Third-party analytics

We may use third-party analytics services, such as Google Analytics, to understand site usage, measure performance and campaigns, and obtain historical statistics. These providers may use cookies or other technologies and process data under their own policies and conditions. When these tools are active, visitors can manage non-essential technologies through our Privacy preferences. Inner Forest Lodge does not assume or reproduce Google's internal technical policies, but it informs visitors that it uses those services and is responsible for incorporating them into the site.

10. Google Maps and Inner Forest Lodge locations

The site may embed Google Maps to show the location of our facilities or other places related to Inner Forest Lodge services. These maps serve an informational and transparency purpose. Our site does not request GPS or precise visitor geolocation in order to show these locations.

11. Security and abuse prevention

We apply technical and organizational measures intended to protect the site and its forms against unauthorized access, abuse and malicious automation. These may include Cloudflare Turnstile and our own security, authentication, session and request-limiting controls.

12. Purposes and optional information

We process information to answer inquiries, manage follow-up, handle complaints, administer subscriptions, provide requested functions, protect security, produce authorized statistics and improve the service. Required fields are identified in each form; optional fields may be left blank without preventing the main function where stated.

13. Technical providers and transfers

To operate the site we may rely on providers for infrastructure, hosting, frontend delivery, corporate email, security, maps and, where applicable, analytics. Some services may involve technical processing outside Peru. Inner Forest Lodge selects and configures these services according to operational needs and applicable obligations.

14. Information retention

As a general data-minimization rule, first-party analytics and temporary technical data covered by this policy are kept for up to 30 days from the last activity or relevant closure. Closed non-converted CRM inquiries are deleted after 30 days; active subscriptions are retained while valid and unsubscribe records may be purged after 30 days. Data subject to legal duties or an ongoing service relationship may be retained for a different period. In particular, Complaints Book information is kept for the applicable statutory period, currently no less than two years.

15. Your data rights

You may exercise your rights by writing to the Privacy channel shown on this page. The ordinary maximum response periods, counted from the day after the request is submitted, are: information, 8 business days; access, 20 business days; and correction, cancellation or objection, 10 business days. Except for the right to information, the rules allow one extension, duly justified and communicated within the period to be extended, for up to an equal period; therefore, the exceptional maximum may reach 40 business days for access and 20 business days for correction, cancellation or objection.

16. Minors and health data

The general Contact form is not intended for medical information or health histories. When a retreat or activity requires private health, dietary, or preparation information, it is handled through the participant's private access with controls separate from the Contact form. Where a process involves minors, the applicable representation and protection requirements will be followed.

17. Security and incidents

We maintain preventive measures and procedures to detect, contain and manage incidents that may compromise personal information. Where applicable law requires notification to an authority or affected individuals, the corresponding procedures and deadlines will be followed.

18. Changes and contact

This policy may be updated for legal, operational or technical changes. The current version will be published on this page with its last-updated date. For privacy questions you may write to either address of the same Privacy mailbox shown on this page.